Privacy Policy

Last updated: August 16, 2026

Tidearo respects your privacy and is committed to handling personal data responsibly, fairly, transparently and securely.

This Privacy Policy explains what personal data Tidearo collects and processes, why we use it, where it may come from, when it may be shared with other parties, how automated technologies are used, how international processing may occur, how long information may be retained, and what rights may be available to you.

This Privacy Policy applies to Tidearo websites, accounts, professional profiles, recruitment services, training services, communication tools, Feed, Atlas, paid services and other Tidearo features that refer to this Policy.

Tidearo is an international maritime platform. Privacy and data protection laws vary between countries. Additional rights, notices or requirements may therefore apply depending on where you are located.

1. Data Controller

Data Controller
Tidearo
Email: privacy@tidearo.com

In this Privacy Policy, “Tidearo”, “we”, “us” and “our” refer to Tidearo as the operator of the platform and its services.

If you have questions about this Privacy Policy, the processing of your personal data or your privacy rights, you can contact us using the email address above.

2. About Tidearo

Tidearo is an international maritime platform connecting:

• seafarers;

• shore-based professionals;

• shipping companies;

• crewing companies;

• employers and recruiters;

• training centres;

• other maritime organisations and professionals.

Tidearo provides professional profiles, CV tools, vacancies, applications, candidate discovery, matching, Send CV, Auto Apply, communication tools, training services, Feed, Atlas and other maritime professional services.

3. Who This Privacy Policy Applies To

This Privacy Policy applies when you use Tidearo as:

• a seafarer;

• a shore-based professional;

• a job candidate;

• an employer or recruiter;

• a company representative;

• a shipping or crewing company user;

• a training centre representative;

• a person making a course enquiry;

• a Feed user;

• a visitor to a public Tidearo page;

• another authorised Tidearo user.

It may also apply where Tidearo processes professional or business contact information obtained from publicly accessible, professional or business sources.

4. Personal Data We Process

The personal data Tidearo processes depends on which services you use.

We may process the following categories of information.

Account and Contact Data

This may include:

• first and last name;

• email address;

• telephone number;

• profile image or avatar;

• account type;

• user role;

• account status;

• verification status;

• account and profile preferences;

• login information;

• verification timestamps;

• authentication information.

Passwords are not stored in plain text.

Professional Profile Data

This may include:

• professional rank or position;

• maritime or shore-based career track;

• nationality;

• country;

• city;

• address;

• date of birth;

• gender;

• marital status;

• availability;

• professional experience;

• years of experience or years in rank;

• sea service;

• vessel experience;

• vessel names;

• IMO numbers;

• vessel types;

• vessel flags;

• previous employers;

• employment history;

• education;

• qualifications;

• licences;

• certificates;

• endorsements;

• visas;

• training history;

• skills;

• languages;

• software skills;

• salary expectations;

• preferred vessel types;

• preferred regions;

• contract preferences;

• professional summary;

• contact information.

Depending on the functionality you choose to use, Tidearo may also process additional employment or onboarding information, including:

• emergency contact details;

• next-of-kin details;

• clothing or equipment sizing information;

• physical information relevant to maritime employment;

• salary allocation information;

• bank account information provided for relevant employment or onboarding purposes.

CV Data

A CV uploaded to or created through Tidearo may contain:

• identity information;

• contact details;

• professional experience;

• employment history;

• sea service;

• vessel experience;

• education;

• qualifications;

• certificates;

• licences;

• skills;

• languages;

• availability;

• document information;

• professional preferences;

• other information included by the user.

Application Data

This may include:

• vacancy information;

• candidate and employer identifiers;

• CV;

• professional profile information;

• contact information;

• cover letter or message;

• application date;

• application source;

• application stage;

• application history;

• employer responses;

• recruitment status;

• rejection or hiring status;

• recruitment notes.

Communication Data

This may include:

• messages;

• message attachments;

• sender and recipient information;

• timestamps;

• read and delivery status;

• reply information;

• voice messages;

• call information;

• participant information;

• notification information.

Training Data

This may include:

• course enquiries;

• user identity;

• email address;

• telephone number;

• course information;

• enquiry message;

• enquiry status;

• communications with a training centre.

Payment and Transaction Data

This may include:

• products or services purchased;

• amount;

• currency;

• transaction identifier;

• transaction status;

• billing information;

• billing name;

• billing address;

• business or tax information where applicable;

• payment provider identifiers;

• refund information;

• payment failure information;

• limited payment-method metadata.

Usage and Interaction Data

This may include:

• job views;

• company page views;

• candidate or profile views;

• course views;

• contact reveals;

• impressions;

• Boost impressions;

• clicks;

• application activity;

• Send CV activity;

• Feed interactions;

• timestamps;

• user, candidate or company identifiers;

• referrer information;

• session or anonymous identifiers;

• relevant technical metadata.

Security and Technical Data

This may include:

• IP address;

• browser or user-agent information;

• authentication events;

• login activity;

• failed login activity;

• security events;

• consent records;

• versions of policies accepted;

• timestamps;

• administrative actions;

• rate-limit information;

• fraud or abuse-prevention information.

Not every category of information listed above applies to every Tidearo user.

5. Professional and Maritime Profiles

Tidearo allows seafarers and shore-based professionals to create structured professional profiles.

These profiles are designed to help users present their professional experience, qualifications, availability and career preferences and to interact with employers and other relevant Tidearo services.

Professional information may be used for:

• job applications;

• candidate discovery;

• job recommendations;

• candidate recommendations;

• matching;

• Auto Apply;

• Send CV;

• recruitment communication;

• pre-joining processes;

• other professional functionality requested by the user.

Users are responsible for keeping their professional information reasonably accurate and up to date.

Information such as availability, certificates, sea service, rank, visas and contact information should be updated when circumstances change.

6. CV Upload and CV Import

Tidearo allows users to upload CVs and use information contained in a CV to help create or update a Tidearo professional profile.

Tidearo may process supported document formats to:

• read the uploaded document;

• extract text;

• identify professional information;

• identify employment history;

• identify sea-service information;

• identify qualifications;

• identify certificates and document information;

• convert unstructured CV information into structured Tidearo profile fields.

Users should avoid including information in a CV that is unrelated to recruitment or professional purposes.

7. Automated CV Processing and Artificial Intelligence

Tidearo uses automated document-processing technologies and artificial intelligence to assist with CV import and extraction.

When you upload a CV, the document, text contained in the document or rendered document content may be processed by specialised technology providers supporting Tidearo.

This processing may be used to:

• extract text;

• identify personal and professional information;

• recognise sea-service records;

• identify education and qualifications;

• identify certificate or document information;

• structure information for use within Tidearo.

Automated extraction may contain errors.

You should review information created through automated CV processing and correct any inaccurate or incomplete information.

Automated CV processing does not make an employment or hiring decision.

Tidearo does not use CV extraction technology to decide that an employer must hire or reject a candidate.

8. Professional Documents

Tidearo may allow users to store professional or employment-related documents or related information.

Depending on the feature, these may include:

• passports or identity-related documents;

• seaman's books;

• professional licences;

• certificates;

• endorsements;

• visas;

• training certificates;

• education documents;

• sea-service attachments;

• medical fitness-related documents;

• vaccination-related documents;

• pre-joining documents;

• other professional documentation.

Tidearo may also process document metadata such as:

• document type;

• document number;

• issuing authority;

• issue date;

• expiry date;

• place of issue;

• filename;

• file type;

• file size;

• storage information;

• document status.

Document information may be used to organise professional records, identify expiry dates and compare available documentation with vacancy or onboarding requirements.

Unless Tidearo expressly states otherwise for a particular service, the presence of a document or document status within Tidearo does not mean that Tidearo has independently authenticated, certified or guaranteed the validity of that document.

9. Sensitive Personal Data

Some information used in maritime employment may be considered sensitive, special-category or otherwise specially protected personal data under applicable law.

For example, medical fitness or vaccination-related documents may reveal health information.

Certain identification and financial information may also receive additional protection under some national laws.

Tidearo processes sensitive information only where it is relevant to the requested Tidearo functionality or maritime employment purpose and where processing is permitted under applicable law.

Some jurisdictions may require additional notice, explicit consent, separate consent or another specific legal condition before sensitive personal data may be processed or disclosed.

Where such requirements apply, they apply in addition to this Privacy Policy.

Please do not upload sensitive information that is not reasonably necessary for the relevant professional or employment purpose.

10. Job Applications

When you apply for a vacancy through Tidearo, information necessary for the application may be made available to the relevant employer.

This may include:

• your professional profile;

• CV;

• contact information;

• cover letter or message;

• professional experience;

• qualifications;

• relevant application information.

Tidearo may retain information about the application and its progress, including status changes and recruitment history.

Employers may also maintain their own records concerning candidates and applications.

Once an employer receives your personal data and independently determines how it will use that information, the employer may have its own responsibilities under applicable privacy, employment and recruitment laws.

11. Send CV

Tidearo provides a Send CV service that allows a candidate to send a CV or professional information to selected or matched maritime companies.

When you use Send CV, Tidearo may process:

• your professional profile;

• rank or position;

• vessel or fleet preferences;

• nationality and other relevant professional criteria;

• CV;

• cover letter or message;

• selected recipients;

• delivery information;

• delivery history.

Tidearo may use an external email-delivery provider to deliver Send CV communications.

Information necessary to deliver the communication, including:

• recipient address;

• message content;

• candidate information;

• CV attachment where applicable;

may therefore be processed by a technology provider acting in support of Tidearo.

By using Send CV, you request Tidearo to make the relevant professional information available to the selected recipients.

Once a CV or other information has been delivered to an external employer, Tidearo may no longer control every copy independently stored or processed by that organisation.

12. Auto Apply

Tidearo provides an Auto Apply feature.

If you choose to enable Auto Apply, Tidearo may automatically identify eligible vacancies and submit applications based on your settings, professional information and relevant matching criteria.

Auto Apply may take into account information such as:

• rank or professional track;

• vessel experience;

• professional experience;

• qualifications;

• certificates and documents;

• employment preferences;

• salary preferences;

• nationality where relevant to vacancy requirements;

• availability;

• matching criteria;

• application limits;

• other Auto Apply settings.

When Auto Apply is enabled, an application may be submitted without separate manual confirmation of each individual vacancy.

Applications may be delivered:

• within Tidearo;

• by email;

• through another configured recruitment integration.

You can control whether Auto Apply is enabled using the available Tidearo settings.

Auto Apply does not decide:

• whether you will be interviewed;

• whether you will be shortlisted;

• whether you will be rejected;

• whether you will receive an employment offer;

• whether you will be hired.

Those decisions remain with the relevant employer.

13. Matching, Ranking and Recommendations

Tidearo uses automated rules, scoring and profiling to help candidates and employers discover relevant professional opportunities and profiles.

Depending on the feature, matching or ranking may consider information such as:

• professional rank or track;

• vessel experience;

• professional experience;

• qualifications;

• certificates and documents;

• salary preferences;

• nationality where relevant to vacancy requirements;

• visa or employment readiness;

• language information;

• profile completeness;

• recent activity;

• availability;

• vacancy requirements.

Tidearo may also use ranking signals associated with visibility or promotional services.

These systems may influence:

• the order in which vacancies are displayed;

• the order in which candidates are displayed;

• recommended vacancies;

• recommended candidates;

• matching scores;

• eligibility for Auto Apply or similar functionality.

Automated matching is intended to assist discovery and recruitment.

Tidearo does not make final hiring or rejection decisions on behalf of employers.

Where applicable law provides rights relating to automated processing or profiling, you may exercise those rights by contacting Tidearo.

14. Candidate Profile Visibility

Different Tidearo services may provide different levels of access to candidate information.

The information available to another user may depend on:

• account type;

• recruitment context;

• profile visibility;

• application relationship;

• platform permissions;

• contact-access functionality;

• the Tidearo feature being used.

Professional or contact information may also be provided to an employer when you:

• apply for a vacancy;

• use Send CV;

• enable Auto Apply;

• initiate or authorise another relevant recruitment interaction.

Tidearo uses access controls designed to restrict access to private areas and professional information.

Users should avoid including information in their professional profile that is unrelated to recruitment or unnecessary for their use of Tidearo.

15. Messages, Calls and Notifications

Tidearo may provide communication functionality including:

• direct messages;

• attachments;

• voice messages;

• calls;

• in-platform notifications;

• browser push notifications.

To provide these services, Tidearo may process:

• sender and recipient identifiers;

• message content;

• attachments;

• timestamps;

• delivery status;

• read status;

• reply information;

• call identifiers;

• participant information;

• notification information.

Some communication functionality may rely on technology providers that supply realtime communication, media storage or browser and device push infrastructure.

For push notifications, Tidearo may process technical information such as:

• push endpoint;

• encryption keys;

• browser or device information;

• notification preferences;

• delivery or failure status.

16. Tidearo Feed

Tidearo Feed allows users and organisations to publish and interact with professional or maritime-related content.

We may process:

• posts;

• text;

• images and other media;

• comments;

• likes and reactions;

• follows;

• reposts;

• saved content;

• reports;

• moderation information;

• author information.

Content published with public visibility may be accessible without a Tidearo account.

Public content may also be:

• shared by other users;

• indexed by search engines;

• cached;

• copied;

• stored by third parties outside Tidearo's control.

Do not publish confidential information, private professional documents or personal information that you do not want to make publicly accessible.

17. Automated Content Moderation

Tidearo may use automated systems and artificial intelligence technologies to classify and moderate content submitted to Feed or other publishing functionality.

Text and images may be processed to:

• classify content;

• identify prohibited content;

• identify potentially unsafe content;

• apply Tidearo content rules;

• determine whether additional review may be required.

Automated moderation may influence whether content:

• is published;

• is temporarily restricted;

• requires further review;

• is rejected under applicable platform rules.

This processing is used for platform safety, content quality and enforcement of Tidearo rules.

It does not make employment or hiring decisions.

18. Training Centres and Course Enquiries

Tidearo allows training centres to publish courses and receive enquiries.

If you submit an enquiry concerning a course, Tidearo may process and provide the relevant training centre with information such as:

• your identity;

• email address;

• telephone number;

• relevant course information;

• your enquiry or message;

• enquiry status;

• subsequent communications.

The training centre may use this information to respond to your enquiry and manage its relationship with you.

Where a training centre independently determines how it uses information received through Tidearo, its own privacy practices and legal responsibilities may also apply.

19. Company and Training Centre Accounts

If you represent an employer, shipping company, crewing company, training centre or another maritime organisation, Tidearo may process:

• representative name;

• business email;

• telephone number;

• job title or role;

• organisation membership;

• account permissions;

• invitations;

• activity information;

• organisation information;

• recruitment or training activity;

• billing information where relevant.

Certain organisation information may be publicly displayed where the organisation has a public Tidearo profile.

20. Information From Public and Business Sources

Tidearo may maintain information about:

• maritime companies;

• crewing agencies;

• shipping companies;

• training centres;

• other maritime organisations.

Some information may be obtained from publicly accessible, professional or business sources rather than directly from the organisation or person concerned.

This may include:

• organisation name;

• website;

• business address;

• business description;

• public telephone number;

• public email address;

• publicly identified business representative;

• source URL;

• other publicly available business information.

Tidearo may use this information to:

• maintain maritime directories;

• improve professional discovery;

• connect users with relevant maritime organisations;

• allow organisations to identify or claim relevant Tidearo profiles.

The fact that information is publicly available does not necessarily mean that it is excluded from applicable privacy protection.

If information concerning you has been obtained indirectly and you believe it is inaccurate or should not be held by Tidearo, you may contact us.

Where applicable law requires an additional direct notice concerning information obtained from another source, such requirements apply in addition to this Privacy Policy.

21. Payments, Subscriptions and Paid Services

Tidearo may process transaction information when you purchase:

• subscriptions;

• Boost services;

• Send CV services;

• promotional services;

• other paid Tidearo functionality.

Information may include:

• service purchased;

• amount;

• currency;

• transaction identifier;

• transaction status;

• billing information;

• billing name;

• billing address;

• business or tax information where applicable;

• payment provider identifiers;

• refund information;

• payment failure information.

Supported card payments may use a hosted payment service provider instead of Tidearo-controlled card-entry fields.

Tidearo may receive limited payment-method information such as:

• card brand;

• last four digits;

• expiry information;

• card country;

• payment provider identifiers.

When hosted checkout is used, complete card numbers and card security codes are entered into the payment provider's environment rather than Tidearo-controlled card-entry fields.

Payment providers process payment information according to their own security and legal obligations.

22. Usage and Analytics

Tidearo records certain platform activity to operate the service, provide statistics, maintain functionality and understand how Tidearo is used.

Depending on the feature, this may include:

• job views;

• company page views;

• candidate or professional profile views;

• course views;

• contact reveals;

• impressions;

• Boost impressions;

• clicks;

• application activity;

• Send CV activity;

• Feed interactions;

• timestamps;

• user, company or candidate identifiers;

• referrer information;

• anonymous or session identifiers;

• relevant technical metadata.

We may use this information to:

• provide statistics to users and organisations;

• measure service performance;

• measure promotional functionality;

• understand feature usage;

• prevent abuse;

• improve the Tidearo experience;

• improve Tidearo products and services.

23. Security and Audit Information

Tidearo may process technical and security information for security, fraud prevention, accountability and abuse prevention.

This may include:

• IP addresses;

• user-agent information;

• authentication events;

• login activity;

• failed login activity;

• suspicious activity;

• account security events;

• consent records;

• policy versions accepted;

• administrative actions;

• timestamps;

• rate-limit information;

• audit information.

Tidearo may use automated security and anti-abuse technologies, including CAPTCHA or challenge systems, to protect registration and other sensitive functionality.

Administrative and security actions may be recorded for:

• security;

• accountability;

• investigation;

• prevention of abuse;

• protection of users and Tidearo.

24. Cookies and Browser Storage

Tidearo uses cookies and browser storage where necessary to operate the platform.

These technologies may support:

• authentication;

• account security;

• maintaining sessions;

• workspace state;

• interface settings;

• anonymous session state;

• feature preferences;

• temporary drafts or interface state.

Tidearo may also use browser technologies such as:

• localStorage;

• sessionStorage;

• similar browser storage.

Information stored locally in your browser may remain on your device after you leave Tidearo.

If other people use the same browser profile or device, locally stored information may potentially be accessible to them.

If Tidearo introduces non-essential analytics, advertising or similar technologies that require prior consent under applicable law, appropriate information and controls will be provided where legally required before those technologies are used.

25. Why We Process Personal Data

Tidearo processes personal data for purposes including the following.

Providing Tidearo Services

To:

• create and manage accounts;

• provide professional profiles;

• process and import CVs;

• organise professional documentation;

• provide job applications;

• provide Send CV;

• provide Auto Apply;

• provide matching and recommendations;

• provide recruitment tools;

• provide training functionality;

• provide communications;

• provide Feed;

• provide Atlas-related functionality;

• provide paid services;

• process transactions;

• provide user support.

Recruitment and Professional Discovery

To:

• connect candidates and employers;

• identify relevant professional opportunities;

• identify relevant candidates;

• process job applications;

• provide matching and recommendations;

• maintain recruitment history;

• enable candidate and employer communication.

Safety and Security

To:

• authenticate users;

• protect accounts;

• detect suspicious activity;

• prevent fraud;

• prevent abuse;

• moderate content;

• enforce Tidearo rules;

• investigate security events;

• maintain security and audit records.

Analytics and Product Improvement

To:

• understand how Tidearo is used;

• measure engagement;

• measure service performance;

• diagnose problems;

• improve usability;

• improve existing services;

• develop Tidearo functionality.

Legal Purposes

To:

• comply with applicable laws;

• maintain records required by law;

• respond to valid legal requests;

• prevent or investigate unlawful activity;

• establish, exercise or defend legal rights.

26. Legal Grounds for Processing

Privacy laws differ between countries and do not always use identical legal bases.

Where applicable law requires a specific legal basis for processing, Tidearo relies on an appropriate basis available under that law.

Depending on the processing activity and jurisdiction, this may include:

Performance of a Contract or Providing a Requested Service

This may apply where processing is necessary to provide functionality requested by you, such as:

• maintaining your account;

• processing a CV you upload;

• handling an application;

• providing Send CV;

• providing Auto Apply;

• providing messaging;

• processing a course enquiry;

• providing a subscription or another paid service.

Consent

Tidearo may rely on consent where consent is required or is the appropriate legal basis.

Where applicable law gives you the right to withdraw consent, you may do so.

Withdrawal of consent does not normally affect processing that was lawful before consent was withdrawn.

Legitimate Interests

Where recognised by applicable law, Tidearo may process information where this is reasonably necessary for legitimate interests and those interests are not overridden by your rights.

Examples may include:

• operating an effective maritime professional platform;

• platform security;

• fraud prevention;

• relevant professional discovery;

• service analytics;

• operation of maritime directories;

• product improvement;

• protection of Tidearo's legal rights.

Legal Obligation

Tidearo may process information where processing is necessary to comply with a legal or regulatory requirement.

Other Lawful Grounds

Certain jurisdictions recognise other lawful grounds for processing.

Where those laws apply, Tidearo may rely on a lawful basis available under that jurisdiction.

Sensitive personal data may be subject to additional conditions or restrictions.

27. Who We Share Personal Data With

Depending on the Tidearo services you choose to use, personal data may be shared with the following categories of recipients.

Employers and Maritime Companies

Information may be provided where necessary for:

• job applications;

• Send CV;

• Auto Apply;

• recruitment communication;

• candidate discovery;

• other recruitment activity initiated through Tidearo.

Training Centres

Information may be provided where you submit a course enquiry or otherwise request interaction with a training provider.

AI and Document-Processing Providers

Personal data may be processed by specialised service providers where necessary to support:

• CV extraction;

• document processing;

• content classification;

• content moderation.

Email and Communication Providers

Service providers may process information required to:

• send account communications;

• deliver applications;

• deliver Send CV communications;

• provide realtime communication;

• provide notifications.

Payment Providers

Payment service providers may process information necessary for:

• payments;

• payment verification;

• refunds;

• fraud prevention;

• transaction management.

Cloud Infrastructure and Storage Providers

Technology providers may process or store data required to operate Tidearo infrastructure and file services.

Security and Anti-Abuse Providers

Security providers may process information required to protect:

• registration;

• authentication;

• accounts;

• Tidearo infrastructure;

• other sensitive platform functionality.

Authorised Tidearo Personnel and Administrators

Personal data may be accessed where reasonably necessary for:

• platform administration;

• user support;

• security;

• moderation;

• investigation;

• operation of Tidearo services.

Authorities and Legally Authorised Recipients

Tidearo may disclose personal data where required or permitted by applicable law, valid legal process or a binding lawful request.

We aim to limit access and disclosure to information reasonably necessary for the relevant purpose.

28. Information Shared With Employers and Other Organisations

Some Tidearo services are specifically designed to transfer information to another organisation.

Examples include:

• applying for a job;

• using Send CV;

• enabling Auto Apply;

• submitting a course enquiry.

When you intentionally use these services, relevant personal and professional information may be provided to the organisation involved.

After an employer, training centre or other independent organisation receives the information and determines its own purposes for processing it, Tidearo may no longer control every copy of that information.

Deleting or deactivating data within Tidearo does not automatically delete copies already received and independently retained by an external organisation.

You may need to contact that organisation separately to exercise privacy rights concerning information it independently controls.

29. International Processing and Transfers

Tidearo serves the international maritime industry.

Candidates, employers, training centres and technology providers may be located in different countries.

Personal data may therefore be processed or received outside your country of residence when, for example:

• you apply to an employer located in another country;

• you use Send CV with an international employer;

• Auto Apply submits an application to an international employer;

• a training centre is located in another country;

• a technology provider operates internationally;

• infrastructure used to provide Tidearo operates in another jurisdiction.

Different countries impose different requirements on international transfers of personal data.

Depending on applicable law, international transfers may require measures such as:

• an adequacy or equivalent determination;

• contractual safeguards;

• standard contractual clauses;

• certification;

• consent;

• a transfer assessment;

• regulatory notification;

• regulatory approval;

• another legally recognised transfer mechanism.

Where applicable law requires additional information or consent concerning a particular international transfer, the relevant requirement applies in addition to this Privacy Policy.

30. Public Tidearo Content

Some Tidearo content is intended for public access.

Depending on the relevant feature and visibility settings, this may include:

• vacancies;

• company profiles;

• training centre profiles;

• courses;

• public Feed posts;

• Atlas information;

• public vessel reviews;

• public comments.

Public information may:

• be accessible without signing in;

• appear in search-engine results;

• be shared through social networks or messaging services;

• be cached;

• be copied;

• be independently stored by third parties.

Candidate recruitment profiles and publicly published content may be subject to different visibility rules.

Do not publish confidential information or information that you do not want to make publicly accessible.

Removing information from Tidearo does not guarantee immediate removal of information already cached or independently stored by search engines or other third parties.

31. How Long We Keep Personal Data

Different categories of information may need to be retained for different periods.

Retention depends on factors including:

• the category of information;

• the purpose for which it was collected;

• whether your account remains active;

• ongoing recruitment activity;

• job applications;

• Send CV activity;

• Auto Apply activity;

• communications;

• security requirements;

• fraud-prevention requirements;

• financial and accounting requirements;

• disputes or legal claims;

• operation of the relevant Tidearo service;

• applicable legal requirements.

Some technical records, tokens and analytics information may have their own expiration or retention periods.

Other account, recruitment, communication, document or transaction information may remain stored while reasonably necessary for the relevant Tidearo purpose or until an applicable deletion process is completed.

Account deactivation does not automatically delete all information associated with an account.

Personal data already sent to another organisation may remain in that organisation's systems independently of Tidearo.

32. Account Deactivation

Tidearo may provide functionality to deactivate an account.

Account deactivation is not the same as deletion of all personal data.

Depending on the account type, deactivation may:

• disable normal account access;

• make a professional profile unavailable or private;

• archive or hide certain vacancies;

• archive or hide certain courses or content;

• stop normal use of the account.

Information may continue to be retained after deactivation, including where relevant:

• account information;

• professional profile information;

• CV information;

• professional documents;

• job applications;

• Send CV records;

• Auto Apply records;

• messages and communication data;

• Feed activity;

• training enquiries;

• usage and analytics information;

• transactions;

• security and audit information.

A privacy request for deletion or erasure is treated separately from ordinary account deactivation.

33. Requests for Deletion or Erasure

Where applicable law gives you the right to request deletion or erasure of personal data, you may submit a request to:

privacy@tidearo.com

Deletion rights may be subject to legal limitations.

Tidearo may need to retain certain information where permitted or required for purposes such as:

• compliance with law;

• transaction and accounting records;

• fraud prevention;

• platform security;

• dispute resolution;

• establishment, exercise or defence of legal claims;

• enforcement of agreements.

We may need to verify your identity before processing a deletion request.

Information already received by an employer, training centre or another external recipient may need to be addressed directly with that organisation.

34. Your Privacy Rights

The privacy rights available to you depend on applicable law.

Depending on your country or region, you may have the right to:

• be informed about how your personal data is processed;

• obtain confirmation that personal data about you is being processed;

• access personal data;

• receive a copy of personal data;

• correct inaccurate information;

• complete incomplete information;

• request deletion or erasure;

• request anonymisation or blocking where applicable law provides such rights;

• request restriction or suspension of processing;

• object to certain processing;

• withdraw consent where processing is based on consent;

• request portability of eligible personal data;

• object to certain automated processing or profiling;

• request human review where applicable law provides such a right;

• obtain information about recipients or categories of recipients;

• request information concerning international transfers;

• opt out of legally defined sale or sharing where applicable law provides such a right;

• limit certain processing of sensitive information where applicable law provides such a right;

• lodge a complaint with a competent privacy or data protection authority;

• exercise other rights provided by applicable privacy law.

Not every right applies in every jurisdiction or in every circumstance.

35. European Economic Area and United Kingdom

Where the GDPR, UK GDPR or equivalent European privacy rules apply, you may have rights including:

• access;

• rectification;

• erasure;

• restriction of processing;

• objection;

• data portability;

• withdrawal of consent;

• rights relating to certain automated decision-making and profiling;

• the right to lodge a complaint with a competent supervisory authority.

Where processing relies on legitimate interests, you may have the right to object in circumstances provided by law.

Where required by applicable law, you may also request information about safeguards used for international transfers.

36. Philippines

Where Philippine privacy law applies, you may have rights including:

• the right to be informed;

• the right to access;

• the right to object;

• the right to rectify;

• the right to erasure or blocking;

• the right to data portability;

• the right to file a complaint;

• other rights or remedies provided by applicable law.

Information relating to certain automated decision-making or profiling may also be subject to additional transparency requirements.

37. China

Where China's Personal Information Protection Law or related privacy rules apply, you may have additional rights and protections concerning:

• information and explanation;

• access and copying;

• correction;

• deletion;

• withdrawal of consent;

• sensitive personal information;

• automated decision-making;

• disclosure to another personal information processor;

• international transfers.

Certain processing activities may require a supplemental notice or separate consent.

Where required by applicable law, those requirements apply in addition to this Privacy Policy.

38. India

Where India's Digital Personal Data Protection framework applies, the rights and obligations applicable to Tidearo and users depend on the provisions in force at the relevant time.

These may include requirements or rights relating to:

• clear notice;

• consent;

• withdrawal of consent;

• access to information concerning processing;

• correction;

• erasure;

• grievance handling;

• security safeguards;

• international processing.

Tidearo may update privacy notices and controls as additional requirements become applicable.

39. Asia-Pacific

Users in jurisdictions including Singapore, Japan, South Korea, Hong Kong, Malaysia, Indonesia, Vietnam, Australia and New Zealand may have additional privacy rights under local law.

Depending on the relevant jurisdiction, these may include:

• notice;

• access;

• correction;

• deletion;

• objection;

• portability;

• consent withdrawal;

• rights relating to automated processing;

• complaint rights;

• additional safeguards for international transfers.

Where applicable local law provides stronger rights than the general provisions of this Privacy Policy, those local rights continue to apply.

40. Middle East, Türkiye and Africa

Users in jurisdictions including Türkiye, the United Arab Emirates, Saudi Arabia, Oman and South Africa may have additional rights or protections under local privacy laws.

These may concern:

• transparency;

• consent;

• lawful processing;

• access;

• correction;

• deletion;

• sensitive personal information;

• automated processing;

• security;

• international transfers;

• complaint rights.

Additional regulatory requirements may apply independently of this Privacy Policy.

41. Americas

Users in Canada, Brazil, California and other jurisdictions in the Americas may have additional rights under applicable privacy laws.

Depending on the jurisdiction, these may include rights to:

• know what personal information is processed;

• know why it is processed;

• access information;

• correct information;

• request deletion;

• request portability;

• withdraw consent;

• object to certain processing;

• receive information about disclosures;

• exercise rights relating to automated processing;

• opt out of legally defined sale or sharing;

• limit certain processing of sensitive information;

• exercise privacy rights without unlawful discrimination.

Rights vary between countries, states and provinces.

42. Other Countries and Regions

Tidearo is intended for an international maritime community.

If privacy law applicable to you provides rights or protections beyond those specifically described in this Privacy Policy, those rights are not excluded merely because your country is not individually named.

Applicable local law continues to apply.

43. How to Exercise Your Privacy Rights

To submit a privacy request, contact:

privacy@tidearo.com

Please describe your request and provide sufficient information to identify the relevant Tidearo account or information.

To protect personal data from unauthorised disclosure or deletion, Tidearo may ask you to verify your identity before processing certain privacy requests.

Where permitted by law, a request may be limited or refused where:

• identity cannot reasonably be verified;

• fulfilling the request would adversely affect another person's protected rights;

• retention is required by law;

• another legal exception applies;

• the request is subject to another lawful limitation.

Where applicable law specifies a deadline for responding to a privacy request, Tidearo will handle the request in accordance with the applicable requirement.

44. Data Export

Tidearo may provide certain account data-export functionality.

Automated exports may contain only information supported by the relevant export feature and may not necessarily contain every category of personal data processed by Tidearo.

If you require access to additional personal data beyond information available through account tools, you may submit a privacy request to:

privacy@tidearo.com

45. Automated Processing and Your Rights

Tidearo uses automated processing for functionality including:

• CV extraction;

• candidate and job matching;

• ranking;

• recommendations;

• Auto Apply eligibility and submission;

• document-expiry or requirement checks;

• content classification;

• content moderation.

These systems may influence:

• which opportunities are displayed;

• which candidates are displayed;

• ranking within search or recommendation results;

• which applications Auto Apply submits;

• whether content can be published immediately.

Tidearo does not use these systems to make the final decision that a candidate must be hired or rejected for employment.

Where applicable law provides additional rights concerning profiling or automated decision-making, you may exercise those rights by contacting Tidearo.

46. How We Protect Personal Data

Tidearo uses technical and organisational measures designed to protect personal data against:

• unauthorised access;

• unauthorised disclosure;

• accidental loss;

• alteration;

• misuse;

• destruction.

Depending on the relevant system, these measures may include:

• secure password hashing;

• authentication controls;

• email verification;

• session controls;

• role and permission controls;

• private file-storage mechanisms;

• access checks;

• rate limiting;

• anti-abuse controls;

• security logging;

• audit records.

No internet service, network or electronic storage system can guarantee absolute security.

Users are responsible for protecting their account credentials and should contact Tidearo promptly if they believe their account has been compromised.

47. Security Incidents

If Tidearo becomes aware of a personal-data security incident, we may:

• investigate the incident;

• take steps to contain it;

• reduce potential impact;

• restore security;

• take additional appropriate action.

Where applicable law requires notification to affected users, a privacy authority or another competent authority, Tidearo will follow the applicable legal requirements.

48. Information About Other People

Some Tidearo functionality may allow you to provide personal information concerning another person.

Examples may include:

• next-of-kin details;

• emergency contacts;

• professional references;

• company representatives.

You should provide another person's personal information only where you have an appropriate reason and, where required, permission or another lawful basis to do so.

Do not upload another person's:

• CV;

• identity document;

• medical document;

• professional certificate;

• other private personal information;

without appropriate authority.

49. Children's Privacy

Tidearo is a professional maritime, recruitment and training platform and is not designed primarily for children.

Age requirements and rules concerning children's personal data vary between countries.

Where applicable law imposes specific requirements concerning the processing of children's personal data, those requirements apply.

If you believe personal data relating to a child has been provided to Tidearo in circumstances that are not permitted by law, contact:

privacy@tidearo.com

50. Third-Party Websites and Services

Tidearo may contain links to third-party websites or services, including:

• employer websites;

• training centre websites;

• course booking pages;

• recruitment systems;

• maritime services;

• other external professional services.

When you leave Tidearo and interact directly with another organisation, that organisation's own terms and privacy practices may apply.

Tidearo does not control the independent privacy practices of third-party websites and services.

51. Changes to This Privacy Policy

Tidearo may update this Privacy Policy from time to time.

Changes may be made because of:

• changes to Tidearo services;

• new functionality;

• changes to data-processing practices;

• changes to technology;

• security requirements;

• changes in applicable law.

When this Privacy Policy changes materially, Tidearo will update the Last updated date.

Additional notice will be provided where required by applicable law.

Tidearo may also maintain records showing which version of this Privacy Policy was presented to or accepted by a user.

52. Contact Us

If you have questions about this Privacy Policy, want to exercise a privacy right, or have concerns about how Tidearo processes personal data, contact:

Data Controller
Tidearo
Email: privacy@tidearo.com

Where applicable law gives you the right to complain to a privacy or data protection authority, you may also contact the competent authority responsible for your country or region.