Privacy Policy

Oceanblue Solutions, Inc. ("Oceanblue," "we," "us," or "our") operates the website at oceanbluecorp.com and provides enterprise IT solutions and staffing services. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you visit our website, use our platform, or engage with our services.

We take your privacy seriously. Please read this policy carefully. If you disagree with its terms, please discontinue use of our Site and services. By using our Site or services, you acknowledge that you have read and understood this Privacy Policy.

We collect information in several ways depending on how you interact with us:

2.1 Information You Provide Directly

• Job applications: name, email address, phone number, cover letter, and the resume file you upload. You do not need an account to apply
• Resume contents: work history, education, skills, certifications, and links included in the file
• Details you give a recruiter during the process: availability, pay expectations, work authorization status
• Contact form submissions: name, email address, phone number, company, job title, inquiry type, and your message
• Client account data: company name, billing address, tax identification, authorized contacts
• Communications: emails and notes from calls with our team
• Staff accounts: name, work email, phone number, and password. These are created by invitation for Oceanblue employees only; there is no public sign-up

2.2 Information Collected Automatically

• IP address: used for a few minutes to limit how often the application, resume upload, and contact forms can be submitted from one connection
• Log data: server logs that may include IP addresses, dates/times, browser type, and requested pages
• Browser storage: your cookie choice and similar preferences, as described in Section 8
• We do not use analytics or advertising trackers, and we do not build a profile of the pages you visit

2.3 Information from Third Parties

• Job boards and professional networks (e.g., LinkedIn) where you applied to one of our roles or made your profile available to recruiters
• Referrals from existing employees, contractors, or clients
• Background check providers (with your consent, where required by applicable law)
• Skills assessment platforms used during our recruitment process
• Publicly available professional information to verify credentials

Oceanblue uses your personal information for the following purposes:

For Candidates

• Evaluate your qualifications and match you with suitable job opportunities
• Read your resume with software that extracts your contact details, skills, and experience and scores how closely they fit a role. The score is a guide for the recruiter; the software does not reject or advance an application on its own
• Present your profile to client companies with appropriate positions
• Communicate updates about your applications and placement status
• Conduct onboarding for contract or direct-hire positions
• Process payroll and benefits for contractors placed through Oceanblue
• Comply with legal requirements including employment and tax law obligations

For Clients

• Deliver contracted staffing, consulting, or managed services
• Manage project communications, deliverables, and reporting
• Process invoices and payments
• Provide account management and customer support

For All Users

• Operate, maintain, and improve our website and platform
• Send administrative communications (application confirmations, replies to enquiries)
• Send marketing emails (with your consent, and you may opt out at any time)
• Detect, investigate, and prevent fraudulent activity and security incidents
• Comply with legal obligations and enforce our Terms of Service

If you are located in the European Economic Area (EEA) or United Kingdom, Oceanblue processes your personal data under the following legal bases:

• Contract Performance: Processing necessary to fulfill our staffing, consulting, or service agreements with you or your employer.
• Legitimate Interests: Processing for our legitimate business interests, such as fraud prevention, improving our services, and direct marketing to business contacts, where these interests are not overridden by your rights.
• Legal Obligation: Processing required to comply with applicable law, including employment, tax, and anti-money laundering regulations.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for marketing communications. You may withdraw consent at any time.

Oceanblue does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information in the following circumstances:

• Client Companies: We share candidate profiles (with candidate consent) with client employers in connection with specific job opportunities. Clients are contractually bound to use this information only for hiring purposes.
• Service Providers: We engage third-party vendors to help operate our business. This site runs on Amazon Web Services, which provides its hosting, database, file storage, staff sign-in, and email delivery, and resumes are read by a resume parsing and matching service. Other vendors support payroll processing and background checks. These vendors have access to personal data only as necessary to perform their functions and are contractually bound to protect it.
• Legal Requirements: We may disclose information when required by law, regulation, court order, or governmental authority, or to protect the rights, property, or safety of Oceanblue, our users, or others.
• Business Transfers: In connection with a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
• With Your Consent: We may share information with other third parties when you explicitly authorize us to do so.

All third-party service providers are required to maintain the confidentiality and security of your personal information and are prohibited from using it for any purpose other than providing services to Oceanblue.

Two items on this site load directly from other servers: the office map on the contact page (OpenStreetMap) and the site's typeface (Fontshare). When your browser requests them, those servers receive your IP address, as with any web request. We send them nothing else.

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods:

• Active candidate profiles: maintained while we are working with you and for 2 years after our last contact
• Placed contractor records: retained for 7 years following placement to comply with tax and employment law
• Job applications (unplaced): retained for 1 year from submission date
• Client engagement records: retained for 7 years following the end of the engagement
• Form submission counters (by IP address): deleted automatically within minutes
• Marketing communications preferences: retained until you opt out and for 3 years thereafter
• Background check results: deleted within 90 days of a final hiring decision

When personal information is no longer needed, we securely delete or anonymize it. You may request early deletion of your data subject to applicable legal obligations (see Section 7).

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal information.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention requirements.
• Right to Restriction: Request that we restrict processing of your data in certain circumstances.
• Right to Data Portability: Receive a copy of your data in a machine-readable format for transfer to another controller.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at hr@oceanbluecorp.com with the subject line "Privacy Rights Request." We will respond within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data violates applicable law.

Our Site uses cookies and browser storage to keep it working and to remember your choices. We do not use analytics or advertising cookies. We use the following types:

• Strictly Necessary Storage: Your cookie choice, and, for Oceanblue staff only, the sign-in session for the staff console. Cannot be disabled.
• Preference Storage: Remembers choices you make, such as a dismissed announcement. Kept across visits only with your consent.

You can manage cookie preferences through your browser settings or our cookie consent banner when you first visit the Site. Note that disabling certain cookies may affect Site functionality.

The emails this site sends, such as an application confirmation, carry no tracking pixels. The full list of what is stored is in our Cookie Policy.

Oceanblue implements industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit using TLS 1.2 or higher
• Encryption of sensitive data at rest using AES-256
• Access controls and multi-factor authentication for systems containing personal data
• Regular security assessments and penetration testing
• Employee training on data handling and security best practices
• Incident response procedures to detect and respond to security breaches
• AWS cloud infrastructure with SOC 2 Type II compliance

Despite these measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law, typically within 72 hours of discovery.

Oceanblue is headquartered in the United States. If you are located outside the US, your personal information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

Where we transfer personal data from the EEA, UK, or other jurisdictions with data transfer restrictions, we rely on appropriate safeguards including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with service providers that include appropriate transfer mechanisms
• Other lawful transfer mechanisms as may be required by applicable law

By submitting your personal information to us, you consent to such international transfers where permitted by law. You may contact us for more information about the specific safeguards we use.

Our Site and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at hr@oceanbluecorp.com.

If we discover that we have collected personal information from a child without verification of parental consent, we will take steps to delete that information promptly.

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you specific rights regarding your personal information:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources, the business purpose, and the third parties with whom we share it.
• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell personal information. We do not share personal information for cross-context behavioral advertising without your consent.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Sensitive Personal Information: We collect limited sensitive information (Social Security numbers for payroll, where applicable). We use it only for the purpose for which it was collected.

To submit a California privacy rights request, email hr@oceanbluecorp.com with the subject "California Privacy Rights Request." We will verify your identity and respond within 45 days. You may designate an authorized agent to submit requests on your behalf.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we update this policy, we will revise the "Effective" date at the top of this page.

For material changes, we will provide at least 30 days' notice by posting a prominent notice on our Site, emailing candidates and clients we are actively working with, or both. We encourage you to review this policy periodically to stay informed.

Your continued use of our Site or services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the changes, you must stop using our Site and services and may request deletion of your data.

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact our Privacy Team:

We will acknowledge receipt of your privacy inquiry within 5 business days and aim to resolve it within 30 days. For urgent matters, please call us directly.

1. October 1, 2026Brought in line with what this site does. It no longer mentions public accounts, usage analytics, location tracking, or email tracking pixels, none of which the site has. It now says that resumes are read and scored by software as a guide for recruiters, names Amazon Web Services as our hosting provider, and explains that the office map and some logos load from other servers.
2. April 1, 2026This version took effect.