Privacy Policy
Ocean Blue Corporation is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and what rights you have over your data.
Introduction
Ocean Blue Corporation ("Ocean Blue," "we," "us," or "our") operates the website at oceanbluecorp.com and provides enterprise IT solutions and staffing services. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you visit our website, use our platform, or engage with our services.
We take your privacy seriously. Please read this policy carefully. If you disagree with its terms, please discontinue use of our Site and services. By using our Site or services, you acknowledge that you have read and understood this Privacy Policy.
At a Glance
We collect your information to match candidates with job opportunities, deliver enterprise services to clients, and improve our platform. We do not sell your personal data. You have rights to access, correct, and delete your information.
Information We Collect
We collect information in several ways depending on how you interact with us:
2.1 Information You Provide Directly
- Account registration data: name, email address, password, phone number
- Profile and resume information: work history, education, skills, certifications, portfolio links
- Job applications: cover letters, availability, salary expectations, visa/work authorization status
- Contact form submissions: name, company, message, service interests
- Client account data: company name, billing address, tax identification, authorized contacts
- Communications: emails, chat transcripts, and notes from calls with our team
2.2 Information Collected Automatically
- Device information: IP address, browser type and version, operating system, device identifiers
- Usage data: pages visited, links clicked, time spent, referring URLs, search queries
- Log data: server logs that may include IP addresses, dates/times, browser type, and requested pages
- Location data: approximate geographic location derived from IP address
- Cookies and tracking technologies: as described in Section 8
2.3 Information from Third Parties
- Professional networks (e.g., LinkedIn) if you connect such accounts or apply through them
- Referrals from existing employees, contractors, or clients
- Background check providers (with your consent, where required by applicable law)
- Skills assessment platforms used during our recruitment process
- Publicly available professional information to verify credentials
How We Use Your Information
Ocean Blue uses your personal information for the following purposes:
For Candidates
- Evaluate your qualifications and match you with suitable job opportunities
- Present your profile to client companies with appropriate positions
- Communicate updates about your applications and placement status
- Conduct onboarding for contract or direct-hire positions
- Process payroll and benefits for contractors placed through Ocean Blue
- Comply with legal requirements including employment and tax law obligations
For Clients
- Deliver contracted staffing, consulting, or managed services
- Manage project communications, deliverables, and reporting
- Process invoices and payments
- Provide account management and customer support
For All Users
- Operate, maintain, and improve our website and platform
- Send administrative communications (account confirmations, security alerts)
- Send marketing emails and newsletters (with your consent, and you may opt out at any time)
- Analyze usage trends to enhance user experience
- Detect, investigate, and prevent fraudulent activity and security incidents
- Comply with legal obligations and enforce our Terms of Service
Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, Ocean Blue processes your personal data under the following legal bases:
- Contract Performance: Processing necessary to fulfill our staffing, consulting, or service agreements with you or your employer.
- Legitimate Interests: Processing for our legitimate business interests, such as fraud prevention, improving our services, and direct marketing to business contacts, where these interests are not overridden by your rights.
- Legal Obligation: Processing required to comply with applicable law, including employment, tax, and anti-money laundering regulations.
- Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for marketing communications. You may withdraw consent at any time.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods:
- Active candidate profiles: maintained while your account is active and for 2 years after your last login
- Placed contractor records: retained for 7 years following placement to comply with tax and employment law
- Job applications (unplaced): retained for 1 year from submission date
- Client engagement records: retained for 7 years following the end of the engagement
- Website usage logs and analytics: retained for 12 months
- Marketing communications preferences: retained until you opt out and for 3 years thereafter
- Background check results: deleted within 90 days of a final hiring decision
When personal information is no longer needed, we securely delete or anonymize it. You may request early deletion of your data subject to applicable legal obligations (see Section 7).
Your Rights
Depending on your jurisdiction, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal information.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention requirements.
- Right to Restriction: Request that we restrict processing of your data in certain circumstances.
- Right to Data Portability: Receive a copy of your data in a machine-readable format for transfer to another controller.
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, contact us at hr@oceanbluecorp.com with the subject line "Privacy Rights Request." We will respond within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.
You also have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data violates applicable law.
Data Security
Ocean Blue implements industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:
- Encryption of data in transit using TLS 1.2 or higher
- Encryption of sensitive data at rest using AES-256
- Access controls and multi-factor authentication for systems containing personal data
- Regular security assessments and penetration testing
- Employee training on data handling and security best practices
- Incident response procedures to detect and respond to security breaches
- AWS cloud infrastructure with SOC 2 Type II compliance
Despite these measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law, typically within 72 hours of discovery.
International Data Transfers
Ocean Blue is headquartered in the United States. If you are located outside the US, your personal information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.
Where we transfer personal data from the EEA, UK, or other jurisdictions with data transfer restrictions, we rely on appropriate safeguards including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements with service providers that include appropriate transfer mechanisms
- Other lawful transfer mechanisms as may be required by applicable law
By submitting your personal information to us, you consent to such international transfers where permitted by law. You may contact us for more information about the specific safeguards we use.
Children's Privacy
Our Site and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at hr@oceanbluecorp.com.
If we discover that we have collected personal information from a child without verification of parental consent, we will take steps to delete that information promptly.
California Residents — CCPA Rights
If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you specific rights regarding your personal information:
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources, the business purpose, and the third parties with whom we share it.
- Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt-Out of Sale or Sharing: We do not sell personal information. We do not share personal information for cross-context behavioral advertising without your consent.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
- Sensitive Personal Information: We collect limited sensitive information (Social Security numbers for payroll, where applicable). We use it only for the purpose for which it was collected.
To submit a California privacy rights request, email hr@oceanbluecorp.com with the subject "California Privacy Rights Request." We will verify your identity and respond within 45 days. You may designate an authorized agent to submit requests on your behalf.
Categories of Personal Information Collected (Past 12 Months)
Identifiers (name, email, IP), professional/employment information (resume, work history), internet activity (browsing on our Site), and inferences drawn from the above to create a candidate profile. No personal information sold.
Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we update this policy, we will revise the "Effective" date at the top of this page.
For material changes, we will provide at least 30 days' notice by posting a prominent notice on our Site, sending an email to registered users, or both. We encourage you to review this policy periodically to stay informed.
Your continued use of our Site or services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the changes, you must stop using our Site and services and may request deletion of your account.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact our Privacy Team:
Ocean Blue Corporation — Privacy Team
We will acknowledge receipt of your privacy inquiry within 5 business days and aim to resolve it within 30 days. For urgent matters, please call us directly.