We take your privacy very seriously. Please read this privacy policy carefully as it
contains important information on how and why we collect, store, use and share your
personal data. It also explains your rights regarding your personal data and what to
do if you have a complaint.
This privacy policy does not apply to any third-party websites that may have links to
our own website.
We take your privacy very seriously. Please read this privacy policy carefully as it
contains important information on how and why we collect, store, use and share your
personal data. It also explains your rights regarding your personal data and what to
do if you have a complaint.
This privacy policy does not apply to any third-party websites that may have links to our own website.
We are the Hill Robinson group of companies, of which the parent company is Hill
Robinson Group Ltd.
We provide professional services within the superyacht industry, including: yacht
management; charter management; project management; sales brokerage; charter
brokerage; aircraft management; and personnel recruitment/placement,
management and training. We also provide other specialist services such as:
private estate management; employment services; maritime communications; and
procurement.
We collect, store and use certain personal data about you. When we do so we must
comply with the applicable data protection laws, which include the EU and UK
General Data Protection Regulations and the equivalent laws in Guernsey, the Isle
of Man, Monaco and Saudi Arabia.
Our services and website are not aimed at children. If you are under 18 years old
and you want further information about how we might use your data, please contact
us (see section 22 How to contact us).
We use the following key terms in this policy
We, us, our
Hill Robinson Group Ltd (of 2nd Floor, West Wing, Dorey Court, Admiral Park, St Peter Port, Guernsey, GY1 2HT) and all of its subsidiary companies (see section 13 ‘Who we share your personal data with’)
Personal data
Any information relating to an identified or identifiable individual
Special category personal data
Personal data revealing racial or ethnic origin, political opinions, religious beliefs, philosophical beliefs or trade union membership; genetic data; biometric data
(where used for identification purposes); data concerning health, sex life or sexual orientation
Data subject
The individual who the personal data relates to
You, your
As the context dictates, our customers and individuals associated with them,
contacts, job seekers, job applicants, employees, suppliers and any other
individuals whose personal data we collect, store, and use in the course of
providing our services
The personal data we collect, store and use about you might include the following
categories:
• your name and contact information, including address, email address and
telephone number;
• information to enable us to check and verify your identity, including your
date of birth, your sex and any other information contained in your passport,
identity card and/or other forms of identification;
• your marital status;
• personal data falling within the above categories relating to your
spouse/partner and dependents;
• your gender identity and pronoun preferences, if you choose to give them to
us;
• next of kin, emergency contact and beneficiary information;
• occupation and location of employment or workplace;
• bank account details, payroll records, tax status and social security
information;
• salary, annual leave, pension and benefits information;
• start and end dates of periods of employment or other work;
• recruitment information, including right to work documentation, previous
employment details, references and other information included in a
CV/resume or cover letter or as part of the application process;
• immigration status, including information relating to visas;
• employment records, including job titles, work history, working hours,
training records, compensation and performance history, disciplinary and
grievance information;
• information relating to and/or contained in certificates of competence,
licences or other professional qualifications held, including any driving
licence;
• details of any visible tattoos;
• information to enable us to undertake credit or other financial checks on
you;
• CCTV footage and other information obtained through electronic means
such as swipe card records;
• location data;
• your billing information, transaction and payment details (including card or
bank information for transfers and direct debits);
• your contact history, purchase history and saved items;
• information from social media accounts you link to us;
• information about how you interact with and use our website, products and
services;
• information about your use of our information and communications
systems, including your IP addresses;
• audio and/or video recordings, e.g. of calls and/or virtual meetings;
• photographs and videos;
• your responses to surveys, competitions and promotions.
We may also collect and store the following “special categories” of more sensitive
personal data:
• information about your race or ethnicity, religious beliefs, sexual orientation
and political opinions;
• information about trade union membership;
• information about your health, including any medical condition, health and
sickness records, smoking habits, alcohol consumption and drug use;
• genetic information and biometric data;
• information about criminal convictions and offences.
The main purpose of collecting, storing and using your personal data is to pursue our business interests, including by providing our professional services and fulfilling our legal and contractual obligations. However, we may collect, store and use your personal data for any of the purposes set out in section 8. If you do not provide personal data we ask for, it may delay or prevent us from providing our services or fulfilling our legal and contractual obligations.
We collect most of the above information directly from you.
However, we may also collect information:
• from publicly accessible sources, e.g. companies registries, professional
accreditations, your company website or your social networks;
• from your current and/or former employer(s);
• from someone acting on your behalf, e.g. your bank, your insurers or your
professional advisers;
• from someone acting on our behalf, e.g. our insurers or our professional
advisers;
• from a third party, e.g. a recruitment agency, a credit reference agency or a
vetting agency;
• from a government or law enforcement department or agency;
• via our website—we use cookies and similar technologies on our website (for more information on cookies, please see our Cookie Policy – Hill Robinson.
• via our security, information technology (IT) systems, e.g.:
- from door entry systems and reception logs;
- through automated monitoring of our websites and other technical
systems, such as our computer networks and connections, CCTV
and access control systems, communications systems, email and instant messaging systems.
In some circumstances, we may ask your doctor or other medical professional to send us a report. We will only do this if you give us your consent first.
Under data protection law, we can only use your personal data if we have a proper
reason, e.g.:
• for our legitimate interests or those of a third party;
• to fulfil our contract with you or take steps at your request before entering into
a contract;
• to comply with our legal and regulatory obligations;
• where you have given consent—where we need your consent, we will ask for
it separately from this privacy policy and you can withdraw your consent at
any time.
A legitimate interest is when we have a business or commercial reason to use your
personal data, as long as this is not overridden by your own rights and interests. If
required, we will carry out an assessment when relying on legitimate interests, to
balance our interests against your own. You have the right to object to processing
based on legitimate interests but we are not required to comply with your objection
if we have compelling legitimate grounds for continuing such processing which
override your interests, rights and freedoms or the processing is required to
establish, exercise or defend legal claims.
We may collect, store, use and share your personal data for the following purposes:
• Making decisions about your recruitment, appointment or engagement
• Determining your terms of appointment or engagement
• Checking you are legally entitled to work in relevant countries
• Paying you and, if you are an employee, deducting tax and social security
contributions
• Administering employee benefits
• Making travel (including visa) arrangements on your behalf
• Arranging necessary security passes
• Conducting performance reviews, managing performance and determining
performance requirements
• Making decisions about remuneration
• Assessing qualifications for a particular job or task, including decisions
about promotions
• Education, training and development requirements
• Administering participation in Company activities and clubs
• Making decisions about your continued employment or engagement
• Gathering evidence for possible grievance or disciplinary hearings
• Ascertaining your fitness to work
• Managing sickness absence
• Complying with health and safety obligations
• Preventing fraud
• Monitoring your use of our information and communication systems to
ensure compliance with our IT policies
• Ensuring network and information security, including preventing
unauthorised access to our computer and electronic communications
systems and preventing malicious software distribution
• Conducting data analytics studies to review and better understand
employee retention and attrition rates
• Making arrangements for the termination of our working relationship
• Facilitating payroll and invoicing processes
• Administering a contract we have entered into with you
• Managing insurance claims
• Dealing with legal disputes
Our reasons and legitimate interests for collecting, storing, using and sharing your
personal data:
• Fulfilling contracts
• Our legal duty
• Our legitimate interests:
- Managing our relationship with you
- Managing our relationships with our existing and prospective clients
and/or their businesses
- Managing our relationships with our existing and potential suppliers
and/or other third parties
- Being efficient about how we fulfil our contracts
- Being efficient about how we fulfil our legal duties
We may collect, store, use and share your personal data for the following purposes:
• Assessing your personal data against open vacancies to determine your
suitability
• Verifying certain elements of your personal data, such as references and
qualifications, for prospective employers
• Providing your personal data to prospective employers
• Sending you job recommendations, relevant market intelligence and other
work-seeking-related services and communications
• Contacting you in relation to future vacancies
• Administering a contract we have entered into with you
• Managing insurance claims
• Dealing with legal disputes
Our reasons and legitimate interests for collecting, storing, using and sharing your
personal data:
• Fulfilling contracts
• Our legal duty
• Our legitimate interests:
- Managing our relationship with you
- Managing our relationships with prospective employers
- Managing our relationships with other third parties
- Being efficient about how we fulfil our contracts
- Being efficient about how we fulfil our legal duties
We may collect, store, use and share your personal data for the following purposes:
• Conducting customer due diligence before we act for you (including identity,
anti-money laundering, sources of wealth/funds and fraud
detection/prevention)
• Providing our products and services to you
• Developing new ways to meet your needs and to grow our business
• Developing and carrying out marketing activities
• Studying how you use products and services from us and other
organisations
• Providing advice or guidance about our products and services
• Developing and managing our brands, products and services.
• Testing new products or services
• Seeking your views or comments on the products and services we provide
• Managing how we work with other companies that provide services to us
• Keeping our records up to date
• Facilitating invoicing processes
• Making and managing payments on your behalf
• Managing fees, charges and interest due on any monies you owe us
• Administering a contract we have entered into with you
• Preventing fraud
• Managing insurance claims
• Dealing with legal disputes
Our reasons and legitimate interests for collecting, storing, using and sharing your
personal data:
• Fulfilling contracts
• Our legal duty
• Our legitimate interests:
- Managing our relationship with you or your business
- Deciding which of our products and services may interest you
- Informing you about our products and services
- Developing new products and services, and deciding what we charge
for them
- Being efficient about how we fulfil our contracts
- Being efficient about how we fulfil our legal duties
We may collect, store, use and share your personal data for the following purposes:
• Conducting supplier due diligence before we engage you (including identity,
anti-money laundering, sources of wealth/funds and fraud
detection/prevention)
• Procuring your products and services from you
• Studying how you deliver products and services to us and other
organisations
• Testing new products or services
• Keeping our records up to date
• Facilitating invoicing processes
• Making and managing payments to you
• Administering a contract we have entered into with you
• Preventing fraud
• Managing insurance claims
• Dealing with legal disputes
Our reasons and legitimate interests for collecting, storing, using and sharing your
personal data:
• Fulfilling contracts
• Our legal duty
• Our legitimate interests:
- Managing our relationship with you or your business
- Deciding which of your products and services may interest us
- Being efficient about how we fulfil our contracts
- Being efficient about how we fulfil our legal duties
We may collect, store, use and share your personal data for the following purposes:
• Managing our business risk
• Obeying laws and regulations that apply to us
• Making and managing payments on our own account
• Collecting and recovering money that is owed to us
• Running our business in an efficient and proper way (including managing
our financial position, business capability, business development,
communications, corporate governance, accounting and audit)
• Responding to complaints and seeking to resolve them
• Exercising our rights set out in agreements or contracts
• Managing insurance claims
• Dealing with legal disputes
• Responding to regulatory or legal obligations or court orders
Our reasons and legitimate interests for collecting, storing, using and sharing your
personal data:
• Fulfilling contracts
• Our legal duty
• Our legitimate interests:
- Managing our relationship with you
- Managing our relationships with our existing and prospective clients
and/or their businesses
- Managing our relationships with our existing and potential suppliers
and/or other third parties
- Complying with regulations that apply to us
- Being efficient about how we fulfil our contracts
- Being efficient about how we fulfil our legal duties
Where we process special category personal data (see Section 3 “Terminology”),
we will also ensure we are permitted to do so under the applicable data protection
laws, e.g.
• we have your explicit consent;
• The processing is necessary to perform or exercise obligations or rights
which are imposed or conferred by law in connection with employment,
social security or social protection;
• the processing is necessary to protect your (or someone else’s) vital
interests where you are physically or legally incapable of giving consent;
• the processing is necessary to establish, exercise or defend legal claims;
• the processing is necessary for reasons of substantial public interest, e.g.
equal opportunities monitoring.
Where we process information relating to criminal convictions and offences we will
also ensure we are permitted to do so under the applicable data protection laws,
e.g.:
• we have your explicit consent;
• the processing is necessary to perform or exercise obligations or rights
which are imposed or conferred by law in connection with employment,
social security or social protection;
• the processing is necessary to establish, exercise or defend legal claims;
• you have already made the information public.
Automated decision-making takes place when an electronic system uses personal data to make a decision without human intervention. You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and appropriate measures are in place to safeguard your rights. We do not envisage that any decisions will be taken about you using automated means, however we will notify you in writing if this position changes
We may use your personal data to send you updates (e.g. by email, text message, telephone, post or social media channels) about our services, including exclusive offers, promotions or new services.
We have a legitimate interest in using your personal data for marketing purposes (see section 7 How and why we use your personal data). This means we do not need your consent to send you marketing information unless we want to send it to you by electronic means and none of the relevant exceptions applies, in which case we will ask you for your consent before sending it to you in this way.
In all cases, you have the right to opt out of receiving marketing communications at any time by:
• contacting us at enquire@hillrobinson.com; or
• using the ‘unsubscribe’ link in emails or ‘STOP’ number in texts.
We may ask you to confirm or update your marketing preferences if you ask us to provide further services in the future, or if there are changes in the law, regulation, or the structure of our business.
We will always treat your personal data with the utmost respect and never sell it or share it with other organisations outside the Hill Robinson group of companies for marketing purposes.
Personal data may be held at our premises and those of our group companies, third - party agencies, service providers, representatives and agents as described in section 13 Who we share your personal data with.
Some of the people or entities we share your personal data with may be based abroad. For more information, including on how we safeguard your personal data when this occurs, see section 16 Transferring your personal data abroad.
We will not keep your personal data for longer than we need it for the purpose for which it was collected or as required by law.
Following the end of the relevant retention period, we will delete or anonymise your personal data.
If you would like further information about how long we keep your personal data, please contact us (see Section 22 How to contact us).
As part of providing our products and services, or to perform our contract with you, we may need to transfer your personal data abroad. We will only transfer your personal data abroad where appropriate safeguards are in place, as required by the applicable data protection laws.
We will transfer your personal data abroad only where:
• the relevant data protection supervisory authority has decided that the recipient country ensures an equivalent (or ‘adequate’) level of protection of personal data; or
• there are appropriate safeguards in place (e.g. legally enforceable contractual arrangements, as published or approved by the relevant data protection supervisory authority, which require the recipient to apply an equivalent level of protection); or
• a specific exemption applies under the applicable data protection laws.
• More information is available from the European Commission, any of the data
protection supervisory authorities in the EU and the following non-EU data protection supervisory authorities:
- L’autorité de protection des données personnelles (Monaco)
- The Information Commissioner (Isle of Man)
- The Information Commissioner's Office (UK)
- The Office of the Data Protection Authority (Guernsey)
- The Saudi Data and AI Authority (Saudi Arabia)
For more information please contact us (using the How to contact us information at section 22).
Access
You have the right to ask us for copies of your personal data. You can request other information such as where we get personal data from and who we share personal data with. There are some exemptions which means you may not receive all the information you ask for.
Rectification
You have the right to ask us to correct or delete personal data you think is inaccurate or incomplete.
Erasure (also known as the Right to be Forgotten)
You have the right to ask us to delete your personal data—in certain situations.
Restriction of processing
You have the right to ask us to limit how we use your personal data—in certain
situations, e.g. if you contest the accuracy of the data
Data Portability
You have the right to ask that we transfer the personal data you gave us to another organisation or to you—in certain situations.
To object
You have the right to object:
—at any time to your personal data being processed for direct marketing (including profiling);
—in certain other situations to our continued processing of your personal data, e.g. processing carried out for our legitimate interests unless we demonstrate compelling legitimate grounds for the processing which override your interests or for establishing,
exercising or defending legal claims.
Not to be subject to automated individual decision-making
The right not to be subject to a decision based solely on automated processing
(including profiling) that produces legal effects concerning you or similarly
significantly affects you.
To withdraw consent
When we use your consent as our lawful basis, you have the right to withdraw that consent at any time.
Withdrawing consent will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn.
To lodge a complaint
You have the right to submit a complaint to the relevant local data protection supervisory authority, depending on your location and where the data processing takes place. If you are unsure as to who is the relevant local data protection supervisory authority, please contact us.
If you have a complaint or concern about how we use your personal data, we would like to work with you to resolve it. You can report a concern or ask us a question by writing to us at the email or postal address below.
If you make a request, we must respond to you without undue delay and within legally prescribed timeframes.
Exercising your rights
If you would like to exercise any of your rights, please:
• complete a data subject access request form available here; or
• email, call or write to us—see section 22 How to contact us; and
• provide enough information to identify yourself and any additional identity information we may reasonably request from you; and
• let us know which right you want to exercise and the information to which your request relates.
We have implemented appropriate technical and organisational measures to keep your personal data confidential and secure from unauthorised access, use and disclosure. We limit access to your personal data to those who have a genuine business need to access it. Those processing your personal data will do so only in an authorised manner and are subject to a duty of confidentiality. We require our business partners, suppliers and other third parties to implement appropriate security measures to protect personal data from unauthorised access, use and disclosure.
We also have procedures to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are required to do so.
Please contact us first if you have any queries or concerns about our use of your personal data (see Section 22 How to contact us). We hope we will be able to resolve any issues you may have.
Hill Robinson Group Ltd is registered with the Information Commissioner’s Office (the ‘ICO’) in the UK and you may have the right to lodge a complaint with the ICO. The contact details for the ICO are: Information Commissioner’s Office Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
United Kingdom
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
You may also have the right to lodge a complaint with one of the data protection supervisory authorities specified in section 16 or the local supervisory authority in the country where you live.
Please contact us if you would like further information.
We may change this privacy policy from time to time. When we do, we will publish the updated version on our website.
This privacy policy was last updated in April 2026.
We take reasonable steps to ensure your personal data remains accurate and up to date. To help us with this, please let us know if any of the personal data you have provided to us has changed, e.g., your surname or address—see below ‘How to contact us’.
You can contact us by post or email if you have any questions about this privacy policy or the information we hold about you, to exercise a right under data protection law or to make a complaint.
Our email address is privacypolicy@hillrobinson.com and our postal address is Hill Robinson Group Ltd, 2nd Floor, West Wing, Dorey Court, Admiral Park, St Peter Port, Guernsey, GY1 2HT.
