Privacy Policy

Scope and roles

This Privacy Policy explains how OceanWave (“OceanWave,” “we,” “us,” or “our”) handles personal information when you visit the Krew website or use Krew’s workforce tools, including shifts, tasks, requests, time records, and team communications.

When an employer or other organisation provides your Krew account, that organisation generally controls the work-related information processed through its workspace. We process that information on its behalf. Your organisation may have its own privacy notice and may make decisions about access, retention, and use.

Information we collect

Depending on how Krew is configured and used, we may collect:

• Account information: name, email address, profile image, role, team, workplace, and authentication details.
• Work activity: schedules, clock-in and clock-out records, breaks, availability, assigned tasks, progress, requests, approvals, and related notes.
• Communications: messages, call metadata, support enquiries, and content you submit through Krew.
• Device and usage data: IP address, browser and device type, operating system, app events, diagnostic data, and approximate location derived from IP.
• Information from customers and integrations: data supplied by your organisation, its administrators, or services it chooses to connect to Krew.

Please do not submit sensitive personal information unless your organisation has specifically asked you to and has configured Krew appropriately.

How we use information

We use personal information to provide and operate Krew; authenticate users; display shifts and tasks; maintain work records; enable requests and team communication; provide customer support; secure, troubleshoot, and improve the service; communicate service updates; and comply with legal obligations.

Where required, we rely on an appropriate legal basis, which may include performing a contract, legitimate interests, consent, or compliance with law. Your organisation determines the basis for work-related processing it controls.

How information is shared

We may share information with:

• Your organisation, workspace administrators, supervisors, and authorised team members according to their permissions.
• Vendors that help us host, secure, analyse, communicate, and support Krew, under contractual safeguards.
• Professional advisers, authorities, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or establish legal claims.
• A successor or participant in a merger, financing, acquisition, reorganisation, or sale of assets, subject to appropriate confidentiality protections.

We do not sell personal information or use work activity data for third-party behavioural advertising.

Retention and deletion

We retain information for as long as needed to provide Krew, meet contractual commitments, maintain security and business records, resolve disputes, and comply with law. Retention periods vary by data type and by the settings or instructions of the organisation that manages your workspace.

When information is no longer required, we delete or de-identify it. Residual copies may remain temporarily in backups or where retention is legally required.

Security

We use administrative, technical, and organisational safeguards designed to protect personal information against unauthorised access, loss, misuse, or alteration. No online service can guarantee absolute security, so users should protect their credentials and promptly report suspected unauthorised access.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to withdraw consent where processing relies on consent.

For information in an organisation-managed workspace, contact your employer or workspace administrator first. You may also contact us, and we will assist the organisation where appropriate. We may need to verify your identity before completing a request.

International processing

Krew and its service providers may process information in countries other than the one where you live. Where required, we use recognised safeguards for international transfers and take steps designed to protect information consistently with this policy.

Children

Krew is a workplace service and is not directed to children. Users must be legally able to use the service for work in their location. Organisations that allow eligible younger workers to use Krew are responsible for obtaining any required permissions and providing appropriate notices.

Policy updates

We may update this policy as Krew evolves or legal requirements change. We will post the revised version here and update the effective date. If a change materially affects your rights, we will provide additional notice where required.

Contact us

For privacy questions or requests, email oceanwaveweb@gmail.com. If your account is managed by an organisation, you may also contact its administrator or privacy representative.