Privacy Policy

Crueue ("we", "us") operates the hospitality marketplace at crueue.com and related apps (including the Android app com.crueue.app). We are the data controller for personal data processed through platform accounts and marketplace activity. Processing personal data for marketplace operation does not create an employment relationship between Crueue and workers or venues.

Contact for privacy requests: [email protected]. This policy is a draft for product launch readiness and is not legal advice. Governing law: England and Wales. We intend to register with the Information Commissioner's Office (ICO) as a data controller.

Account and identity: name, email, phone, password (hashed via our auth provider), home address and postcode.

Worker application and profile: bio, photo, CV, roles, skills, experience, Instagram handle, right-to-work confirmation, and (when provided) RTW / ID documents such as passport, BRP, or share-code references.

Venue application and profile: venue name, manager name, address, venue type, description, equipment details.

Marketplace activity: shift listings, invitations, bookings, cancellations, attendance, ratings, reliability scores, and related notes.

Payments: Stripe customer / Connect identifiers, invoice and payout records for marketplace facilitation. We do not store full card numbers; Stripe processes card and bank details.

Technical: session and authentication cookies/tokens needed to keep you signed in. We do not currently run third-party analytics cookies.

To operate the marketplace: create and manage accounts, review applications, introduce workers and venues, facilitate bookings, handle cancellations and disputes, and communicate about marketplace activity.

To check right-to-work eligibility where we require it before a worker can take shifts listed on the platform, and to facilitate payments (venue charges and worker payouts) via Stripe.

To maintain marketplace integrity (reliability scoring, fraud/abuse prevention) and to meet legal obligations that apply to us as a platform operator (for example tax and accounting retention for our own fees).

Legal bases typically include: contract (providing the marketplace service you request), legitimate interests (operating a safe marketplace), legal obligation (financial retention, RTW checks where applicable to platform eligibility), and consent where we ask for it (for example, optional marketing — not used by default in v1).

We use service providers who process data on our instructions: Supabase (database, auth, file storage), Stripe (payments, Connect payouts, and payment receipts), Apple Push Notification service and Firebase Cloud Messaging for device push delivery, and email delivery providers for account-approval messages (for example Resend). SMS providers may be used for operational alerts.

Venues and workers see limited profile and shift information needed to complete marketplace bookings (for example name, photo, skills, venue details, shift times). RTW / ID documents are stored privately and are not shown publicly.

We do not sell personal data. We may disclose data if required by law or to protect rights, safety, or the integrity of the platform.

RTW / ID documents: deleted about 2 years after a worker account becomes inactive, unless a longer period is required for an active dispute or legal claim.

Ratings and reliability history: retained about 5 years to support marketplace trust and dispute handling.

Financial and invoicing records: retained about 7 years to meet UK tax and accounting requirements.

Account profile data: kept while the account is active and for a reasonable wind-down period after closure, subject to the retention rules above.

Under UK GDPR you may request access, rectification, erasure, restriction, objection, and data portability where applicable. You may also complain to the ICO (ico.org.uk).

To exercise rights, email [email protected]. If you request erasure, we will delete personal data we no longer need, but we may retain financial and other records where the law requires it.

You can update much of your profile data in-app. You may close your account by contacting us; open bookings and unpaid marketplace invoices may need to be resolved first.

We use access controls, private storage for sensitive documents, and industry-standard providers. No method of transmission or storage is perfectly secure; please use a strong unique password.

Crueue is for adults with the right to work in the UK. We do not knowingly collect data from anyone under 18.

We may update this policy as the product evolves. Material changes will be reflected on this page with a new “Last updated” date. Continued use after changes means you accept the updated policy where permitted by law.