Privacy Policy
Last updated: 20 October 2026
RigWorx ("we", "us") runs rigworx.org (the "Platform"). This policy explains what personal data we collect, why we use it, who receives it, how long we keep it and what rights you have. For any question, write to commercial@rigworx.org.
1. Who is responsible for your data
RigWorx is the controller of the personal data described in this policy. The contact for privacy matters is commercial@rigworx.org.
2. What data we collect
Workers
- Account: email address and password (stored in hashed form).
- Profile: full name, phone number, nationality, country of residence, port of mobilisation, region, trade and experience, rig and equipment experience, IRATA level and number, certifications and their expiry dates (such as BOSIET/FOET, HUET, offshore medical certificate and passport), work history, languages, availability, notice period, expected day rate and a profile summary.
- Files: any certificates you upload. The CV you upload is read to extract information and is not kept as a file; the extracted information is kept in your profile.
- Your consent to the processing of your data.
Companies (no account is created): the company name and contact email entered when downloading a CV or sending a request, the candidate concerned, and the date and time.
Information requests: the details and message you enter in the Request Information form.
All visitors: basic technical data needed to deliver the site and keep it secure, such as IP address and server logs.
The expiry date of your offshore medical certificate is the only health-related information we collect. We process it only with your explicit consent, which you can withdraw at any time.
3. Why we use your data
| Purpose | Data | Legal basis |
|---|---|---|
| Create and run your Worker profile and show a limited version to Companies | Account and profile data | Your consent, and steps you ask us to take to use the Platform |
| Read your CV with AI, pre-fill your profile, draft a summary and translate your CV into English | CV and profile content | Steps you ask us to take to use the Platform |
| Give Companies access to CVs and record the Fair Use Agreement | Company name, contact email, candidate, date and time | Our legitimate interest in protecting Workers' data and enforcing the agreement |
| Answer information requests | Request details | Steps taken at your request, and our legitimate interest in replying |
| Keep the Platform secure and working | Technical data | Our legitimate interest in security |
| Comply with the law | Any data concerned | Legal obligation |
4. What Companies see
Companies see a limited profile and the CV generated from it: a public name (your first name and one other name), trade, experience, certifications and their expiry dates (including the medical certificate and passport), languages, availability, nationality, country of residence, port of mobilisation, region, IRATA level and number, logged hours, the names of your previous employers and your profile summary. They do not see your full name, email, phone number, expected day rate or uploaded documents. RigWorx staff can see the complete profile.
5. Who we share data with
- Companies, as described above.
- Service providers that process data on our behalf and may use it only to provide their service to us: DigitalOcean (hosting and storage), Anthropic (AI processing of CV content), Google (business email) and Cloudflare (domain name services and network security).
- Authorities and advisers, where the law requires it or to protect legal rights.
We do not sell personal data.
6. AI processing
The content of your CV is sent to an AI service provided by Anthropic to extract information, draft a profile summary and translate the CV into English. Nothing is decided about you automatically: you can review and edit your information before saving it, and Companies make their own decisions.
7. International transfers
Some of our providers, including Anthropic, process data in the United States and other countries outside the UK and the European Economic Area. Where the law requires it, we rely on safeguards such as adequacy decisions or standard contractual clauses. Write to us for details.
8. How long we keep data
- Worker profiles and files: until you ask us to delete your profile. We may also delete profiles that have been inactive (no profile update and no contact from you) for 24 months or more.
- Company agreement records and information requests: 24 months.
- Technical and security logs: for a limited period.
- After deletion, copies in backups are overwritten within the normal backup cycle.
9. Your rights
You can ask us for access to your data, correction, deletion, restriction of processing, a portable copy, or object to processing based on our legitimate interest. Where processing is based on consent, you can withdraw it at any time; this does not affect earlier processing. Write to commercial@rigworx.org and we will reply within one month. You can also complain to the data protection authority in your country.
10. Security
We use appropriate technical and organisational measures, such as access controls, hashed passwords and encrypted connections (HTTPS). No system is completely secure.
11. Children
The Platform is for people aged 18 or over. We do not knowingly collect data from anyone younger and will delete it if we find it.
12. Changes
The date at the top shows the latest version. If a change significantly affects Workers, we will tell them by email before it applies.
13. Contact
RigWorx: commercial@rigworx.org