Privacy Policy

Effective date: [insert launch date]

This is a template drafted for McLean's Travel Agency's J-1 Staffing Portal. It has not been reviewed by an attorney — have counsel review it (particularly the governing-law and liability sections) before treating it as final.

This Privacy Policy explains what information McLean's Travel Agency for Students Limited ("McLean's," "we," "us") collects through the J-1 Staffing Portal (the "Portal"), and how we use, share, and protect it.

Who we are

McLean's Travel Agency for Students Limited, 67 Old Hope Rd, Kingston, Jamaica. Contact: (876) 835-0673.

Information we collect

Account details: name, email address, and password (stored as a salted hash — we never see or store your plain-text password).
Program details: your INTRAX ID, which you provide when applying to a position.
Profile details: phone number, date of birth, gender, and nationality, which you may provide on your Profile page.
Application activity: which positions you apply to, application status, and timestamps.

We do not collect payment information through the Portal.

Why we collect it

To operate the Job Board and let you apply to and track host-company placements.
To let agency staff review your application and advance it toward placement with the host employer/sponsor.
To verify your identity within the program (e.g., confirming your INTRAX ID) before your application can be confirmed.
To notify you of changes to your application status, and to let agency staff email you about newly posted positions you may be eligible for.

Who we share it with

When your application is confirmed, your name, INTRAX ID, and application details are shared with the relevant host employer and/or J-1 sponsor organization as part of the placement process. We use a third-party email delivery service to send account and application notifications on our behalf. We do not sell your personal information, and we do not share it with third-party advertisers.

How we protect it

Passwords are hashed (bcrypt) and never stored in plain text. Access to admin functions is restricted to authorized agency staff. The Portal is served over an encrypted connection in production.

Cookies

The Portal uses a single, essential session cookie to keep you signed in. We don't use advertising or analytics cookies.

Data retention

We retain your account and application data for as long as your account is active and as needed to administer the program. You may request deletion of your account by contacting us; some records may be retained where required for program administration or legal compliance.

Your rights

You can review and update your profile details — name, INTRAX ID, phone number, date of birth, gender, and nationality — at any time from your Profile page. To request a copy of your data, a correction, or deletion, contact us using the details above.

Eligibility

The Portal is intended for use by J-1 Exchange Visitor Program participants, who are generally adults. It is not directed at children.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the effective date above.