1. Information We Collect

Personal Information You Provide

We collect information that you voluntarily provide to us, including:

• Account Information: Name, email address, password when you create an account
• Profile Information: Preferences, cruise interests, notification settings
• Communication Data: Information in your messages when you contact support
• Payment Information: Billing details processed securely through our payment provider (we do not store complete payment card details)
• Cruise Tracking Data: Cruises you track, price alerts you set, search history

Automatically Collected Information

When you use our services, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent, clicks, features used
• Location Data: Approximate location based on IP address
• Cookies and Similar Technologies: As described in our Cookie Policy

Information from Third Parties

We may receive information from:

• Social Login Providers: If you sign up using Facebook, Google, or other social media accounts
• Cruise Line Partners: Pricing and availability data from cruise operators
• Analytics Providers: Aggregated usage statistics

2. How We Use Your Information

We use your information to:

• Provide Our Services: Track cruise prices, send price alerts, manage your account
• Improve Our Platform: Analyze usage patterns, fix bugs, develop new features
• Communicate: Send service updates, price alerts, promotional emails (with your consent)
• Process Payments: Handle subscriptions and billing
• Customer Support: Respond to inquiries and resolve issues
• Security: Detect fraud, prevent abuse, maintain platform security
• Legal Compliance: Meet regulatory requirements and enforce our terms
• Marketing: Send promotional content (only with your explicit consent)

3. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide our services to you
• Legitimate Interests: Improving our services, fraud prevention, analytics
• Consent: Marketing communications, non-essential cookies
• Legal Obligation: Compliance with UK laws and regulations

4. Sharing Your Information

We may share your information with:

Service Providers

• Payment processors (Stripe)
• Email service providers
• Cloud hosting providers
• Analytics services
• Customer support tools

Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Respond to government requests

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner.

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (typically 7 years for financial records)
• Resolve disputes and enforce agreements
• Maintain business records

When you close your account, we will delete or anonymize your data within 30 days, except where we must retain it for legal compliance.

6. Your Data Protection Rights

Under UK GDPR, you have the following rights:

To exercise any of these rights, please contact us at privacy@cruisesonar.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Required for the website to function (login, security)
• Performance Cookies: Analyze how visitors use our site
• Functional Cookies: Remember your preferences
• Marketing Cookies: Track advertising effectiveness (only with your consent)

You can control cookies through your browser settings. However, disabling essential cookies may affect site functionality.

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

• SSL/TLS encryption for data transmission
• Encrypted data storage
• Regular security audits and updates
• Access controls and authentication
• Employee training on data protection
• Incident response procedures

While we strive to protect your data, no method of transmission over the internet is 100% secure. Please use strong passwords and keep your account credentials confidential.

9. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact: