Cruisly Privacy Policy

Cruisly is operated by Voyagr Technologies Ltd (“Voyagr”, “Cruisly”, “we”, “us” or “our”).

Company number: 17378206

Registered office:

Voyagr Technologies Ltd is the controller of the personal information described in this Privacy Policy.

For privacy enquiries, contact:

privacy@cruisly.com

This Privacy Policy explains what personal information we collect when you visit Cruisly, join early access, create an account or use the Cruisly service.

It also explains why we use that information, who may process it on our behalf, how long we retain it and the choices and rights available to you.

Account information

When you create a Cruisly account, we may collect:

• first name;
• last name;
• email address;
• account identifier;
• profile image or avatar, if this feature is used;
• account creation and update timestamps;
• confirmation that you are aged 18 or over;
• the date and version of the Terms of Use you accepted; and
• your marketing preference.

Your password is handled through our authentication provider. Cruisly does not store your password in readable plain text.

Cruise information

When you add cruises to Cruisly, you may choose to provide information including:

• cruise line;
• ship;
• departure and return dates;
• number of nights;
• departure port;
• ports visited;
• cabin number or category;
• travel companions;
• personal notes; and
• ratings.

Some of this information is optional.

Please avoid entering confidential or highly sensitive information in free-text fields. In particular, do not enter passport numbers, payment-card information, passwords, medical information or similar sensitive information.

If you enter information about another person, such as a travel companion, please only provide information that is appropriate for you to record and share with Cruisly.

Early-access and marketing information

If you join our early-access list or separately choose to receive Cruisly marketing, we may collect your:

• name;
• email address;
• marketing preference;
• date and time your consent was given;
• date and time your preference was changed or withdrawn; and
• version of the consent wording presented to you.

Marketing is optional.

Technical information

When you use Cruisly, our systems and infrastructure providers may automatically receive technical information required to provide and secure the service, including:

• IP address;
• browser type;
• device and operating-system information;
• request headers;
• authentication/session information;
• timestamps; and
• security and technical logs.

Cruisly does not currently use advertising trackers, behavioural advertising technologies or analytics tracking services.

Communications

If you contact us, we may process your contact details and the contents of your correspondence in order to respond.

We use personal information for the following purposes and lawful bases.

Creating and managing your Cruisly account
Lawful basis: Performance of our contract with you.

Authenticating you and keeping you signed in
Lawful basis: Performance of our contract and our legitimate interests in operating a secure service.

Saving and displaying your cruises
Lawful basis: Performance of our contract with you.

Calculating your personal Cruisly statistics
Lawful basis: Performance of our contract with you.

Providing account recovery and transactional emails
Lawful basis: Performance of our contract with you.

Protecting Cruisly from misuse, fraud or security threats
Lawful basis: Our legitimate interests in protecting our users, systems and service.

Responding to support enquiries
Lawful basis: Performance of our contract and/or our legitimate interests in supporting users.

Sending optional Cruisly marketing emails
Lawful basis: Your consent.

Keeping records of marketing choices or withdrawals
Lawful basis: Our legitimate interests and compliance with applicable law.

Meeting legal or regulatory requirements
Lawful basis: Compliance with a legal obligation.

Where we rely on legitimate interests, we consider whether our interests are necessary and proportionate and balance them against your rights and interests.

We will only send you Cruisly marketing where we have a lawful basis to do so.

For users who actively opt in during registration, we rely on your consent.

Marketing consent is separate from creating a Cruisly account and is not required to use the service.

You can change your marketing preference from your Cruisly profile or use the unsubscribe facility included in marketing communications.

Withdrawing marketing consent does not affect your Cruisly account.

We may retain a limited record of your previous consent or withdrawal where reasonably necessary to demonstrate compliance and ensure that your preference continues to be respected.

We use carefully selected service providers to operate Cruisly.

These currently include:

Lovable Cloud

Used to host and operate Cruisly’s application and managed backend.

Supabase

Used for authentication, account management and database functionality.

Cloud infrastructure providers, including AWS

Cruisly’s primary production database and authentication data are hosted in the AWS eu-west-1 Ireland region.

Authentication email infrastructure

The platform’s built-in email service is used to send account-confirmation and password-reset messages.

These providers process information only as required to provide their services to Cruisly and are subject to their applicable contractual and data-protection obligations.

We may also disclose information where reasonably necessary to comply with law, protect our legal rights or respond to a lawful request from a public authority.

We do not sell users’ personal information to advertisers.

Cruisly’s primary application database and authentication environment are hosted in Ireland within the European Economic Area.

Cruisly is also delivered using global internet and edge infrastructure. As a result, limited technical information such as IP addresses and browser request information may be processed at network locations outside the UK before requests reach the application’s primary infrastructure.

Where personal information is subject to a restricted international transfer, we and our providers will use a lawful transfer mechanism required by applicable data-protection law, such as adequacy regulations or appropriate contractual safeguards where applicable.

Your account and saved cruise information are generally kept for as long as you maintain a Cruisly account.

If you delete your account, Cruisly removes your account identity, profile and saved cruise information from the live application database.

Deleted information may remain temporarily in encrypted infrastructure backups until those backups expire through the provider’s normal backup-retention cycle. Such backup copies are not used as part of ordinary Cruisly account processing.

Marketing records may be retained for as long as necessary to demonstrate consent, record withdrawal or ensure we continue to respect an unsubscribe request.

Early-access information is kept until you unsubscribe, the early-access purpose ends, or it is no longer reasonably required.

Technical and security records are retained only for as long as reasonably necessary for security, troubleshooting, legal compliance and operation of the service.

Cruisly provides a “Download my data” feature within your account.

This allows you to download a machine-readable copy of information associated with your account, including your profile information, marketing preference and saved cruise records.

You can delete your Cruisly account through your profile settings.

You will be required to confirm the deletion before it takes place.

Account deletion removes your Cruisly profile, saved cruises and authentication identity from the live service and invalidates your active sessions.

Account deletion is intended to be permanent.

Depending on the circumstances, UK data-protection law may give you rights to:

• request access to personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• request deletion of your personal information;
• request restriction of certain processing;
• receive certain information in a portable format;
• object to certain processing based on legitimate interests;
• withdraw consent at any time where processing relies on consent; and
• complain to the Information Commissioner’s Office.

These rights are not absolute in every situation and applicable exemptions may apply.

You have the right to object to processing based on our legitimate interests.

To exercise a privacy right, contact privacy@cruisly.com.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data-protection supervisory authority.

We use technical and organisational measures intended to protect Cruisly accounts and personal information.

These include authenticated access controls and database Row Level Security designed so that users can access only their own profile and cruise records.

Privileged backend credentials are restricted to server-side systems and are not intentionally exposed through the public browser application.

No internet service can guarantee absolute security, so we encourage you to use a strong, unique password and keep access to your email account secure.

Cruisly does not currently use your personal information to make decisions about you solely through automated processing that produce legal or similarly significant effects.

The current Cruisly beta is intended for people aged 18 or over.

We do not knowingly provide accounts to children.

If we learn that an account has been created by someone who is not eligible to use the service, we may take appropriate steps to remove the account.

Cruisly will continue to develop.

We may update this Privacy Policy where our services, technology or legal obligations change.

When appropriate, we will bring significant changes to the attention of users before they take effect.

The current version and its date will always be available on this page.

For privacy questions or requests:

privacy@cruisly.com

Company number: 17378206

See also our Cookie & Similar Technologies Policy and Terms of Use.