1. Who controls your data
CruisesUnlocked is the Ireland-based controller for personal data collected through this website, email services, accounts, and membership services. Formal privacy requests and operator notices should be sent to the contact below.
Trading name: CruisesUnlocked.
Contact: hello@cruisesunlocked.ie. Privacy contact: support@cruisesunlocked.ie.
2. Data we collect
- Email address, name, and contact details you provide.
- Email signup source, consent record, unsubscribe status, and email engagement where our email provider makes it available.
- Account, login, billing status, Stripe customer/subscription identifiers, and membership plan details. We do not store full card numbers.
- Shortlist travel-plan details you choose to save, such as dates, budget, destination interests, cruise lines, ships, and contact email.
- With your analytics consent, first-party website events such as page views, deal clicks, campaign tags, and a random pseudonymous session identifier.
- Aggregate outbound deal clicks needed for affiliate and broken-link reporting. These records do not include raw IP addresses or full user-agent strings.
- Messages you send to us for support, refunds, unsubscribe requests, or account help.
3. How we use personal data
- Send cruise deal emails and member updates where you have opted in.
- Provide account access, membership benefits, billing support, and Shortlist recommendations.
- Process payments, refunds, renewals, and subscription status through Stripe.
- Improve deal quality, site reliability, product decisions, and customer support.
- Measure affiliate clicks and understand which deals are useful.
- Comply with accounting, tax, legal, security, and fraud-prevention obligations.
4. Legal bases
- Consent — for marketing emails and optional non-essential cookies/tracking where used.
- Contract — to provide accounts, subscriptions, Shortlist services, checkout, billing support, and membership access.
- Legitimate interests — to keep the service secure, measure basic product performance, prevent abuse, respond to support, and understand affiliate/deal performance.
- Legal obligation — for records we must keep for tax, accounting, consumer, or regulatory reasons.
5. Marketing email
We only send marketing emails where you sign up, opt in, or otherwise give clear permission. Every marketing email includes an unsubscribe option. You can also unsubscribe through the unsubscribe page or by emailing support@cruisesunlocked.ie.
Unsubscribing from marketing does not stop essential transactional emails about payments, account access, security, legal updates, or service notices.
6. Cookies and tracking
Essential cookies may be used for account login, security, checkout, and site operation. Optional analytics remains off until you choose “Allow analytics”. You can reopen Privacy choices from every page, withdraw consent, or delete the event history linked to your current pseudonymous analytics session.
7. Service providers
We use trusted providers to run the service. Expected providers include Supabase for account, customer, consent, and suppression data, Stripe for payments, Resend for transactional and product email, Vercel for hosting, and Cloudflare for DNS/security if enabled. We may also use analytics, error monitoring, or affiliate tracking providers if they are listed in the Cookie Notice or this policy.
Some providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as EU Standard Contractual Clauses, adequacy decisions, or provider data processing terms.
8. Retention
- Email subscription records are kept until you unsubscribe or ask us to delete them, unless limited suppression records are needed to honour your opt-out.
- Account, preference, and membership records are kept while your account or subscription is active and for a reasonable period afterwards for support, security, dispute, and accounting reasons.
- Payment, invoice, tax, and refund records may be kept for the period required by Irish law.
- Consented public browsing and affiliate usefulness events are deleted after 90 days. The random analytics session cookie expires after 30 days; the consent choice expires after 180 days.
- Account sign-in and recovery events are deleted after 30 days. Recommendation exposure, feedback, and product-delivery measurement is deleted after 365 days.
- Checkout and membership-status measurement is deleted after 730 days. This does not replace financial, tax, invoice, or dispute records that may need a different legal retention period.
9. Your rights
If you are in Ireland, the EU, or the UK, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You can also withdraw consent where processing is based on consent.
To exercise rights, email support@cruisesunlocked.ie. Visitors can also use Privacy choices to delete the first-party analytics events linked to the current browser session. You have the right to complain to the Irish Data Protection Commission or your local supervisory authority.
10. Security
We use reasonable technical and organisational measures to protect personal data, including managed payment processing through Stripe and role-limited access to customer systems. No online service can be guaranteed perfectly secure, but we take privacy and access seriously.
11. Children
CruisesUnlocked is not aimed at children. Do not use the service if you are under 18.
12. Updates
We may update this policy as the service, providers, or legal requirements change. Material changes will be highlighted where practical.