Privacy Policy - Effective Date: Oct 1, 2025

Definitions

• Personal Information: Any information relating to an identified or identifiable individual, as defined by applicable privacy laws.
• Processing: Any operation performed on Personal Information, such as collection, storage, use, or disclosure.
• Controller: The entity determining the purposes and means of Processing.
• Processor: The entity Processing Personal Information on behalf of the Controller.
• Consent Management Platform (CMP): The tool we use to collect, manage, and record user consents for cookies and tracking.
• User: Any visitor or customer using com services.

Privacy by Design

We integrate privacy considerations into our products, processes, and systems from the initial design phase. We conduct regular privacy impact assessments, train our staff on data protection, and review our security measures annually to ensure that your Personal Information is safeguarded.

CruiseClouds.com understands that making purchases online involves a great deal of trust, and we take that trust very seriously. It is our highest priority to ensure the security and confidentiality of the personally identifiable information (“PII” or “Personal Information”) you provide. This Privacy Policy explains how we collect, use, disclose, and protect your Personal Information. By visiting CruiseClouds.com, you accept the practices described here, including the rights and choices we outline for residents of California under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

Minors

We do not sell products or services for purchase by children. If you are under the age of 18, you may use CruiseClouds.com only for viewing purposes and under the involvement of a parent or guardian. Minors—as defined by applicable law—are not eligible to register for, use, or purchase products or services from our site. We do not knowingly collect Personal Information from any minor.

Non‑United States Visitors

This policy primarily applies to U.S. residents. If you access our site from outside the United States, your information may be transferred to, stored, and processed in the United States, where our servers and databases reside.

Notice at Collection

Where required by law, we provide a clear “Notice at Collection” informing you of the categories of Personal Information we collect and the purposes for which we collect it, before or at the time of collection.

Acceptance of Terms, Cookies, and Privacy Policy

Your ability to complete a booking, reservation, or purchase on CruiseClouds.com is contingent upon your acceptance of our Terms and Conditions, this Privacy Policy, and the use of cookies as described herein. By proceeding with any booking or purchase, you confirm that you have read, understand, and agree to all terms, including our Disclaimer and Limitation of Liability, and consent to the cookies necessary for site functionality and transaction processing.

1. Collection and Use of Information

1. Purposes
   We collect and use your information to:

• Provide, operate, and improve our site and services
• Process bookings, payments, refunds, and related customer service
• Communicate with you (confirmations, support, and marketing with your consent)
• Personalize your experience, present targeted offers, and display relevant advertising
• Comply with legal obligations, enforce our Terms of Use, and prevent fraud
• Conduct analytics, research, and performance monitoring

We collect only the minimum Personal Information necessary for the stated purposes and process it solely for those purposes unless we provide additional notice and obtain your consent.

1. Types of Information
2. User-Supplied Information
   Data you enter when you register, make a reservation, search, purchase, participate in promotions, or contact customer service. Typical details include name, address, email, travel itineraries, search and booking history, reviews, payment card information, and shipping information.
   When booking for others, you must have their authorization to provide their information.
3. E‑mail Communications
   We send confirmations, account alerts, and promotional offers via email and may track engagement metrics to improve our communications. To opt-out, update your email preferences in your account or contact customer care.
4. Information from Other Sources
   We may receive data from travel suppliers, payment processors, carriers, demographic vendors, search engines, or public records to verify or enrich your account.
5. Cookies, Pixel Tags, and Tracking Technologies
   We and our partners use cookies, web beacons (clear GIFs), and similar technologies to recognize you on return visits, speed up purchases, remember preferences, and track site usage.
   Third-party vendors (e.g., Google Analytics, Meta Pixel, LinkedIn, Tealium) may place cookies or trackers to deliver targeted advertising, analyze performance, and prevent fraud.
   You can disable cookies via your browser settings, though some features may not function properly.
6. Other Technical Information
   We automatically collect your IP address, browser type/version, operating system, device identifiers, page response times, download errors, click patterns, scroll behavior, and session duration.
7. Sources of Information
   We obtain Personal Information directly from you, from third-party service providers and partners (travel providers, payment processors, marketing and analytics vendors), and automatically through tracking technologies.

2. Sharing and Disclosure of Information

We never sell your Personal Information. We share or disclose it only in the following circumstances:

1. Travel Service Providers
   Airlines, hotels, car rentals, insurance carriers, and other suppliers to fulfill your travel arrangements.
2. Service Providers and Agents
   Companies performing functions on our behalf (payment processing, data analysis, marketing assistance, order fulfillment, customer support, fraud prevention) receive only the data needed to perform their tasks.
3. Promotional Partners
   We may send offers on behalf of select partners without sharing your name or contact details.
4. Business Transfers
   In a merger, acquisition, or sale of assets, customer information generally transfers as a business asset subject to this Privacy Policy.
5. Legal Compliance and Protection
   We disclose data to comply with legal obligations, enforce our agreements, protect our rights or property, or safeguard users and the public.
6. With Your Consent
   We will share other categories of information only after obtaining your affirmative consent, specifying which data goes to which parties.

3. Data Retention

We retain Personal Information only as long as necessary to fulfill business purposes, comply with laws, resolve disputes, and enforce agreements. Retention periods vary by data type and purpose but generally range from months to years. Upon request, we will delete your data unless required to retain it by law.

4. Information Security

We implement reasonable administrative, technical, and physical safeguards—such as SSL encryption in transit and strict access controls—to protect your data from unauthorized access, disclosure, alteration, or destruction. We also recommend signing off after using a shared computer to help protect your information.

5. User Access to Your Information

When you log into your account, you can view and update most of your Personal Information, including:

• Recent orders and booking history
• Name, email address, password, and contact preferences
• Payment settings, gift certificate balances, and stored traveler profiles

This Privacy Policy outlines how CruiseClouds.com handles your Personal Information. For any questions or concerns regarding this policy, feel free to contact us through our suppo

6. Your Privacy Choices

• Providing Information: You are not required to provide any Personal Information. However, not supplying certain data may limit your ability to access certain features or complete bookings on our site.
• Updating Information: You can update your stored information anytime through your account. Please note, we may retain prior versions for record-keeping purposes.
• Communication Preferences: You can manage your communication preferences, including opting out of marketing messages, by adjusting the settings in your account or by contacting our customer support team.
• Cookie Choices: You can control your cookie preferences using your browser settings to accept, reject, or prompt for cookies. Keep in mind that disabling cookies may impact your experience and limit certain site features.
• Anonymous Browsing: Many of our features are available without the need for cookies. For more information about online privacy, we encourage you to visit the Federal Trade Commission's “Site Seeing on the Internet” guidelines.

7. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know: You can request information about the categories and specific pieces of Personal Information collected about you in the last 12 months, including the sources, purposes, and recipients.
• Right to Delete: You can request that we delete your Personal Information, subject to legal exceptions.
• Right to Correct: You can ask us to correct any inaccurate data we hold about you.
• Right to Opt-Out of Sale or Sharing: While we do not sell Personal Information for cash, we may share data for advertising purposes as defined under CCPA/CPRA. You can opt out by contacting us directly at support@cruiseclouds.com or calling 1-347-716-4160 We will process your opt-out request within 45 days. A one-click opt-out link will be available soon.
• Right to Limit Use of Sensitive Personal Information: You can direct us to limit the use or disclosure of sensitive data.
• Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

How to Exercise Your California Privacy Rights:

Submit requests via:

• Toll-free: 1-347-716-4160
• Email: support@cruiseclouds.com
• Online Form: Contact Us

We will verify your request to prevent unauthorized access and respond within 45 days as required by law. Authorized agents may submit requests on your behalf with proof of authorization.

8. Cookie Consent Mechanism (CMP)

When you first visit CruiseClouds.com, we display a cookie consent banner allowing you to accept or decline various categories of cookies (necessary, analytics, marketing). You can change your preferences at any time by clicking the “Cookie Settings” link in our site footer. All consents are recorded and managed through our Cookie-First.com CMP to ensure compliance with applicable laws.

Through our CMP, you can:

• Provide or revoke opt-in consent for cookies and similar technologies (including for users under 16, who opt-in only).
• Update your cookie preferences at any time via the “Cookie Settings” interface.
• Exercise Global Privacy Control (GPC) browser signals to manage privacy preferences.

9. Analytics and Advertising Pixels

We and our partners use web analytics and advertising pixels from the following services:

• Google Analytics & Google Tag Manager for traffic analysis and performance monitoring.
• Meta Pixel (Facebook/Instagram) for behavioral advertising and conversion tracking.
• Bing & Microsoft Advertising pixels for campaign measurement.
• Google Ads pixels for retargeting and ad performance.
• TikTok Ads pixels for audience segmentation and ad attribution.
• Other third-party tools and software for performance, tracking, and analytics.

You can manage these tracking technologies through your browser settings, our CMP, or vendor-specific opt-out tools.

10. GDPR Compliance and International Users

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), CruiseClouds.com processes your Personal Information in compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act. We collect and process only the data necessary for the specific purposes outlined in this policy, relying on lawful bases such as:

• Your consent
• The performance of a contract
• Our legitimate interests

Your Rights Under GDPR:

• Right of Access: You can request confirmation of whether we are processing your Personal Information and receive a copy of it.
• Right to Rectification: You can request the correction of inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): You can request that we delete your Personal Information, subject to legal exceptions.
• Right to Restrict Processing: You can ask us to limit the processing of your data in certain situations.
• Right to Data Portability: You can request your data in a structured, commonly used format for transfer to another controller.
• Right to Object: You can object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: You can withdraw any consent you provided at any time without affecting the lawfulness of processing prior to the withdrawal.

International Data Transfers
When we transfer data outside the EEA or the UK, we implement appropriate safeguards such as Standard Contractual Clauses, reliance on an adequacy decision, or other valid transfer mechanisms under GDPR.

If you access our site from outside the United States, your data may be transferred to, stored, and processed in the United States. By using our site, you consent to such transfers under applicable data protection laws.

11. Links to Other Websites

Our site may contain links to third-party websites. We are not responsible for their privacy practices or content. We encourage you to review their privacy policies before providing Personal Information.

12. Accessibility and Language Availability

We strive to make this Privacy Policy accessible to all users, including those with disabilities. We also aim to make the policy available in all languages in which we conduct business, ensuring a seamless and inclusive experience for everyone.

13. Changes to This Privacy Policy

We regularly review and update this Privacy Policy to ensure it aligns with changes in our practices or as required by law. When we make material changes, we will post the updated policy here with a new "Last Updated" date. By continuing to use our site after such changes are posted, you consent to the revised Privacy Policy.

14. Data Breach Notification

If we become aware of a data security breach that may result in a risk to your rights or freedoms, we will notify you and any relevant supervisory authority without undue delay, in accordance with any time-frames specified by applicable law.

15. Do Not Track & Browser Controls

Our site does not currently respond to "Do Not Track" signals. However, you have the ability to control tracking through your browser or device settings by disabling cookies, managing site data, or using private browsing modes. Keep in mind that selecting these options may limit the functionality of some features on our site.

16. Supervisory Authority & Right to Lodge Complaint

If you are located in the EEA or UK and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection authority. A list of supervisory authorities is available at European Data Protection Board.

17. COPPA & Children Under 13

CruiseClouds.com does not offer services directed to children under the age of 13, and we do not knowingly collect any Personal Information from children in this age group. If we discover that we have inadvertently collected information from a child under 13, we will take immediate steps to delete that data.

20. Automated Decision-Making & Profiling

We may use automated means, including profiling and algorithmic tools, for purposes such as marketing and personalization, including ad targeting and product recommendations. You have the right to object to such processing if it has legal or similarly significant effects on you. You can also request human review of such decisions.

21. Contact Information

For any privacy-related inquiries, requests, or concerns, please contact our Data Protection Officer:

• Email: support@cruiseclouds.com
• Phone: 1-347-716-4160
• Postal Address: 1603 Capitol Ave, Ste 413 E120, Cheyenne, WY 82001

22. Governing Law and Dispute Resolution

This Privacy Policy is governed by the laws of the State of Florida, USA, without regard to conflict of law principles. Any disputes related to this policy will be subject to the dispute resolution provisions outlined in our Terms & Conditions of Use.