Privacy Policy | Amazing Cruises

Who we are

Amazing Cruises, Inc. is a Florida corporation with its principal office at 1000 5th Street, Suite 200, Miami Beach, FL 33139, United States. We are a luxury cruise travel advisory, a member of the Virtuoso network, and an IATA member in good standing. Amazing Cruises, Inc. is registered with the State of Florida as a Seller of Travel. Registration No. ST-31932.

We are responsible for the personal information described here (in European and Brazilian terms, we are the "controller").

This policy covers amazingcruises.com. It does not cover cruise lines' websites or any other site we link to.

The short version

We are an advisory, not a booking engine. You cannot buy anything on this site. We collect your details when you choose to contact us or open a My Amazing Cruises account, and we use them to help you plan a cruise. We do not sell your personal information, and we do not share it for advertising. No ads follow you from this site. We use Google Analytics, with its advertising features switched off, to understand how the site is used. Depending on where you are, we either ask first or tell you and let you opt out. Browsing is free; after many sailing pages on one device, we ask you to register, also free, to keep seeing every sailing.

What we collect, and when

When you browse without an account:

Usage information through Google Analytics, only if analytics is allowed for you (see "Cookies and analytics").
What you type into the search box, with no name, account, cookie identifier or IP address attached. We use it to learn what people look for and whether they find it.
Standard technical information that our infrastructure provider records to keep the site secure and working, such as IP address, browser type and the country your connection comes from. We use the country (and, in Canada, the province) only to decide whether to ask for analytics consent.
Your browsing allowance: a random device identifier in a cookie, a record of the sailing pages you view on that device (the page address, the time and a short code for any search filters used), the first page you opened on our site, the website that brought you there and the date of that first visit, when the device was last seen and how many visits it has made (a new visit starts after 30 minutes without a page view), and whether someone has signed in on it (so we can show a "Welcome back" message). We use it to count how many sailing pages and sets of search results a device has viewed (on Find a Cruise, each new set of results counts) and to invite frequent visitors to register. It is tied to the device, not to your name, until you register or sign in on that device. Where we ask first (see "Cookies and analytics"), none of this is recorded unless you choose Accept.

When you send an inquiry through a form, or by contacting an advisor:

Your name, email address and phone number, where you provide them
Your message
The context of your inquiry: the sailing you were viewing, the cruise line, the destination, the ship, the sailing date, the suite category on screen, and the fare displayed to you at that moment, with the time it was shown
Where your inquiry came from: the page you sent it from; where your browsing allowance is recorded, the first page you opened on our site and the website that brought you there; your browser and device type; and the IP address of the request, with the approximate city, region, country, time zone and internet provider that our hosting provider, Cloudflare, associates with it. We do not use any other location service.

That context lets an advisor pick up the conversation knowing what you were looking at, and reply at a sensible time of day for you. We also use it to recognize spam and misuse of our forms. The location is approximate, at the level of a city, and comes from your internet connection, not from your device's location services. Your IP address is visible only to authorized staff in our protected lead records; it is never included in the email notifications our advisors receive.

When you open or use a My Amazing Cruises account:

Your email address, which is how you sign in. We email you a one-time code or link, valid for 15 minutes. There are no passwords. We store only a scrambled (hashed) form of each code, and delete used and expired codes within a day.
The IP address that asked for a sign-in code, kept with that code for security and deleted with it within a day.
The sailings you save, and when you saved them.
Your first and last name, which we ask for when you register.
Profile details you choose to add: phone numbers (labeled home, work or mobile) and a headshot photo. Both optional.
How you joined: how you registered (for example, with an emailed code), the page you registered on and, where your browsing allowance was recorded on that device, its first page, the website that brought you there and the date of that first visit. We send you a welcome email, and our team receives a short notice of your registration with this information and the device's number of visits (never your IP address). The visit count stays with the device record, not your account.
Account records: when your account was created, when you last signed in, and, for each browser you are signed in on, the browser type and when it was last used.

If you change your email address, the change takes effect only after you confirm the new address with a code we send to it.

When you agree to marketing: a record that you agreed, when, and where. This is always a separate, unticked choice, never bundled into an inquiry or an account.

What we never collect on this site: payment card details, passport or government identifiers, date of birth, precise location, or biometric data. We do not use device fingerprinting or face recognition.

What we do with it, and our legal basis

Answering your inquiry and advising you on a cruise. Legal basis: steps you asked us to take before a contract; our legitimate interest in running an advisory.
Running your account: signing you in, keeping your saved sailings and profile. Legal basis: performance of our agreement with you (the account).
Letting our advisors see your saved sailings and profile, so they can help you plan. Legal basis: performance of our agreement with you; our legitimate interest.
Keeping a record of our conversations so an advisor knows your history. Legal basis: our legitimate interest in running an advisory.
Marketing, if you asked for it. Legal basis: your consent.
Understanding how the site is used (Google Analytics). Legal basis: your consent where the law requires it (EEA, UK, Switzerland, Brazil, Quebec); otherwise our legitimate interest, with an opt-out.
Offering free browsing and inviting frequent visitors to register (the browsing allowance). Legal basis: your consent where we ask first (EEA, UK, Switzerland, Brazil, Quebec); otherwise our legitimate interest in running the site.
Understanding what people search for (anonymous search terms). Legal basis: our legitimate interest.
Security, fraud prevention, stopping automated abuse. Legal basis: our legitimate interest.
Meeting legal and record-keeping obligations. Legal basis: legal obligation.

Where we rely on legitimate interest, we have weighed it against your rights, and you can object (see "Your rights"). We do not make automated decisions that produce legal or similarly significant effects about you, and we do not profile you for advertising.

How we organize inquiries and accounts

If you contact us more than once, we link those inquiries to a single record of you, matched on your email address, so an advisor can see your history. If you would prefer we did not, tell us and we will separate or delete the records.

When you register or sign in on a device, we link that device's browsing allowance record to your account, so we know how you first found us.

We may link your account to your client record in our own advisory systems, so your saved sailings and conversations stay together. That link is internal and never shown on the site.

Who at Amazing Cruises can see your account

Our advisors and other authorized staff can see your account: name, email address, phone numbers, headshot, saved sailings, and when you signed up and last signed in. Staff sign in through a separate, protected system, and customer accounts can never reach staff pages.

Your headshot is private. It is shown only to you and our staff, never published on the site or shared with cruise lines, and never used for face recognition.

Cookies and analytics

Our Cookie Policy lists every cookie and similar technology we use. In summary:

Cookies we need to run the site: keeping you signed in, remembering which consent rule applies to your region, and security cookies set by our infrastructure provider. These do not need consent and are not used for analytics or advertising.
The browsing allowance: a device identifier cookie that counts the sailing pages a device views, so we can invite frequent visitors to register. Where we ask first, it is set only if you choose Accept; elsewhere it is part of how the site works and is not affected by the analytics opt-out.
Google Analytics 4, on public pages only, never in the account area or on staff pages. Google Signals and advertising features are off, our account is not linked to Google Ads, Google Analytics 4 does not log or store IP addresses, and Google keeps our analytics data for 14 months.
No advertising cookies and no third-party tracking pixels.

Your choice depends on where you are:

In the European Economic Area, the United Kingdom, Switzerland, Brazil or Quebec, or if we cannot tell where you are: we ask first. Analytics does not load, no analytics cookie is set, and the browsing allowance is off (every page stays fully readable), unless you choose Accept. Accept and Reject are equally easy.
Everywhere else: we show a short notice and analytics loads unless you opt out.

You can change your choice at any time with the Your Privacy Choices link at the bottom of every page. If your browser sends a Global Privacy Control signal, we treat it as an opt-out and analytics does not load. When you opt out, we remove the Google Analytics cookies from your browser. Opting out never affects your ability to use the site, your account, or contact us.

Who we share it with

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not give it to other travel agencies. We use service providers who process information on our behalf, under contract, and only for the purposes below:

Cloudflare, Inc.: Website hosting, security, staff access control, storage of headshot photos. Information involved: Technical data, including the approximate location of your connection, and, for a browser that says it is a search engine, a check of its IP address through Cloudflare's DNS service; whatever passes through the site; headshots.
Cloudflare Turnstile: Checking that a sign-in request comes from a person, not an automated program. Information involved: Browser and device signals, the IP address of the request.
Neon (a Databricks company): Database hosting, in the United States (Virginia and Ohio). Information involved: Inquiry and account records.
Resend: Sending email: sign-in codes and links, welcome emails, and inquiry and registration notifications to our team. Information involved: Your email address and name; for our team, your inquiry or registration details and approximate location (never your IP address).
Google LLC (Google Analytics): Understanding site usage, public pages only, where allowed. Information involved: Usage data and online identifiers.

Cruise lines. If you ask us to make a booking, we pass the details that booking requires to the cruise line, which handles them under its own privacy policy. This happens only when you ask us to proceed, never automatically from an inquiry, a saved sailing or your account.

WhatsApp. If you contact us through the WhatsApp link, that conversation takes place on WhatsApp and Meta's privacy policy applies to it.

Legal and business reasons. We may disclose information where the law requires it, to protect the rights and safety of our clients, staff or others, or to establish or defend legal claims. If our business is sold or reorganized, your information may transfer to the new owner, and this policy will continue to apply to it.

Where your information is held

In the United States. Our database is in Virginia and Ohio, and our service providers process information in the United States and other countries where they operate. If you are outside the United States, your information is transferred to the United States, which may not have the same data protection laws as your country. Where the law requires a transfer safeguard, we rely on the EU-US Data Privacy Framework (and its UK and Swiss counterparts) for providers certified under it, and otherwise on standard contractual clauses in our providers' data processing terms. You can ask us for more information about these safeguards.

How long we keep it

Inquiries: Three years after our last contact with you, then anonymized (we remove what identifies you and keep only aggregate figures). Cruise clients often travel every one to three years, so an inquiry from eighteen months ago is still a live conversation.
The IP address sent with an inquiry: Deleted after 90 days. The pages, approximate location, time zone, internet provider and browser type stay with the inquiry under the three-year rule above.
Browsing allowance records: The record of sailing pages viewed is deleted after 13 months. A device not seen for 13 months is deleted with its first-visit details. When you register, the first-visit details are kept with your account.
Your account and saved sailings: Until you delete your account. We do not delete accounts for inactivity.
Sign-in codes and the IP address that requested them: Deleted within a day.
Signed-in sessions: Up to 30 days, or until you sign out.
Search terms typed into the site: Kept without any identifier, so they cannot be linked to you.
Google Analytics data: 14 months (held by Google).
Marketing consent records: As long as the consent applies, and long enough afterwards to prove it.

Deleting your account. You can delete your account yourself at any time from your profile in My Amazing Cruises. This immediately and permanently deletes your account, your profile (including your headshot and phone numbers), your saved sailings, your sign-in records and every signed-in session. Inquiries you sent us are not part of your account and are kept under the three-year rule, because they are our advisory records. To have those deleted too, email privacy@amazingcruises.com and we will delete them unless we are required to keep them.

Your choices

Browse without an account. Until you contact us, register or sign in, what you view is tied only to a random device identifier, never to your name. Clearing your cookies resets the browsing allowance.
Accept, reject or change analytics at any time with Your Privacy Choices.
Turn offers and news on or off at any time in My Amazing Cruises > Profile, or unsubscribe with the link in any marketing email.
If texting is enabled, reply STOP to any text to stop them.
View, correct or delete your account information in My Amazing Cruises, or by writing to us.

Your rights

Wherever you live, we will honor these requests on the same terms:

Access: confirm whether we hold your information, and receive a copy
Correction of anything inaccurate (you can edit your profile yourself)
Deletion (you can delete your account yourself)
Portability: a copy of what you gave us, in a usable format
Withdraw consent to marketing or analytics at any time, without affecting earlier use
Object to our use of your information based on legitimate interest
No discrimination for exercising any of these rights

How to make a request: email privacy@amazingcruises.com or write to the address below. We will respond within 30 days, or sooner where your local law requires. We may need to verify your identity first and will do so proportionately. You may use an authorized agent where your law allows. If we decline a request, we will explain why and how to appeal.

Florida. We follow the Florida Digital Bill of Rights as if it applied to us: you may confirm whether we process your data, access it, correct it, delete it, obtain a portable copy, and opt out of sale, targeted advertising and profiling. We do not sell personal data, run targeted advertising, or profile you. We respond within 45 days. If we decline, you may appeal by replying to our response, and we will answer the appeal within 60 days. You may also contact the Florida Department of Legal Affairs.

California and other US states (including Colorado, Connecticut, Oregon, Texas, Utah and Virginia). You have the rights listed above as those laws define them. We do not sell or share personal information within the meaning of those laws, and have not done so in the preceding twelve months. We do not use or disclose sensitive personal information. We respond within 45 days, as those laws allow.

Canada. We handle personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, the Act respecting the protection of personal information in the private sector (Law 25). You may withdraw consent at any time, subject to legal or contractual restrictions. In Quebec, analytics is off until you turn it on. The person in charge of the protection of personal information at Amazing Cruises is Mark Zilbert, Chief Information Officer, reachable at privacy@amazingcruises.com. You may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

European Economic Area, United Kingdom and Switzerland. The legal bases we rely on are set out in "What we do with it, and our legal basis." You also have the right to restrict our use of your information in certain cases, and to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office; in Switzerland, the Federal Data Protection and Information Commissioner).

Brazil. Under the Lei Geral de Proteção de Dados (LGPD), you may confirm whether we process your data, access it, correct it, have unnecessary or excessive data anonymized, blocked or deleted, obtain portability, learn which entities we share it with, be told what happens if you refuse consent, and withdraw consent. We will give a complete response within 15 days. Our data protection contact (encarregado) can be reached at privacy@amazingcruises.com. You may also complain to the Autoridade Nacional de Proteção de Dados (ANPD).

Children

This site is for adults planning travel and is not intended for anyone under 18. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

Security

Personal information is held in an access-controlled database and encrypted in transit. Staff areas require separate authentication. Customer accounts have no passwords, and we store sign-in codes and session tokens only in scrambled (hashed) form. Headshots are stored privately and never served publicly. We do not collect payment details or identity documents on this site at all, which removes the most sensitive information entirely. No system is perfectly secure, but we take reasonable measures, and if a breach affects you we will notify you and the authorities as the law requires.

Changes

When we change this policy we post the new version here with a new effective date. If a change is material, we will say so on the site and, if you have an account, email you before it takes effect.

Contact

Amazing Cruises, Inc.

1000 5th Street, Suite 200

Miami Beach, FL 33139, United States

privacy@amazingcruises.com

(800) 637-4680

Amazing Cruises, Inc. is registered with the State of Florida as a Seller of Travel. Registration No. ST-31932.