Privacy Policy
Who we are
Amazing Cruises, Inc. is a Florida corporation with its principal office at 1000 5th Street, Suite 200, Miami Beach, FL 33139, United States. We are a luxury cruise travel advisory, a member of the Virtuoso network, and an IATA member in good standing. Amazing Cruises, Inc. is registered with the State of Florida as a Seller of Travel. Registration No. ST-31932.
We are responsible for the personal information described here (in European and Brazilian terms, we are the "controller").
This policy covers amazingcruises.com. It does not cover cruise lines' websites or any other site we link to.
The short version
We are an advisory, not a booking engine. You cannot buy anything on this site. We collect your details when you choose to contact us or open a My Amazing Cruises account, and we use them to help you plan a cruise. We do not sell your personal information, and we do not share it for advertising. No ads follow you from this site. We use Google Analytics, with its advertising features switched off, to understand how the site is used. Depending on where you are, we either ask first or tell you and let you opt out.
What we collect, and when
When you browse without an account:
- Usage information through Google Analytics, only if analytics is allowed for you (see "Cookies and analytics").
- What you type into the search box, with no name, account, cookie identifier or IP address attached. We use it to learn what people look for and whether they find it.
- Standard technical information that our infrastructure provider records to keep the site secure and working, such as IP address, browser type and the country your connection comes from. We use the country (and, in Canada, the province) only to decide whether to ask for analytics consent.
When you send an inquiry through a form, or by contacting an advisor:
- Your name, email address and phone number, where you provide them
- Your message
- The context of your inquiry: the sailing you were viewing, the cruise line, the destination, the ship, the sailing date, the suite category on screen, and the fare displayed to you at that moment, with the time it was shown
That context lets an advisor pick up the conversation knowing what you were looking at. It is information about the cruise, not about you.
When you open or use a My Amazing Cruises account:
- Your email address, which is how you sign in. We email you a one-time code or link, valid for 15 minutes. There are no passwords. We store only a scrambled (hashed) form of each code, and delete used and expired codes within a day.
- The IP address that asked for a sign-in code, kept with that code for security and deleted with it within a day.
- The sailings you save, and when you saved them.
- Profile details you choose to add: first and last name, phone numbers (labeled home, work or mobile), and a headshot photo. All optional.
- Account records: when your account was created, when you last signed in, and, for each browser you are signed in on, the browser type and when it was last used.
If you change your email address, the change takes effect only after you confirm the new address with a code we send to it.
When you ask us to watch a price: your email address and what you asked us to watch.
When you agree to marketing: a record that you agreed, when, and where. This is always a separate, unticked choice, never bundled into an inquiry or an account.
What we never collect on this site: payment card details, passport or government identifiers, date of birth, precise location, or biometric data. We do not use device fingerprinting or face recognition.
What we do with it, and our legal basis
- Answering your inquiry and advising you on a cruise. Legal basis: steps you asked us to take before a contract; our legitimate interest in running an advisory.
- Running your account: signing you in, keeping your saved sailings and profile. Legal basis: performance of our agreement with you (the account).
- Letting our advisors see your saved sailings and profile, so they can help you plan. Legal basis: performance of our agreement with you; our legitimate interest.
- Keeping a record of our conversations so an advisor knows your history. Legal basis: our legitimate interest in running an advisory.
- Marketing and price alerts, if you asked for them. Legal basis: your consent.
- Understanding how the site is used (Google Analytics). Legal basis: your consent where the law requires it (EEA, UK, Switzerland, Brazil, Quebec); otherwise our legitimate interest, with an opt-out.
- Understanding what people search for (anonymous search terms). Legal basis: our legitimate interest.
- Security, fraud prevention, stopping automated abuse. Legal basis: our legitimate interest.
- Meeting legal and record-keeping obligations. Legal basis: legal obligation.
Where we rely on legitimate interest, we have weighed it against your rights, and you can object (see "Your rights"). We do not make automated decisions that produce legal or similarly significant effects about you, and we do not profile you for advertising.
How we organize inquiries and accounts
If you contact us more than once, we link those inquiries to a single record of you, matched on your email address, so an advisor can see your history. If you would prefer we did not, tell us and we will separate or delete the records.
We may link your account to your client record in our own advisory systems, so your saved sailings and conversations stay together. That link is internal and never shown on the site.
Who at Amazing Cruises can see your account
Our advisors and other authorized staff can see your account: name, email address, phone numbers, headshot, saved sailings, and when you signed up and last signed in. Staff sign in through a separate, protected system, and customer accounts can never reach staff pages.
Your headshot is private. It is shown only to you and our staff, never published on the site or shared with cruise lines, and never used for face recognition.
Cookies and analytics
Our Cookie Policy lists every cookie and similar technology we use. In summary:
- Cookies we need to run the site: keeping you signed in, remembering which consent rule applies to your region, and security cookies set by our infrastructure provider. These do not need consent and are not used for analytics or advertising.
- Google Analytics 4, on public pages only, never in the account area or on staff pages. Google Signals and advertising features are off, our account is not linked to Google Ads, Google Analytics 4 does not log or store IP addresses, and Google keeps our analytics data for 14 months.
- No advertising cookies and no third-party tracking pixels.
Your choice depends on where you are:
- In the European Economic Area, the United Kingdom, Switzerland, Brazil or Quebec, or if we cannot tell where you are: we ask first. Analytics does not load, and no analytics cookie is set, unless you choose Accept. Accept and Reject are equally easy.
- Everywhere else: we show a short notice and analytics loads unless you opt out.
You can change your choice at any time with the Your Privacy Choices link at the bottom of every page. If your browser sends a Global Privacy Control signal, we treat it as an opt-out and analytics does not load. When you opt out, we remove the Google Analytics cookies from your browser. Opting out never affects your ability to use the site, your account, or contact us.
Who we share it with
We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not give it to other travel agencies. We use service providers who process information on our behalf, under contract, and only for the purposes below:
- Cloudflare, Inc.: Website hosting, security, staff access control, storage of headshot photos. Information involved: Technical data; whatever passes through the site; headshots.
- Cloudflare Turnstile: Checking that a sign-in request comes from a person, not an automated program. Information involved: Browser and device signals, the IP address of the request.
- Neon (a Databricks company): Database hosting, in the United States (Virginia and Ohio). Information involved: Inquiry and account records.
- Resend: Sending email: sign-in codes and links, and inquiry notifications to our advisors. Information involved: Your email address; for advisors, your name and inquiry details.
- Google LLC (Google Analytics): Understanding site usage, public pages only, where allowed. Information involved: Usage data and online identifiers.
Cruise lines. If you ask us to make a booking, we pass the details that booking requires to the cruise line, which handles them under its own privacy policy. This happens only when you ask us to proceed, never automatically from an inquiry, a saved sailing or your account.
WhatsApp. If you contact us through the WhatsApp link, that conversation takes place on WhatsApp and Meta's privacy policy applies to it.
Legal and business reasons. We may disclose information where the law requires it, to protect the rights and safety of our clients, staff or others, or to establish or defend legal claims. If our business is sold or reorganized, your information may transfer to the new owner, and this policy will continue to apply to it.
Where your information is held
In the United States. Our database is in Virginia and Ohio, and our service providers process information in the United States and other countries where they operate. If you are outside the United States, your information is transferred to the United States, which may not have the same data protection laws as your country. Where the law requires a transfer safeguard, we rely on the EU-US Data Privacy Framework (and its UK and Swiss counterparts) for providers certified under it, and otherwise on standard contractual clauses in our providers' data processing terms. You can ask us for more information about these safeguards.
How long we keep it
- Inquiries: Three years after our last contact with you, then anonymized (we remove what identifies you and keep only aggregate figures). Cruise clients often travel every one to three years, so an inquiry from eighteen months ago is still a live conversation.
- Your account and saved sailings: Until you delete your account. We do not delete accounts for inactivity.
- Sign-in codes and the IP address that requested them: Deleted within a day.
- Signed-in sessions: Up to 30 days, or until you sign out.
- Search terms typed into the site: Kept without any identifier, so they cannot be linked to you.
- Google Analytics data: 14 months (held by Google).
- Marketing consent records: As long as the consent applies, and long enough afterwards to prove it.
Deleting your account. You can delete your account yourself at any time from your profile in My Amazing Cruises. This immediately and permanently deletes your account, your profile (including your headshot and phone numbers), your saved sailings, your sign-in records and every signed-in session. Inquiries you sent us are not part of your account and are kept under the three-year rule, because they are our advisory records. To have those deleted too, email privacy@amazingcruises.com and we will delete them unless we are required to keep them.
Your choices
- Browse without an account. Nothing you do on public pages is linked to your name unless you contact us or sign in.
- Accept, reject or change analytics at any time with Your Privacy Choices.
- Unsubscribe from marketing email with the link in any message.
- If texting is enabled, reply STOP to any text to stop them.
- View, correct or delete your account information in My Amazing Cruises, or by writing to us.
Your rights
Wherever you live, we will honor these requests on the same terms:
- Access: confirm whether we hold your information, and receive a copy
- Correction of anything inaccurate (you can edit your profile yourself)
- Deletion (you can delete your account yourself)
- Portability: a copy of what you gave us, in a usable format
- Withdraw consent to marketing or analytics at any time, without affecting earlier use
- Object to our use of your information based on legitimate interest
- No discrimination for exercising any of these rights
How to make a request: email privacy@amazingcruises.com or write to the address below. We will respond within 30 days, or sooner where your local law requires. We may need to verify your identity first and will do so proportionately. You may use an authorized agent where your law allows. If we decline a request, we will explain why and how to appeal.
Florida. We follow the Florida Digital Bill of Rights as if it applied to us: you may confirm whether we process your data, access it, correct it, delete it, obtain a portable copy, and opt out of sale, targeted advertising and profiling. We do not sell personal data, run targeted advertising, or profile you. We respond within 45 days. If we decline, you may appeal by replying to our response, and we will answer the appeal within 60 days. You may also contact the Florida Department of Legal Affairs.
California and other US states (including Colorado, Connecticut, Oregon, Texas, Utah and Virginia). You have the rights listed above as those laws define them. We do not sell or share personal information within the meaning of those laws, and have not done so in the preceding twelve months. We do not use or disclose sensitive personal information. We respond within 45 days, as those laws allow.
Canada. We handle personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, the Act respecting the protection of personal information in the private sector (Law 25). You may withdraw consent at any time, subject to legal or contractual restrictions. In Quebec, analytics is off until you turn it on. The person in charge of the protection of personal information at Amazing Cruises is Mark Zilbert, Chief Information Officer, reachable at privacy@amazingcruises.com. You may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.
European Economic Area, United Kingdom and Switzerland. The legal bases we rely on are set out in "What we do with it, and our legal basis." You also have the right to restrict our use of your information in certain cases, and to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office; in Switzerland, the Federal Data Protection and Information Commissioner).
Brazil. Under the Lei Geral de Proteção de Dados (LGPD), you may confirm whether we process your data, access it, correct it, have unnecessary or excessive data anonymized, blocked or deleted, obtain portability, learn which entities we share it with, be told what happens if you refuse consent, and withdraw consent. We will give a complete response within 15 days. Our data protection contact (encarregado) can be reached at privacy@amazingcruises.com. You may also complain to the Autoridade Nacional de Proteção de Dados (ANPD).
Children
This site is for adults planning travel and is not intended for anyone under 18. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
Security
Personal information is held in an access-controlled database and encrypted in transit. Staff areas require separate authentication. Customer accounts have no passwords, and we store sign-in codes and session tokens only in scrambled (hashed) form. Headshots are stored privately and never served publicly. We do not collect payment details or identity documents on this site at all, which removes the most sensitive information entirely. No system is perfectly secure, but we take reasonable measures, and if a breach affects you we will notify you and the authorities as the law requires.
Changes
When we change this policy we post the new version here with a new effective date. If a change is material, we will say so on the site and, if you have an account, email you before it takes effect.
Contact
Amazing Cruises, Inc.
1000 5th Street, Suite 200
Miami Beach, FL 33139, United States
privacy@amazingcruises.com
(800) 637-4680
Amazing Cruises, Inc. is registered with the State of Florida as a Seller of Travel. Registration No. ST-31932.