HomePrivacy policy
Policies
Privacy policy
Who we are
CruiseCabinet ("we", "us") is operated from South Africa by [OPERATOR LEGAL NAME, PLACEHOLDER]. For the purposes of South Africa's Protection of Personal Information Act, 2013 (POPIA) we are the "responsible party", and for the EU/UK General Data Protection Regulation (GDPR) we are the "controller". Our Information Officer can be reached at [email protected].
What we collect and why
| Information | Purpose | Lawful basis |
|---|---|---|
| Email address (and first name, if given) when you subscribe | Send the checklist you asked for and occasional newsletters | Your consent (you can withdraw anytime) |
| Order details when you buy a guide (processed by our checkout provider) | Deliver your purchase, handle refunds and tax records | Performance of a contract; legal obligation |
| Messages you send us | Reply to you | Legitimate interests |
| Aggregated, cookieless website statistics (pages viewed, referrer, country, device type) | Understand which guides are useful | Legitimate interests |
Please don't send us health information. We don't need it, don't ask for it, and don't give personal medical advice.
Cookies
Our own site does not use advertising or tracking cookies, and our analytics are designed to work without cookies. If you click an affiliate link, the partner site (for example a travel insurance comparison site or retailer) may set its own cookies to record that you came from us. Their privacy policies apply on their sites.
Service providers we use
We share personal information only with providers who help us run the site, under contracts that require them to protect it:
- Website hosting and cookieless analytics: Cloudflare (PLACEHOLDER: confirm at launch)
- Email newsletters: Kit (ConvertKit) (PLACEHOLDER)
- Digital product checkout and tax: Lemon Squeezy or Gumroad, acting as merchant of record (PLACEHOLDER)
Some of these providers process data outside South Africa and the EU/UK, including in the United States. Where this happens we rely on appropriate safeguards (such as the provider's standard contractual clauses or binding agreements) as permitted by POPIA section 72 and GDPR Chapter V.
How long we keep it
Subscriber data: until you unsubscribe, then deleted or anonymized within a reasonable period. Order records: as long as tax and accounting law requires. Emails: as long as needed to deal with your query.
Your rights
Depending on where you live, you can ask to access, correct or delete your personal information, object to or restrict processing, withdraw consent, and request a portable copy. Every email we send includes an unsubscribe link. To make a request, email [email protected].
You also have the right to complain to a regulator: in South Africa, the Information Regulator; in the EU, your local data protection authority; in the UK, the ICO.
Children
This site is intended for adults planning travel. We do not knowingly collect information from children under 18.
Security
We use reputable providers, HTTPS and access controls. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information and will notify you and the regulator of a security compromise where the law requires.
Changes
We'll update this page when our practices change and show the date at the top.