This Privacy Policy (the "Policy") describes the types of information that Cruisebound (the "Company," "we," or "us") gathers from visitors to our website and to our partner websites, which we operate with one or more business partners (collectively, the "Sites"). We process personal information in accordance with applicable U.S. state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Utah Consumer Privacy Act (UCPA), the Oregon Consumer Privacy Act (OCPA), and other similar U.S. state privacy laws, as well as other applicable privacy regulations.

"Personal Information" means information that can be associated with a particular user.

Categories of Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information as defined by U.S. privacy laws:

• Identifiers: name, postal address, email address, phone number, online identifiers, IP address.
• Professional or Employment-Related Information: job title, employer, and work contact details, when provided.
• Internet or Network Activity: browsing history, search history, and interactions with our Sites.
• Geolocation Data: general location inferred from IP address. We do not collect precise geolocation (as defined by CCPA/CPRA and similar laws, including the Oregon Consumer Privacy Act) without your explicit consent.
• Commercial Information: records of bookings, products or services purchased or considered, and related transaction details.
• Inferences: derived preferences or interests based on your activity on the Sites.

We do not collect sensitive personal information as defined by the CPRA and similar state privacy laws (e.g., Social Security numbers, driver's license or passport numbers, precise geolocation, biometric data, racial or ethnic origin, religious beliefs, health information, or information about sexual orientation) unless you provide it voluntarily and with your explicit consent, for example, when you choose to share such information in connection with a booking.

The chart below details the personal information we collect, how we collect it, and why we collect it when you use the Sites:

If you are not comfortable with our accessing and using personal information as described above, you should not provide it (and should take steps to disable any technology that automatically provides us with personal information). This may affect our ability to provide you with information and services through the Sites; however, that is your choice.

When you provide information through a partner website, we may use that information to contact you about offers that may be of interest to you, though they may not be offers from the business partner with which we operate the partner website.

You may adjust your web browser software if you do not wish to receive cookies, but this may prevent you from taking advantage of some of the Sites' features. Please refer to your browser to learn more about these functions. You may request to opt-out of Google's use of cookies by visiting www.google.com/ads/preferences.

We may use non-personal information (that is, information that cannot be associated with a particular user) to analyze trends, administer the Sites, and gather broad demographic data for aggregate use. We may also use non-personal information and other de-identified information for any lawful business purpose without any obligation or accounting to you. For example, we can use non-personal information for developing products, services, and providing those offerings to other users and third parties.

We do not sell or share personal information for cross-context behavioral advertising. We do not share personal information except in the following situations:

• Business Transfers. We may share or transfer personal information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Vendors, Consultants and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include: payment processing, data analysis, email delivery, hosting services, customer service and marketing efforts. We may allow selected third parties to use tracking technology on the Website, which will enable them to collect data on our behalf about how you interact with our Website over time. This information may be used to, among other things, analyze and track data, determine the popularity of certain content, pages or features, and better understand online activity. We do not share, sell, rent or trade personal information with third parties for their promotional purposes.
• Compliance with Law and Prevention of Harm. We may disclose personal information if we have a good faith belief that such disclosure is helpful or reasonably necessary to: (i) comply with any applicable law, regulation, legal process or governmental request; (ii) enforce any applicable terms of service, including investigations of potential violations thereof; (iii) detect, prevent, or otherwise address fraud or security issues; or (iv) protect against harm to the rights, property or safety of the Company, our users, yourself or the public. We may be required to disclose personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements.

All above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Depending on your state of residence, you may have the following rights regarding your personal information:

To exercise any of the rights described below, you may submit a request through our Data Subject Access Request (DSAR) form or by emailing us at [email protected].

Opting Out of Email Marketing

You can unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send. You will then be removed from the marketing email list — however, we may still communicate with you, for example to send you service-related emails that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.

Right to Know

You may request information about our collection, use, and disclosure of your information (a "Request to Know"), including:

• the categories and specific pieces of personal information we have collected about you;
• the categories of sources from which we have collected your personal information;
• the business or commercial purpose for collecting your personal information;
• the categories of personal information we have disclosed about you; and
• the categories of third parties with whom we have shared, disclosed for a business purpose, or sold your personal information, and which categories of personal information have been disclosed to which categories of third parties.

You may submit a Request to Know by emailing us at [email protected]. You may submit two types of Requests to Know: (1) a request for the specific pieces of personal information we have collected about you in the past twelve months; or (2) a request for the categories of personal information we have collected about you in the past twelve months and how we have used and disclosed that personal information.

When you submit a Request to Know, we may ask you to provide certain pieces of information in order to verify your identity, such as your name, email address, and phone number. If you submit a Request to Know for the specific pieces of information we have collected about you, we may also require you to submit a signed declaration under the penalty of perjury stating that you are the consumer whose personal information is the subject of the Request to Know.

We will confirm receipt of your Request to Know within 10 business days and will respond within 45 days. If a response requires additional time, we will notify you of the basis for the delay and may extend our response period up to an additional 45 days. If we provide the information requested, we will provide it free of charge and in a readily usable portable format.

Right to Delete

You may request that we delete your personal information (a "Request to Delete") by emailing us at [email protected]. When you submit a Request to Delete, we may ask you to provide certain information to verify your identity. If we are able to verify your identity, we will respond by (a) deleting your personal information and, if applicable, directing our Service Providers to delete your personal information; or (b) explaining why we are not required to delete your personal information. We may choose to delete personal information by de-identifying, aggregating, or completely erasing the information.

Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you. You may submit a Request to Correct by emailing us at [email protected]. We will use commercially reasonable efforts to correct the inaccurate personal information within 45 days of receiving your verified request.

Right to Opt-Out of Sale or Sharing

You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. As stated above, we do not sell your personal information and do not share it for cross-context behavioral advertising purposes. If our practices change, we will update this Policy and provide a mechanism for you to opt out.

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, whether we can achieve those purposes through other means, and applicable legal requirements.

When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies. If you request deletion of your personal information, we will process your request as described in the "Right to Delete" section above.

Our mobile app may request permissions for location services, notifications, and payment processing to enhance functionality. You can manage these permissions through your device settings.

Cruisebound may offer AI-powered assistants through platforms such as ChatGPT to help users search for cruise information and explore travel options.

When users interact with these assistants:

• Messages are processed only to generate responses during the session.
• Cruisebound does not collect or store personal information from these conversations.
• The assistant does not require account login or collect booking information.

Users should avoid sharing sensitive personal information in chat interactions.

We will not discriminate against you for exercising any of your privacy rights. Unless permitted by applicable law, we will not:

• Deny you goods or services;
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
• Provide you a different level or quality of goods or services; or
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

You may designate an authorized agent to submit a privacy request on your behalf. To do so, you must provide the authorized agent with written permission to act on your behalf, and we may require you to verify your own identity directly with us before we process the agent's request. An authorized agent may submit a request by emailing us at [email protected] with proof of authorization.

Accessibility and Language — Any person that is unable to access this Policy may request this Policy in an alternative format or language by contacting us at [email protected].

International Users — The Company and its servers are located in the United States and are subject to applicable local, state, and federal laws. Users who choose to access the Sites do so on their own initiative and at their own risk, and are responsible for complying with all applicable laws, rules and regulations. Users who choose to access the Sites consent to the use and disclosure of information in accordance with this Policy and subject to such laws. We may limit the Sites' availability, in whole or in part, to any person, geographic area or jurisdiction we choose, at any time and in our sole discretion.

Children's Privacy — The Sites are neither directed to nor structured to attract users under the age of 18. If you are under the age of 18, you are not permitted to use the Sites. The Company does not knowingly collect personal information from users under the age of 18. If you are a parent with concerns about children's privacy issues in conjunction with the use of the Sites, please contact the Company at [email protected].

Do Not Track and Opt-Out Signals — We do not sell or share your personal information for advertising purposes. If your browser or device sends a "Do Not Track" signal or a Global Privacy Control (GPC) opt-out preference signal, our data practices are already consistent with the intent of such signals, and we will treat any such signal as a valid request to opt out of the sale or sharing of personal information where applicable. We use cookies and similar technologies only as described in this Policy.

Amendments — We may modify or amend this Privacy Policy from time to time. If we make any material changes, as determined by us, to this Privacy Policy, including in the way in which personal information is collected, used or transferred, we will notify you by e-mail to the address specified in your profile or by means of a notice on the Site prior to the change becoming effective.

If we decline to take action on a privacy request you have submitted, you have the right to appeal that decision. To submit an appeal, please email us at [email protected] with the subject line "Privacy Request Appeal." We will respond to your appeal within 60 days. If the appeal is denied, we will provide you with information on how to contact your state's Attorney General to submit a complaint.

We use cookies and similar tracking technologies to operate the Sites, analyze usage, remember your preferences, and support our marketing efforts. Cookies are small text files that are placed on your device when you visit a website.

Types of Cookies We Use

• Essential cookies — necessary for the Sites to function, such as maintaining your session, processing bookings, and enabling security features. These cookies cannot be disabled.
• Analytics cookies — help us understand how visitors use the Sites so we can improve them.
• Functional cookies — remember preferences such as language, region, and other site settings.
• Advertising cookies — used to measure the effectiveness of our marketing. As stated above, we do not sell or share personal information for cross-context behavioral advertising.

Managing Your Cookie Preferences

You can manage non-essential cookies at any time using the cookie preferences control available on our Sites, or by adjusting your browser settings to refuse cookies. If your browser or device sends a Global Privacy Control (GPC) or "Do Not Track" signal, we honor those signals in accordance with applicable law. Disabling cookies may affect the functionality of the Sites.

Cruisebound has appointed a data protection officer for you to contact if you have any questions or concerns about Cruisebound's personal data policies or practices. If you would like to exercise your privacy rights, you may direct your query to Cruisebound's data protection officer. Cruisebound's data protection officer's name and contact information are as follows:

Rhymetec
Cruisebound
228 Park Ave S, PMB 33106
New York, NY 10003
Email: [email protected]
Phone: 844-459-7245

If you believe you've discovered a potential vulnerability, please let us know by emailing us at [email protected].

If you have questions about this notice, you can contact us as follows:

By email: [email protected]

By mail:
Cruisebound, Inc.
228 Park Ave S PMB 33106
New York, NY 10003-1502