Digital Personal Data Protection Policy (DPDP)

This Digital Personal Data Protection Policy is formulated in strict compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) enacted by the Parliament of India, together with applicable global privacy standards (GDPR, CCPA).

Under the DPDP Act, CruiseHelpCenter operates as the Data Fiduciary determining the purpose and means of processing digital personal data provided by travelers (“Data Principals”) seeking cruise consultations, itinerary quotes, and stateroom bookings.

To fulfill lawful cruise travel advisory functions and comply with maritime customs and border protection mandates, CruiseHelpCenter processes only necessary personal data:

In adherence to the Principle of Purpose Limitation under Section 4 of the DPDP Act, personal data is processed solely for the following specified lawful purposes:

• Formulating personalized cruise itinerary recommendations and stateroom quotes at the traveler's request.
• Directly submitting confirmed reservations to authorized cruise carriers (e.g., Cunard, Silversea, Seabourn, Viking, etc.).
• Filing mandatory maritime security manifests required by port authorities, coast guards, and immigration services.
• Transmitting rate-drop notifications and ticketing contract documents.
• Complying with statutory accounting, consumer protection, and tax regulations.

Every collection of personal data is preceded or accompanied by clear, itemized notice specifying the purpose and manner in which the data will be processed.

CruiseHelpCenter takes child data protection with absolute seriousness in strict alignment with Section 9 of the DPDP Act:

• We do not process personal data of any child under 18 years of age without verifiable consent from the parent or lawful guardian.
• We strictly prohibit tracking, behavioral monitoring, or targeted advertising directed at children.
• No processing is undertaken that causes detrimental effect on the well-being of a child.

As a Data Principal under the DPDP Act, you possess explicit, legally enforceable rights:

Because cruise itineraries, vessels, and flag states operate internationally, passenger manifest data is transferred cross-border to authorized international cruise lines and port immigration authorities.

All such transfers are executed strictly in accordance with Section 16 of the DPDP Act, ensuring that data is only transferred to jurisdictions not restricted by Central Government notifications, and protected by end-to-end 256-bit encryption.

In accordance with Section 10 and Section 13 of the DPDP Act, CruiseHelpCenter has appointed a designated Grievance Redressal Officer. Any complaint or exercise of Data Principal rights shall be acknowledged within 24 hours and resolved within 7 business days:

If you are not satisfied with the resolution provided by our Grievance Officer, you have the right under Section 27 of the DPDP Act to file a complaint before the Data Protection Board of India.