Data Protection, Privacy & cookies
We will never sell your personal information under any circumstances.
Consenting to collection of personal information on digital platforms In accessing and using our website and digital marketing, or by providing us with some personal details by telephone, at a travel show or by any other means, you acknowledge that we (The Small Ship Cruise Collection) may collect personal information and personal data (personal information) from you, and that such personal information is freely given, including information about your:
1) Name (if supplied by you)
2) Contact information including your email address and phone number (if supplied by you)
3) IP address and location data
4) Your activity on our website, including use of cookies
5) Any other information you freely provide to us via our website enquiry form, by email, by telephone, at a travel show or any other means.
Cookies
When you access our website or engage with our other digital platforms, and to the extent permissible under applicable law, we automatically collect some categories of data from you, including data collected using cookies, embedded scripts, and other tracking technologies, for website analytics to improve your online experience, analyse website usage, provide better security, and to personalise online and offline marketing. We respond to the Global Privacy Control where required by applicable law. For cookie-based sales and targeted advertising opt-outs please adjust your cookie preferences, or visit our website in a private browsing mode, or a legally recognised global preferences signal such as the Global Privacy Control (GPC) enabled. Please note that these opt outs are browser specific. You must reset your preferences if you clear cookies or use a different browser or device.
Children
Our digital marketing seeks to promote our expedition cruises to adults. We do not knowingly solicit personal data from people under the age of 18, unless permitted by applicable law. If a parent or guardian learns their child has provided information to us without their consent, they should contact us using the contact details below and we will delete such information from our systems.
Consenting to collection of personal information when booking
In making a booking for a voyage with us, you further acknowledge that we may collect further personal information, and that such personal information is freely given to us on this basis, including:
· Your passport information
· Your medical history and information, including that which is collected on board or during the voyage
· Date of birth
· Postal and email addresses
· Contact numbers
· Emergency contact details
· Dietary requirements
We collect your personal information in order to:
Identify and authenticate you: we use your identification data to verify your identity when you access and use our services, and to ensure the security of your personal data. We do this to comply with our contractual obligations to you.
Provide emergency and security assistance: we provide you with emergency and security assistance to protect your vital interests or based on our legitimate interest of providing the services needed in case of urgent emergency or security situations on board.
Provide you and your group with information: we process your personal data to provide information you, or your organisation, have requested. We do this to comply with our contractual obligations to you or your organisation. For multi-guest bookings, we may allow all guests on the reservation to access and administer booking-related personal data of the guests on the same reservation in furtherance of our legitimate interest of allowing guests to conveniently administer their reservations.
Advertise and market our voyages: we may use your personal data, where permitted, to build a profile about you and place you into marketing segments to understand your preferences better and personalise the marketing messages we send to you. It is in our legitimate interest to provide more relevant and interesting advertising messages. We may contact you with marketing communications, and where necessary, we will obtain your consent before contacting you with such marketing communications.
Communicate with you: we may use your personal data when we communicate with you. For example, if we are providing information about changes to our terms and conditions, in response to a question you submitted, or to notify you of changes to your itinerary or important health and safety information. It is in our legitimate interest to provide you with appropriate responses, verify your contact information, provide you with medical testing results, and provide you with notices about our voyages.
Comply with our obligations under applicable laws: we may process your personal data to comply with applicable legal or regulatory requirements. For example, we may provide certain information to governmental and recognised law enforcement agencies, public health authorities, or port agents in connection with local and country requirements.
Customise and improve your experience: we may use your personal data to improve your experience, such as by providing interactive or personalised elements on our voyages, and providing you with content, offerings, and experiences based on your interests, including optional excursions. Where necessary, we will obtain your consent before using your personal data in this way. We frequently seek to improve our voyages to provide you with a better experience, and we may collect data about how you are using interacting with us to do so. We use this data to understand what voyages are of interest to you, make the booking process more convenient, ensure seamless operational processes, and maintain the safety and security of all guests, crew and our staff.
Exercise our rights: we may use your personal data to exercise our legal rights where it is necessary to do so, for example to detect, prevent, and respond to legal claims, intellectual property infringement claims, or violations of law or our terms and conditions.
Prevent fraud and comply with legal obligations: we may process your personal data to prevent fraud and comply with our legal obligations. For example, to carry out fraud prevention checks, which include building fraud-related profiles, and making decisions on that basis by fraud prevention experts.
Protect the health and safety of guests and crew: we may process your personal data to protect the health and safety of all individuals on board our ships. For example, we may check your information against a publicly available criminal record database and our internal records to protect the safety of our guests and crew or use your personal data, including your health data, to protect against the spread of communicable diseases.
Evaluate you for potential employment: we may process your personal data if you apply for a position as a team member with us, including by verifying any entitlements, monitoring equal opportunity employment, performing medical screenings (in some cases), and by making inquiries into any criminal and/or credit history based on our legitimate interests, to the extent necessary, and where permitted under applicable laws and regulations.
We may also share your personal information with third party companies and service providers we engage during voyages, as part of their operational requirements. For international voyages we may also be required to provide your details to the relevant governmental and customs authorities. In making a booking with us for a voyage, you consent to the disclosure of your personal information where required by third party companies and service providers. Providing some personal information is optional.
When making an enquiry online, if you choose not to provide your email address then we will be unable to respond to your enquiry. If you request that we not provide your personal information to a third-party company and service provider, they may not be able to provide their services to you during a voyage. Please note that preventing us from providing certain personal information to us and/or third parties may prevent you from being able to participate in a voyage. If we identify that you have requested such essential information not be provided to us or third parties, we will contact you to explain the situation.
We may disclose your personal information to a third party where we are required to by law. We are required to hold your personal information only as long as necessary. Because different types of personal data have different uses these periods may vary (see Principles of data retention and processing 2). At any time, however, you have the right to request that we remove your personal information from our system.
Principles of consent
1) You can withdraw this consent at any time.
2) Passengers under 18 may only give consent with permission from a parent
3) We will keep documentary evidence of consent in the form of retaining booking confirmations and/or newsletter subscriptions as applicable
Principles of data retention and processing We adhere to the following principles relating to processing of personal data:
1) Personal data shall be:
a) Processed lawfully, fairly, and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’)
b) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, not be considered incompatible with the initial purpose (‘purpose limitation’)
c) adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’)
d) accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’)
e) kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures implemented in order to safeguard the rights and freedoms of the data subject (‘storage limitation’);
f) processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).
2) We shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (‘accountability’). We will retain your personal data for as long as we have a relationship with you, or in accordance with applicable law, and such relationship includes any request to receive marketing or other promotional materials from us or our loyalty programs. When deciding how long to keep your personal data after our relationship with you has ended, we take into account our legal obligations, including requirements of regulators and governmental agencies that have authority over us.
We may also retain records to investigate or defend against potential legal claims. We will delete or anonymise your personal data at the end of the retention period. If there is any information that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further processing or use of the data.
Protecting your personal information
We will take reasonable steps to protect your personal information from unauthorised use, including ensuring that computers and devices are protected or locked by appropriate passwords and/or two-factor authentication. Transport Layer Security (TLS) and at-rest encryption cloud-based storage systems may also be employed for the storage of your personal information. Staff with access to your personal information are trained in technical and organisational security measures.
Third parties
Our website, applications, and social media sites include links to other websites or applications whose privacy practices may differ from our practices. If you submit personal data to any of those other websites or applications, your information is governed by their privacy policies. We are not responsible for the privacy practices or the content of any websites or applications to which our websites, applications, and social media sites provide links. We encourage you to carefully read the privacy policy of any website or application you visit.
International Data Transfers
We are headquartered in United KIngdom, but have global operations and affiliates. Accordingly, your personal data may be transferred to, stored, and processed in various countries, including those that are not regarded as ensuring an adequate level of protection for personal data under the laws in certain jurisdictions, such as the European Union, UK, Japan. We have put in place appropriate safeguards in accordance with applicable legal requirements to ensure that your data is adequately protected.
Breaches of personal information protection
The protection and security of your personal information is important to us, and physical administrative, and technological safeguards have been employed to preserve the integrity and security of all personal information collected. Notwithstanding this, no system is 100% impenetrable and we cannot guarantee the complete protection of your personal data in our system from data breaches. If we experience a serious privacy breach, including with respect to your information, we will notify you and the Office of the Privacy Commissioner within 72 hours of becoming aware of the breach. We will take steps to investigate the situation, including but not limited to engaging an external data security expert.
Your rights You have the right to:
· request that we provide you copies of your personal information, and to make corrections to any personal information you believe is inaccurate
· request that we complete personal information you believe is incomplete
· request that we erase your personal information
· object to us processing your personal information
· request that we transfer the personal information we have collected to another organisation, or directly to you
To exercise any of these rights please contact us at info@small-cruise-ships.com
Opting Out Our marketing emails, text messages, and most other electronic messages you receive from us will include instructions on how to unsubscribe, and you may unsubscribe at any time from our marketing by taking one the following steps: Follow the instructions provided in the footer of the message. Send your request by email to info@small-cruise-ships.com
This privacy policy has been developed to communicate to you the obligations that we have to you in relation to collecting, using, disclosing and protecting your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018) and their principles, and the European Union’s General Data Protection Rules. This Privacy Policy was last updated on 12 January 2026.