Privacy policy

My Cruise Story ("we") is the data controller for this website. We keep things simple: no accounts, no advertising trackers, and no selling your data. Ever. This policy explains what we do hold, why, and the rights you have under UK GDPR.

What we collect, why, and the legal basis

Order details. Name, email, delivery address (not needed for digital only orders) and, if you give it, a phone number. Used to make, deliver and support your order. Legal basis: performance of a contract.

Your design. The ports, dates, text and photos in your design become part of your order so we can print it, deliver your digital file, and reprint if something goes wrong. Photos are stored on our server in a private area that is not accessible from the web. Legal basis: performance of a contract.

Ship route lookups. If you choose the satellite exact route option, we send your ship's IMO number and cruise dates (never your personal details) to our route data provider to fetch the sailed track. Legal basis: performance of a contract.

Marketing. Only if you tick the opt in box at checkout do we send occasional offers by email. Legal basis: consent, which you can withdraw at any time on our unsubscribe page or by emailing us.

Payments. Payments are processed by Stripe. Your card details go directly to Stripe and never touch our servers. Stripe acts as our payment processor; see Stripe's own privacy policy for details.

Who else sees your data

Our hosting provider (UK/EU based servers), Stripe for payments, Royal Mail or our courier for delivery labels, and our route data provider as described above. We share only what each needs and we never sell or rent your details. We do not transfer your personal data outside the UK/EEA except where a processor (such as Stripe) does so under UK approved safeguards.

How long we keep it

Order records (name, order details, amounts) are kept for 6 years to meet UK tax and accounting rules. Uploaded photos and generated print files are deleted automatically within 12 months of delivery or cancellation. Photos uploaded but never attached to an order are deleted within 30 days. Marketing consent lasts until you withdraw it.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it (we erase everything except the minimal records accounting law requires us to keep), restrict or object to processing, and withdraw marketing consent. Email hello@mycruisestory.co.uk with your order number and we will act within one month, usually much faster. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Cookies and local storage

We use no advertising or analytics cookies, so there is no cookie banner to click. Your draft design is saved in your own browser's local storage purely so you do not lose your work; it stays on your device and is cleared when you place your order or clear your browser data. The crew admin area uses local storage for its sign in token; it is not used on customer pages.

Contact

Data questions: hello@mycruisestory.co.uk. We will publish our registered business address and ICO registration number here before launch.