Privacy policy

My Cruise Story is a trading name of Maritime Master Limited ("we"), the data controller for this website. We keep things simple: you can order as a guest, we run no advertising trackers, and we never sell your data. Ever. This policy explains what we do hold, why, and the rights you have under UK GDPR.

What we collect, why, and the legal basis

Order details. Name, email, delivery address (not needed for digital only orders) and, if you give it, a phone number. Used to make, deliver and support your order. Legal basis: performance of a contract.

Your design. The ports, dates, text and photos in your design become part of your order so we can print it, deliver your digital file, and reprint if something goes wrong. Photos are stored on our server in a private area that is not accessible from the web. Legal basis: performance of a contract.

Ship route lookups. If you choose the satellite exact route option, we send your ship's IMO number and cruise dates (never your personal details) to our route data provider to fetch the sailed track. Legal basis: performance of a contract.

Marketing. Only if you tick the opt in box at checkout do we send occasional offers by email. Legal basis: consent, which you can withdraw at any time using the unsubscribe link at the bottom of any marketing email, or by emailing us.

Your account, if you want one. Checkout works perfectly well as a guest. If you do sign in, Shopify emails you a one time code, so there is no password for either of us to lose, and you can save designs to come back to later. Signing in links your email to your saved designs and nothing more. Legal basis: performance of a contract.

Payments. Payments are processed by Shopify Payments. Your card details go directly to Shopify and never touch our servers. Shopify acts as our payment processor; see Shopify's own privacy policy for details.

Who else sees your data

Shopify, which runs this shop and takes the payments made on the website. Stripe, which takes the payments made in our iPhone app: your card details go straight to Stripe and we never see or hold them. Our own hosting provider (UK/EU based servers) which holds your design and print files. Royal Mail or our courier for delivery labels. And our route data provider as described above. We share only what each needs and we never sell or rent your details. We do not transfer your personal data outside the UK/EEA except where a processor (such as Shopify or Stripe, both of which operate in the United States) does so under safeguards approved for UK transfers.

How long we keep it

Order records (name, order details, amounts) are kept for 6 years to meet UK tax and accounting rules. Uploaded photos and generated print files are deleted automatically within 12 months of delivery or cancellation. Photos uploaded but never attached to an order are deleted within 30 days. Marketing consent lasts until you withdraw it.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it (we erase everything except the minimal records accounting law requires us to keep), restrict or object to processing, and withdraw marketing consent. Email hello@mycruisestory.co.uk with your order number and we will act within one month, usually much faster. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Cookies and local storage

We set the few cookies this shop needs to work: keeping your basket, remembering your region, and keeping checkout secure. Those are strictly necessary, so they are set without asking, as the rules allow.

Anything beyond that, meaning analytics and any marketing tags, only runs if you accept it on the cookie banner when you first arrive. Decline and it does not run. You can change your mind at any time from the same banner.

Your draft design is saved in your own browser's local storage purely so you do not lose your work. It stays on your device until you add it to your basket or save it to your account, and clearing your browser data clears it. Our own staff area signs in with a secure http only cookie, never anything readable by scripts, and none of it is used on customer pages.

Contact

Data questions: hello@mycruisestory.co.uk.

Maritime Master Limited, registered in England and Wales, company number 15339200. Registered office: 3rd Floor, 86-90 Paul Street, London, EC2A 4NE.