Privacy Policy

Let's Cruise is a South African cruise booking agency and the Responsible Party for the personal information you share with us, as defined in the Protection of Personal Information Act 4 of 2013 (POPIA). Contact: karen@letscruise.co.za, WhatsApp +27 72 742 4491.

• Contact details: name, email address, phone number.
• Enquiry details: preferred cruise, cabin type, number of cabins and guests by age group.
• Booking details: full names, dates of birth, nationality, passport or ID details, emergency contacts, dietary or medical requirements you choose to share.
• Payment records: amounts, references and proof of payment. We never store card numbers or CVV codes.
• Basic technical data such as browser type and pages visited, to keep the website working well.

• To respond to your enquiry and prepare quotes.
• To make, manage and change bookings with cruise operators such as MSC Cruises.
• To process payments and send travel documents and reminders.
• To meet legal, tax and accounting obligations.
• To send you cruise offers, only if you agree. You can opt out at any time.

We process your information with your consent, to take steps to conclude or perform a contract with you, to comply with the law, or for our legitimate interests in running our business, as allowed by section 11 of POPIA.

Information about children under 18 is processed only with the consent of a parent or legal guardian, and only as needed to book their cruise.

Health, dietary or accessibility information is collected only when you provide it, with your consent, and only to arrange your cruise needs.

We share only what is necessary with:

• Cruise operators (for example MSC Cruises) and their agents.
• Port, immigration and travel authorities where legally required.
• Trusted service providers who host our website and data, bound by confidentiality and security obligations.

We never sell your personal information.

Cruise operators and some service providers are based outside South Africa. When information is transferred abroad, we make sure the recipient is subject to laws, binding rules or agreements offering protection similar to POPIA, as required by section 72.

We use encrypted connections, encrypted storage, restricted admin access protected by two-step sign-in, and access controls so only authorised staff can see client records. If a security breach affects you, we will notify you and the Information Regulator as POPIA requires.

We keep your information only for as long as needed for the purposes above, or as required by law (for example tax records for five years), after which it is securely deleted or anonymised.

• Ask whether we hold your information and request a copy.
• Ask us to correct or delete inaccurate, outdated or unlawfully obtained information.
• Object to processing, including direct marketing.
• Withdraw consent at any time (this does not affect processing already done).
• Lodge a complaint with the Information Regulator: inforeg.org.za, complaints.IR@inforegulator.org.za.

To use any of these rights, email karen@letscruise.co.za.

Our website uses only the essential browser storage needed for it to work, such as remembering your search filters during your visit.

We may update this policy from time to time. The latest version is always on this page.