Privacy Policy — MyCruiseReview
MyCruiseReview

Privacy Policy

What we collect, how it's used, and the rights you have under GDPR, UK GDPR, and CCPA.

Last updated: April 25, 2026

1. Who We Are

The data controller is MyCruiseReview Editorial. You can reach our editorial team at contact@mycruisereview.com or via our Contact page.

2. What We Collect and How Long We Keep It

Newsletter subscribers. When you subscribe, we store the email address you provide plus a confirmation timestamp. We use it only to send you the newsletter you requested. We retain newsletter records until you unsubscribe, and for thirty (30) days after unsubscription to honour suppression-list obligations, after which the record is deleted from active systems.

Comment authors. When you submit a comment we store four fields: (1) the display name you provide, (2) the comment body text, (3) a created-at timestamp, and (4) the originating IP address (used solely for spam and abuse moderation). Approved comments are retained for the lifetime of the parent article so that the discussion remains intact. Originating IP addresses are pruned from comment records after ninety (90) days. You may request deletion of your comment at any time via the address in section 9.

Server logs. Our server records standard access logs (IP address, user agent, request path, timestamp) for security and operational purposes. Server logs are retained for thirty (30) days and then rotated out automatically.

Cookies and similar technologies. See our Cookie Policy for the full categorised list, including advertising cookies set by third parties.

3. Third-Party Advertising (Google AdSense)

Google AdSense may be used on the Site after our publisher account is approved by Google. Until that approval takes effect and the AdSense script is injected, no advertising cookies or vendor scripts are loaded on the Site. Once active, Google and its partners may use cookies and similar technologies to serve ads based on your prior visits to this Site and other sites on the internet, subject to your consent where consent is required.

Vendors and ad partners. When AdSense is active, the advertising ecosystem may include the following vendors among others, all of whom act as independent controllers for the data they process for ad selection, measurement, and fraud prevention:

  • Google LLC (Google AdSense and Google Ad Manager)
  • IAB-registered demand-side platforms participating in Google's auction

Optional analytics and error tracking. The Site may also load Plausible Analytics (a privacy-respecting, cookieless aggregate page-view counter) when VITE_PLAUSIBLE_DOMAIN is configured at build time, and may report front-end exceptions to Sentrywhen VITE_SENTRY_DSN_WEB is configured. Both are optional and may not be loaded on every deployment.

Opting out. You may control or disable personalised advertising at any time:

You can also revisit your consent choices at any time from the "Cookie preferences" link in our footer.

4. How We Use Information

  • To operate, maintain, and secure the Site.
  • To deliver the newsletter you have requested.
  • To moderate and publish comments you submit.
  • To measure aggregate usage (e.g., which articles are most read), and — where you have consented — to display and measure advertising.
  • To comply with legal obligations and enforce our Terms.

5. Lawful Bases (GDPR / UK GDPR)

For visitors in the EU, UK, and other GDPR-aligned jurisdictions, we rely on the following lawful bases:

  • Consent (Art. 6(1)(a)) — for non-essential cookies, advertising, and analytics.
  • Contract (Art. 6(1)(b)) — to deliver the newsletter you subscribed to.
  • Legitimate interests (Art. 6(1)(f)) — for site security, fraud prevention, comment moderation, and minimal access logs. You have a right to object.
  • Legal obligation (Art. 6(1)(c)) — where required by law.

6. Your Rights

Subject to your jurisdiction, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion (the "right to be forgotten").
  • Restrict or object to processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time.
  • Lodge a complaint with your local data-protection authority.

To exercise these rights, email contact@mycruisereview.com. We respond within the timelines required by your local law (30 days under GDPR, 45 days under CCPA).

7. California Notice — Do Not Sell or Share My Personal Information

Under the California Consumer Privacy Act (CCPA), as amended by the CPRA, California residents have the right to opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising. The use of advertising cookies described above may constitute "sharing" under California law.

To opt out: declining the "Advertising" category in our consent banner records and applies your preference. You may also email contact@mycruisereview.com with the subject line "Do Not Sell or Share — CCPA". If your browser sends a Global Privacy Control (GPC) signal, you may include that fact in your message and we will treat it as a valid opt-out request.

8. Data Retention

  • Newsletter subscriptions: kept until you unsubscribe, plus 30 days for backups.
  • Comments: kept for the lifetime of the relevant article, unless deletion is requested.
  • Server access logs: retained for 30 days for security and operational purposes, then deleted or aggregated.
  • Advertising cookies: retention is set by the vendor (typically 13 months for Google ad personalisation).

9. International Transfers

We are based in the United States. Where personal data is transferred from the EU/UK to the U.S., we rely on appropriate safeguards including the EU Standard Contractual Clauses (2021/914) and the UK ICO Addendum, plus any additional measures required by the recipient's adequacy status.

10. Children

The Site is not directed at children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please email us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision. Material changes will be highlighted on the home page or notified to newsletter subscribers.