Written to match what the site actually does
Privacy policy
What we collect when you ask for a cruise quote, why we need it, who sees it and how to get it deleted. No boilerplate about services we do not run.
- The short version
- Who is responsible for your data
- What we collect
- Why we use it, and our legal basis
- Who we share it with
- Cookies and analytics
- WhatsApp, phone and email
- Partner links on guide pages
- How long we keep it
- How we protect it
- Where your data goes
- Your rights
- Children
- Changes to this policy
- Contact and grievances
In one line: we collect the details you type into a quote form or send on WhatsApp, use them to price and run your trip, share them with the cruise line and suppliers who need them, and keep them only as long as our tax and booking records require.
Last updated 14 September 2026
The short version
- We do not sell your data. Ever.
- We do not run advertising networks or retargeting pixels on this site.
- The quote form asks for seven things: name, email, phone, travel month, number of adults, number of children and an optional message.
- Once you book, the cruise line needs passport-level detail. We collect that separately, use it for the booking, and do not keep it longer than we must.
- You can ask us to show you, correct or delete what we hold. Email info@singaporestarcruise.com.
Who is responsible for your data
Singapore Star Cruise, a partnership firm registered in India with GSTIN 05AFKFS2786L1ZC, is the data fiduciary (India) and data controller (Singapore) for the personal data described here.
Registered office: Khasra No. 660, Ramola Hardware, Nathuwawala, Near Adarsh Colony, Dehradun, Uttarakhand 248008.
Cruise desk: 311, Plot No. 1, Pocket 6, Vardhman Plaza, Sector 12, Dwarka, New Delhi 110078.
This policy is written to meet India's Digital Personal Data Protection Act, 2023 and Singapore's Personal Data Protection Act, since we handle data from guests in both countries.
What we collect
When you ask for a quote
| Data | Required? | Why |
|---|---|---|
| Name | Yes | So a consultant can address you and match your booking |
| Yes | To send the itemised quote | |
| Phone or WhatsApp | Yes | To reply quickly and confirm details |
| Travel month | No | To price the right sailings |
| Adults and children | No | Cabin occupancy and child fares |
| Message | No | Whatever you choose to tell us — dates, cabin type, dietary needs |
| Page you asked from | Automatic | So the consultant knows which ship you were reading about |
When you go ahead and book
Cruise lines require more before they will issue a ticket. Depending on the line and the ports, that usually includes each traveller's full name as printed in the passport, date of birth, nationality, passport number and expiry date, and sometimes an emergency contact, a residency pass number for Singapore residents, and any accessibility or dietary requirement you ask us to register.
If you tell us about a medical condition, mobility need, pregnancy or dietary restriction, that is sensitive information. We use it only to make the booking work — for example to request an accessible cabin or a halal meal — and we pass it only to the supplier who needs it.
Automatically, when you use the site
- Standard web server logs kept by our hosting provider: IP address, browser type, pages requested and timestamps.
- A spam-protection record. When you submit a form we store a one-way hash of your IP address with a timestamp, purely to stop the same connection flooding us. The original IP is not stored in that record and it expires within an hour.
- Google Analytics measurement data — see the cookies section below.
We do not ask for, and you should never send us, card numbers or bank details through the website, WhatsApp or email.
Why we use it, and our legal basis
| Purpose | Basis |
|---|---|
| Preparing and sending your quote | Steps taken at your request before a contract |
| Making and managing your booking | Performance of our contract with you |
| Passing traveller details to the cruise line and suppliers | Necessary to deliver the booking |
| Issuing invoices and keeping tax records | Legal obligation under Indian tax law |
| Answering questions and handling complaints | Our legitimate interest in running the business properly |
| Preventing spam and abuse of our forms | Our legitimate interest in keeping the site working |
| Analytics on how pages are used | Your consent, where required |
We do not send marketing emails or newsletters from this website. If we ever start, it will be opt-in with an unsubscribe link, and this policy will be updated first.
WhatsApp, phone and email
Many guests contact us on WhatsApp. When you tap a WhatsApp link here, you leave our site and your message is handled inside WhatsApp, under WhatsApp's own privacy policy. We see your phone number and profile name, as any WhatsApp contact would.
We keep the conversation for as long as it is useful for your booking, and copy the essentials into your booking file. Please do not send passport scans or card details over WhatsApp — we will tell you a safe route when documents are genuinely needed.
Partner links on guide pages
A few of our cruise guides link to booking partners. Those links are labelled and carry a sponsored tag. If you click one you leave our site, and the partner's own privacy policy and cookies apply from that point. We may earn a commission; it never changes what you pay, and we do not receive personal data back from those partners.
How long we keep it
| What | Kept for |
|---|---|
| Enquiries that never became a booking | Up to 24 months, then deleted |
| Booking files and correspondence | While the booking is live, then as long as a claim could arise |
| Invoices and tax records | As long as Indian tax law requires |
| Passport and traveller detail supplied for ticketing | Removed from our working records once the trip is complete and the file is closed |
| Spam-protection records | Under one hour |
| Web server logs | As set by our hosting provider, typically a short rolling window |
You can ask us to delete an enquiry sooner. If you have travelled with us, we may have to keep invoice records even after deleting the rest.
How we protect it
- The whole site runs over HTTPS, with strict transport security enabled.
- The enquiry database sits behind server-side credentials that are not exposed in the website code, and all queries are parameterised to prevent injection.
- Access to enquiries and booking files is limited to the consultants who need it.
- Form submissions are protected by a signed token, a hidden honeypot field and a per-connection rate limit, rather than a CAPTCHA that would exclude real guests.
No system is perfectly secure. If a breach affects your data, we will notify you and the relevant authority as the law requires.
Where your data goes
We are based in India and our guests are largely in Singapore, India, Malaysia and the wider region. Delivering a booking necessarily means sending traveller details to cruise lines, hotels and operators located outside your country — typically Singapore, Malaysia, Hong Kong or the United States, depending on the cruise line.
We share only what the supplier needs for that booking, and we use suppliers that are bound by their own data protection obligations.
Your rights
Wherever you are, you can ask us to:
- Show you the personal data we hold about you and who we shared it with.
- Correct anything that is wrong or out of date.
- Delete your data, where we are not required to keep it for tax or legal reasons.
- Withdraw consent you previously gave, for example to analytics.
- Nominate someone to exercise these rights on your behalf if you are unable to, as provided by India's DPDP Act.
Email info@singaporestarcruise.com with the subject "Data request". We reply within 30 days and may ask a question or two to confirm it is really you. There is no fee.
If you are not satisfied with our response, you may complain to the Data Protection Board of India, or to the Personal Data Protection Commission in Singapore if your data was handled there.
Children
This website is aimed at adults booking travel. We do not knowingly collect data directly from children. Where a booking includes children, we receive their details from the adult making the booking, and use them only for that booking. If you believe a child has sent us data directly, tell us and we will delete it.
Changes to this policy
We update this page whenever the site changes what it collects — for example if we add analytics or a new booking tool. The date at the top shows the current version. Material changes will be highlighted here rather than slipped in quietly.
Contact and grievances
For any privacy question, data request or complaint:
Singapore Star Cruise
Email info@singaporestarcruise.com · Phone +91 92121 53574
311, Plot No. 1, Pocket 6, Vardhman Plaza, Sector 12, Dwarka, New Delhi 110078, India
Registered office: Khasra No. 660, Ramola Hardware, Nathuwawala, Near Adarsh Colony, Dehradun, Uttarakhand 248008
Grievances about how we handle personal data are answered by the partner responsible for data protection at the cruise desk, reachable at the email above. We acknowledge within 7 working days.
Want your enquiry deleted?
Email us with "Data request" in the subject line. No forms, no fee, no questions about why.