
Preparing your next cruise…
How personal data is collected, used, stored and protected on ZapCruise
Last updated: 07/09/2026
ZapCruise respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how personal data is collected, used, stored and protected when you access or use zapcruise.com and any related ZapCruise services, features or communications (the "Platform").
ZapCruise is a cruise-focused comparison and decision-intelligence platform. ZapCruise does not directly sell cruises or act as the cruise line or travel agency providing the travel service. When users choose to view or book an offer, they may be redirected to a cruise line, online travel agency ("OTA") or other third-party provider.
The controller responsible for the processing of personal data through the Platform is:
For any question concerning this Privacy Policy or the processing of your personal data, you may contact us at the address above.
Depending on how you use ZapCruise, we may process different categories of personal data.
We may collect technical information relating to your use of the Platform, including IP address, browser type and version, device type, operating system, referring URL, pages visited, date and time of access, interaction with pages and technical logs.
Some of this information is necessary for security, platform operation, fraud prevention, troubleshooting and performance monitoring.
Additional analytics and behavioural information is collected only where required consent has been provided.
Where account registration or user-account functionality is available, we may process information such as your name, email address, account identifiers and information required to operate your account.
If you contact us, participate in beta testing, provide feedback or communicate with ZapCruise, we may process your name, email address and the content of your communications.
When using ZapCruise, we may process information concerning how the Platform is used, including cruise searches, filters selected, cruise pages viewed, price comparisons viewed, interactions with ZapCruise decision-intelligence features and clicks on external cruise offers.
Where features such as cruise tracking, saved cruises, price alerts or similar personalised services are available and used, we may associate the relevant information with your account or contact details in order to provide the requested service.
Such data may also be used, where permitted by applicable law, to improve search quality, pricing intelligence, recommendations, platform functionality and user experience.
If you participate in testing or voluntarily provide feedback, we may process survey responses, comments, bug reports, screenshots or other information you choose to provide.
ZapCruise does not intentionally request or collect special-category personal data such as information concerning health, racial or ethnic origin, political opinions, religious beliefs, biometric data or sexual orientation.
Please do not submit such information through the Platform unless specifically requested and legally justified.
We process personal data only where there is an appropriate legal basis.
We may use personal data to operate, maintain and secure the Platform; provide requested functionality; manage user accounts and alerts; respond to enquiries; detect and prevent misuse; troubleshoot technical issues; improve usability and performance; improve cruise-search accuracy and decision-intelligence features; understand how visitors use the Platform; and comply with applicable legal obligations.
Where processing is necessary for the functioning, security or protection of the Platform, the legal basis may be our legitimate interests pursuant to Article 6(1)(f) GDPR.
Where processing is necessary to provide a service specifically requested by a user, the legal basis may be Article 6(1)(b) GDPR.
Where processing is required by law, the legal basis is Article 6(1)(c) GDPR.
Where we use non-essential analytics, session-recording, heatmap or similar tracking technologies, including Google Analytics 4 and Microsoft Clarity, the legal basis is your consent pursuant to Article 6(1)(a) GDPR, where such consent is required.
You may withdraw such consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Subject to your consent where required, ZapCruise uses Google Analytics 4 ("GA4"), a service provided by Google, to understand how users interact with the Platform.
Google Analytics may process information concerning visits, pages viewed, device and browser information, interactions and other usage information.
For visitors for whom consent is required, ZapCruise is configured so that analytics functionality subject to consent is not activated unless the required consent has been provided.
Google may process data in accordance with its own applicable privacy terms and contractual arrangements.
Subject to your consent where required, ZapCruise uses Microsoft Clarity, provided by Microsoft, to better understand how visitors interact with the Platform.
Clarity may provide tools such as heatmaps, interaction analytics and session-representation or session-recording functionality intended to help us identify usability issues and improve user experience.
For users for whom consent is required, the relevant Clarity tracking functionality and cookies are controlled through the ZapCruise consent mechanism.
ZapCruise may also operate its own analytics systems to understand product usage and improve the Platform.
Where first-party analytics involve non-essential tracking requiring consent under applicable law, such processing will not be activated until the appropriate consent has been given.
ZapCruise uses cookies and similar technologies for purposes including essential operation, security, analytics and user-experience analysis.
Strictly necessary technologies may operate without consent where legally permitted because they are required to provide the Platform or a feature explicitly requested by the user.
Non-essential analytics, session-recording and similar tracking technologies are subject to the user's prior consent where required by applicable law.
More information is provided in the ZapCruise Cookie Policy.
When required, ZapCruise displays a consent interface allowing visitors to Accept all, Reject all, or Manage preferences.
Non-essential categories are disabled until the visitor provides the relevant consent.
Users may subsequently change or withdraw their choices at any time through the Cookie settings link available in the Platform footer.
Withdrawal of consent does not affect the legality of processing carried out before the consent was withdrawn.
ZapCruise compares information and may provide links to third-party websites operated by cruise lines, OTAs or other travel providers.
When you select an external offer, you leave ZapCruise and enter the third party's website.
That third party may independently collect personal data and use cookies or other tracking technologies under its own privacy policy.
ZapCruise does not control the privacy practices of those independent third-party websites and recommends reviewing their applicable privacy notices before submitting personal information or completing a booking.
Some links may be affiliate links, meaning ZapCruise may receive compensation in connection with traffic, leads or bookings generated through the Platform. This does not alter the privacy rights described in this Policy.
We may use third-party suppliers to provide hosting, cloud infrastructure, analytics, security, email delivery, technical services and other functions required to operate ZapCruise.
Depending upon the circumstances and the relevant contractual relationship, such providers may process personal data on our behalf or may act under their own applicable data-protection responsibilities.
Providers currently relevant to analytics include Google in connection with Google Analytics 4 and Microsoft in connection with Microsoft Clarity.
Their precise privacy role and contractual designation should be interpreted in accordance with the applicable service terms and data-processing agreements.
Some of our service providers may process personal data outside Italy or the European Economic Area.
Where personal data is transferred to a country outside the EEA, ZapCruise will rely on an appropriate transfer mechanism where required by applicable law.
This may include an adequacy decision adopted by the European Commission, participation by the relevant recipient in an applicable recognised data-transfer framework, Standard Contractual Clauses approved by the European Commission, or another lawful transfer mechanism.
Where appropriate, supplementary safeguards may also be implemented.
We retain personal data only for as long as necessary for the purpose for which it was collected and in accordance with applicable legal obligations.
Different retention periods may apply depending on the category of data.
Account information may be retained while an account remains active and for an appropriate period afterwards where necessary for legal, security or administrative purposes.
Communications and support requests may be retained for the period reasonably necessary to respond to the request and maintain an appropriate record.
Technical and security logs may be retained for a limited period necessary for security, troubleshooting and prevention of misuse.
Analytics data is retained according to the retention settings configured in the relevant analytics platform.
Where applicable, data may be retained for a longer period where required to establish, exercise or defend legal claims or comply with a legal obligation.
ZapCruise implements appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, accidental loss or misuse.
Access to personal data is restricted where appropriate and technical safeguards are used to protect the Platform and its infrastructure.
No internet-based system can, however, guarantee absolute security.
Where the GDPR applies, you may have the right to request access to your personal data; request correction of inaccurate information; request deletion of data where the legal requirements are met; request restriction of processing; object to certain processing based on legitimate interests; receive certain personal data in a portable format; and withdraw consent at any time for processing based on consent.
Requests may be sent to info@zapcruise.com.
We may need to verify your identity before responding to a request.
You also have the right to lodge a complaint with the competent supervisory authority. In Italy, this is the Garante per la protezione dei dati personali.
ZapCruise is not intended to knowingly collect personal data from children where parental consent or another lawful basis would be required under applicable law.
If we become aware that personal data relating to a child has been collected improperly, we will take appropriate steps to delete or otherwise lawfully handle that information.
We may update this Privacy Policy when the Platform, applicable legislation or our processing activities change.
The latest version will be published on zapcruise.com together with the applicable "Last updated" date.
Material changes may be communicated through the Platform or by other appropriate means where required.
For questions about privacy or to exercise your data-protection rights:
Emloga Estate S.r.l.
Circonvallazione Cornelia 36
00165 Rome, Italy
info@zapcruise.com