Privacy policy

Who is responsible for your information

Cruise Price Check by Codify Limited operates cruisepricecheck.com. Codify Limited, company number 15861473, is the controller of your personal information. For privacy questions or requests, email harry@cruisepricecheck.com.

What we collect and why

• Sign-in and alerts. We store your email address, verification and session records, chosen sailings, target prices, saved-search filters and notification history. We use these to sign you in and deliver the alerts and searches you request. Our legal basis is performing our agreement with you to provide these features.
• Service and security records. Requests to the site can include your IP address, browser information, requested URL and error details. We use these to run the site, investigate faults and prevent abuse, based on our legitimate interests in keeping the service reliable and secure.
• Usage information and session replay. PostHog helps us understand page visits, clicks, referral sources, device information and performance. Session replay records how you navigate and interact with pages, together with diagnostic logs and network timings. Form inputs are masked. We use this information to find usability problems and improve the site, based on our legitimate interests. Analytics and replay run using page-memory identifiers before you choose and if you decline analytics cookies. Cookies that recognise visits from the same browser require your consent.
• Messages to us. If you contact us, we use your email address and message to respond and keep a record of the issue, based on our legitimate interest in providing support. We also process information where needed to meet legal obligations.

You can browse without giving us your email address. It is needed for sign-in and email alerts. Booking and payment happen on the cruise line's website; we do not collect your booking payment details.

Cookies and browser storage

The functional cookies auth_token and auth_email keep you signed in for up to 24 hours. Signing out removes them. Your shortlist is saved in your browser's local storage until you remove it or clear the site's data.

Accepting analytics cookies lets PostHog recognise visits from the same browser using a cookie and local storage. Before you choose, or if you decline cookies, analytics and session replay continue with identifiers held in page memory. Those identifiers are lost on a full page reload or when you leave. Declining cookies does not turn off session replay.

We save your privacy choices in local storage so the site can remember them. These preference records do not track your browsing. They are separate from optional analytics identifiers and the storage needed for sign-in and your shortlist.

You can change your cookie choice or turn off analytics and replay below. Withdrawing cookie consent does not affect earlier processing. Clearing the site's browser data removes your saved choices and shortlist and may sign you out.

Who processes information for us

We use Vercel for hosting, Cloudflare for domain and network services, Layerbase for our database, Resend for sign-in and alert emails, Zoho Mail for correspondence, and PostHog for analytics. These providers process the information needed to supply their services. Email delivery records can include the recipient, message content and delivery status.

Providers may process information outside the UK. Applicable protections can include UK adequacy regulations and approved contractual safeguards. Contact us for details of the safeguards relevant to your information.

We do not sell your personal information. We may disclose it where required by law or necessary to protect our legal rights. Cruise lines operate their own websites and privacy policies.

How long we keep information

We keep alerts and saved searches so you can manage them until you delete them. Pausing or unsubscribing stops notifications but does not erase the saved record. You can delete individual items from My alerts or Saved searches, or contact us to request deletion of information linked to your email.

Unused sign-in codes expire after 10 minutes and are removed by routine cleanup. Expiry of a sign-in cookie does not itself delete the database verification record. Session recordings are retained for 30 days under our current PostHog settings. We retain support, verification, delivery and security records as needed to operate the service, resolve issues, prevent abuse and meet legal obligations. Retention depends on the purpose of the record, any unresolved issue and applicable legal requirements; backups and provider logs may remain after deletion from the active database.

Your choices and rights

You can stop an alert or digest using its unsubscribe link or your signed-in settings. To request access, correction, deletion, restriction or a portable copy of your personal information, email us. You may also object to processing based on legitimate interests and withdraw consent where we rely on it. These rights depend on the circumstances; we may need to verify your identity before acting.

We do not make decisions with legal or similarly significant effects on you through automated processing. Search matching and price alerts use the criteria you choose.

If you are unhappy with how we handle your information, contact us. You can also complain to the Information Commissioner's Office, the UK data protection regulator.

Changes to this policy

We will update this page when our practices change and revise the date above. We will bring material changes to your attention where required.