ENABLE ACCESSIBILITY REGISTER LOG IN WHY NCL EXPLORE CRUISE DEALS MANAGE HELP Home > About Us > Privacy Policy PRIVACY POLICY Sign Up For Special Offers Let Us Call You WHO WE ARE UPDATED: July 16, 2021 At Norwegian Cruise Line Holdings Ltd., our mission is to provide superior cruise holidays for our guests. This mission covers all of our activities including the products and experiences we offer on board our ships, at our destinations and ports of call, and in our online community through websites and interactive features, including applications, widgets, blogs, social networks, social network "tabs," and other online or mobile offerings (which we collectively call the "Services"). Our Services are owned and/or operated, either directly or through our service providers and business partners, by Norwegian Cruise Line Holdings Ltd. (together with its subsidiaries and brands, Norwegian Cruise Line, Oceania Cruises, and Regent Seven Seas Cruises, the "Company," "we," "our," or "us"). This Privacy Policy describes what data we collect online and offline and how we use, share, and secure that data. It also describes your choices regarding use, access, and correction of your personal data. Personal data is information, or a combination of different types of information, that could allow you to be identified. We encourage you to review our Privacy Policy and click on the available links if you want additional information on a particular topic. By providing us with your personal information or otherwise using our Services, you acknowledge that you have read, understood and agree to the terms of this Privacy Policy and our Terms of Service. DATA WE COLLECT When you take a cruise with us, register to take a cruise with us, set up an account with us through one of our websites, request information about our Company, communicate with us, visit one of our websites, apply for employment with us, sign up for our promotions, contests, or sweepstakes, or webinars or access our Services through various other methods, we collect data about you and your visit. Data we collect directly from you or other sources We may collect the following categories of data either directly from you or from our business partners or third parties and in accordance with applicable law: Personal details (e.g., name, salutation, title, date of birth, place of birth, gender, photographs and images) Contact details (e.g., email address, telephone number, mobile number, address, and emergency contact information) Health details (e.g., past medical history, temperature readings, COVID-19 test results and vaccination records) Travel / holiday preference details (e.g., flight number, hotel booking, cabin number, special occasion dates, special accommodations, loyalty programme information, dietary preferences, travel companions and family members) Your location, activities, and proximity to other individuals Details regarding your previous travels, locations you have visited and contacts Government-issued documents (e.g., passports, alien resident cards, visas, residency permits, social security numbers, national and state identification numbers, driver’s licenses, and redress numbers) Details regarding your use of websites and applications (e.g., usernames, passwords, security answers, geolocation information, details regarding your interaction with our websites, applications and emails we send, such as whether you opened an email we sent, which may permit us to recognise you across multiple devices, or to know if you watched the health and safety video or viewed certain content on our websites and applications) Financial details (e.g., credit card information, transactional history and purchases, amount paid for Services, bank information, income, and business information) Details of your play and spend at casinos, loyalty rewards and, if you apply for credit for use at our onboard casinos, credit-related information Information available via public records and publicly available content on social media platforms Details regarding your interactions with our team members and call centres, including email communications and recordings of your calls Employment application details (e.g., name, employment history, telephone number, address, email address, education history, reference details, military service, and immigration status) Data collected when you create an account with us, purchase our products or use our Services may include data about yourself and those travelling with you. By providing us with the personal data of any third party, you confirm that you have the authority to do so on their behalf and have provided them with the information set forth in this Privacy Policy. We operate closed circuit television ("CCTV") cameras on our ships, including at all access points and throughout public areas. These CCTV cameras record continually and images of you may appear in these recordings. Please be aware that we have photographers on board taking photographs for guests to purchase. If you would not like to be photographed, please let our photographers know and they would be happy to take reasonable steps to comply with your request. Please note that we are unable to guarantee that you will not be included in photographs on an incidental basis. Data we collect automatically When you access our websites or otherwise receive Services, and to the extent permissible under applicable law, we automatically collect some categories of data from you, including data collected using cookies, embedded scripts and other device identifying technologies (“Cookies and Tracking Technologies”). Further information about our use of Cookies and Tracking Technologies and your choices are available in our Cookie Policy. We do not respond to Do Not Track signals. To learn about Do Not Track and for information about how to opt out of receiving targeted advertising, please visit our Cookie Policy. Special categories of personal data Some of the categories of data that we collect in connection with the provision of our Services or through the employment application process may constitute special categories of personal data (also known as sensitive personal data). In particular, we may collect personal data revealing racial or ethnic origin, religious, philosophical, or political beliefs, sexual orientation, or data concerning health, such as medical history or dietary restrictions, if in connection with our provision of Services or through the employment application process. We collect this information when you choose to provide it to us or to a service provider such as a travel agent or through the employment application process. We use this information to provide a service you request, such as medical care on board one of our cruises, (whether in person or through our telehealth services), or special dietary accommodations, or in connection with your application for employment. If, whilst travelling with us, you allege a personal injury or submit a claim after alleging a personal injury, we may collect personal data concerning the alleged incident, including healthcare information. Optional facial recognition technology On participating ships and with your consent, we may use facial comparison technology in order to facilitate and expedite your embarkation and/or disembarkation by taking your photograph and matching it against the photograph we collected from you during embarkation. When there is a match, you will be able to board the ship or be checked out of your cruise. Separately, we may securely provide your disembarkation photograph to U.S. Customs and Border Protection (“CBP”), who uses its own facial comparison technology to match the photograph against images of you that CBP already has on file from your passport, other travel documents or prior CBP border inspections. Once we receive verification of your identity from CBP, we will delete your disembarkation photograph immediately. We do not retain your facial recognition data beyond the duration of your cruise or use it for any other purpose other than those described above. If you are a U.S. citizen, CBP will maintain your photograph for no more than 12 hours. For certain non-U.S. citizens, the U.S. Department of Homeland Security (DHS) will store your photograph for a longer period. For more information on how CBP uses your biometric data, please visit www.cbp.gov/travel/biometrics. COVID-19 and global health data For the health and safety of our guests and crew, we may process additional personal data during a pandemic or other global health crises. At the pier, passengers will undergo COVID-19 testing and provide us with proof of a negative result, will be asked to show proof of vaccination, and will have their temperature taken. We may also collect such data on board our ships and at our ports of call. In particular, temperature readings may be collected via thermal imaging cameras located on the gangway. We will also offer optional COVID-19 testing upon disembarkation. If we are made aware that an individual is exhibiting symptoms of COVID-19, we will evaluate our transaction data and photographs taken during your cruise and may run facial recognition technology on our CCTV footage in order to notify the persons who were in close proximity with the affected individual and take appropriate action to mitigate the spread of COVID-19. Such steps may include medical examinations, testing, containment and/or disembarkation of the affected persons. HOW WE USE PERSONAL DATA We may use your personal data for the following purposes: Identify and authenticate you: We use your identification data to verify your identity when you access and use our Services and to ensure the security of your personal data. We do this to comply with our contractual obligations to you. Provide emergency and security services: We provide you with emergency and security services to protect your vital interests or based on our legitimate interest of providing the services needed in case of urgent emergency or security situations on board. Provide you and your group with Services: We process your personal data to provide the Services you or your organisation have requested. We do this to comply with our contractual obligations to you or your organisation. For multi-guest bookings, we allow all guests on the reservation to access and administer booking-related personal data, including proof of vaccination, of the guests on the same reservation in furtherance of our legitimate interest of allowing guests to conveniently administer their reservations. Advertise and market our Services: We may use your personal data, where permitted, to build a profile about you and place you into particular marketing segments in order to understand your preferences better and to appropriately personalise the marketing messages we send to you. It is in our legitimate interest to provide more relevant and interesting advertising messages. We may contact you with marketing communications via direct post, phone call, email, text messages, or via applications, such as WhatsApp. Where necessary, we will obtain your consent before contacting you with such marketing communications. Communicate with you: We may use your personal data when we communicate with you via direct post, phone call, email, text messages, or via applications, such as WhatsApp. For example, if we are providing information about changes to our terms and conditions, in response to a question you submitted, or to notify you of changes to your itinerary or important health and safety information. It is in our legitimate interest to provide you with appropriate responses, verify your contact information, provide you with COVID-19 testing results, and provide you with notices about our Services. Comply with our obligations under applicable laws: We may process your personal data to comply with applicable legal requirements. For example, we may provide certain information to governmental and recognised law enforcement agencies, such as providing personal data to the Transportation Security Administration and port agents in connection with commercial air travel you book through us, providing certain health data to public health authorities or to comply with other legal or regulatory requirements, where explicitly required by law. Customise your experience: When you use the Services, we may use your personal data to improve your experience of the Services, such as by providing interactive or personalised elements on the Services and providing you with content, offerings, and experiences based on your interests, including shore excursions. Where necessary, we will obtain your consent before using your personal data in this way. Exercise our rights:We may use your personal data to exercise our legal rights where it is necessary to do so, for example to detect, prevent, and respond to legal claims, intellectual property infringement claims, or violations of law or our applicable contract terms and conditions. Prevent fraud and comply with legal obligations: We may process your personal data to, for example, (i) carry out fraud prevention checks, which include building fraud-related profiles, making decisions on that basis by fraud prevention experts, and using CCTV images to prevent and detect fraud in our casinos; or (ii) comply with other legal or regulatory requirements. Protect the health, safety and security of guests and crew: We may process your personal data to protect the health, safety and security of all individuals on board our ships. For example, we may check your information against a publicly available criminal record database in order to protect the safety of our guests and crew or use your personal data, your health data, to protect against the spread of COVID-19 or other communicable diseases. Evaluate you for potential employment: We may process your personal data if you apply for a position as a team member with us, including by verifying any entitlements, monitoring equal opportunity employment, performing medical screenings (in some cases) and by making enquiries into any criminal and/or credit history based on our legitimate interests, to the extent necessary and where permitted under applicable laws and regulations. Customer Testimonials We may post guest testimonials on our websites and social media pages which may contain personal data. Prior to posting the testimonial, we obtain guests' consent via web form, email, or social media message to post their names, usernames, cruise dates, photos, videos, and travel destinations along with their testimonial, as applicable. If you wish to update or delete your testimonial, you can contact us via the methods described under "How to Contact Us." HOW WE SHARE PERSONAL DATA We may share your personal data with third parties under the following circumstances, as permitted under applicable laws and regulations: Service providers and business partners: We may share your personal data with our service providers and business partners that perform marketing services and other business operations for us or with which we have joint or cooperative business arrangements. For example, we may partner with other companies, vendors or travel agents to organise and facilitate your travel, arrange hotel, flight or transportation accommodations, process your payments, including charging purchases to onboard accounts, provide onboard services, provide port services and excursions, provide medical services, facilitate targeted marketing and other communications by post or email, facilitate services related to casinos, such as background checks and credit checks when you apply for casino credit, maintain guest records, and analyze data. Where appropriate, we authorise our service providers to use personal data only as necessary to provide the requested services. Certain brands may cooperate with financial institutions to offer co-branded products or services to you, such as Norwegian Cruise Line’s co-branded credit card; however, we will do so only if permitted by applicable law. Travel agents may or may not process your information on our behalf. To the extent you engage with a travel agent that is collecting information for their own use, we recommend you check your travel agent’s privacy policy for details as to how they may process your personal data. If you booked your cruise through a travel agent and purchase future cruise credits whilst onboard, we may inform your travel agent of the future cruise credits so that they may contact you with reminders to timely use the credits. Some products, services, excursions, and activities are provided by third parties. We may share personal data about you with these partners, before, after, or during your cruise in order to improve Services to you. These companies have their own privacy policies which you should refer to if you choose to use their services. Where required by law: We may provide certain personal data to governmental and recognised law enforcement agencies as required by law or other third parties where we believe necessary to comply with a legal obligation. We are required to cooperate with government and law enforcement agencies and public authorities of any country in your itinerary, including customs and immigration and public health and port authorities. Personal data about you, which may include health data, may be shared with these agencies (such as customs and the U.S. Department of Homeland Security and the Centres for Disease Control and Prevention) prior to boarding, during your cruise, or after disembarkation for security, immigration or public health purposes. To protect our rights or the rights of a third party: We may share your personal data to identify, investigate, contact, or bring legal action against an individual who may be causing injury to or interference with our rights or property or the rights or property of a third person if we believe in good faith that disclosing this personal data is necessary or advisable. We may share your personal data with third parties to prevent or detect fraud with respect to our casinos and general payment transactions. Personal data about you may also be shared with governmental and recognised law enforcement agencies in order to prevent and detect crime as well as to safeguard children and vulnerable adults. In the context of a transaction: We may share your personal data with potential transaction partners, service providers, advisors, and other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell or transfer all or a portion of our assets or business, to the extent permitted by applicable law. Should such a sale or transfer occur, we will use reasonable efforts to obligate the entity to which we transfer your personal data to use it in a manner that is consistent with this Privacy Policy. With your family members, friends and groups: When you book within a group or charter, we may share with the group leader certain booking-related personal data about you, such as your contact information so that they may contact you with group activities. If you make a multi-guest reservation, all of the guests who are part of the reservation will be able to access the booking-related personal data of the other guests on the same reservation. This means that a guest on your same reservation may be able to (1) complete online check-in for you and others in your reservation; (2) view your boarding pass, and the boarding pass of others in your reservation; (3) pay for a product or activity for you or others in your reservation, using their own onboard expenses account or their own payment methods; and (4) update your contact information. If you have any questions or concerns about the processing of data for multi-guest reservations, please contact us via the methods described under “How to Contact Us.” Norwegian Cruise Line Holdings Ltd. family companies: NCL Corporation Ltd., NCL (Bahamas) Ltd., Norwegian Cruise Line Group UK Limited, NCL US IP CO 1, LLC, NCL US IP CO 2, LLC, NCL UK IP Co Ltd., Oceania Cruises S. de R.L., Seven Seas Cruises S. de R.L., Sixthman Ltd., and our brands, Norwegian Cruise Line, Oceania Cruises, Regent Seven Seas Cruises, and Sixthman, are owned by Norwegian Cruise Line Holdings Ltd., and we work closely with other businesses and companies in the Norwegian Cruise Line Holdings Ltd. family. We may share certain personal data about you with other companies in the Norwegian Cruise Line Holdings Ltd. family, including your buying and browsing history on the Services, contact details such as names, email addresses, and addresses, dates of past cruises on one of our brands, your use of onboard products and services including casinos, and enquiries you have made about or products and services, for the purposes set forth above. We may also share your personal information to enable family companies to market to you, where permitted by applicable law. Where necessary, we will obtain your consent before sending such marketing communications. INFORMATION SECURITY We implement physical, technical, and organizational security measures designed to safeguard the personal data we process. These measures are aimed at providing on-going integrity and confidentiality of your personal data. We evaluate and update these measures on a regular basis. The Company takes reasonable precautions in order to attempt to ensure the safety and security of our customers' online transactions. Billing information is encrypted and transmitted through SSL (Secure Sockets Layer) technology. SSL is the industry standard for securing Web-messaging transactions. DATA RETENTION We retain your personal data for as long as we have a relationship with you or in accordance with applicable law, and such relationship includes any request to receive marketing or other promotional materials from us or membership in our loyalty programmes. When deciding how long to keep your personal data after our relationship with you has ended, we take into account our legal obligations, including requirements of regulators and governmental agencies that have authority over us. We may also retain records to investigate or defend against potential legal claims. We will delete or anonymize your personal data at the end of the retention period. If there is any information that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further processing or use of the data. MANAGING YOUR PRIVACY SETTINGS Our marketing emails, text messages, and most other electronic messages you receive from us will include specific instructions on how to unsubscribe, and you may unsubscribe at any time from our marketing by taking one the following steps: Follow the instructions provided in any Company message Click on one of the following links to update your preferences: Norwegian Cruise Line, Oceania Cruises, or Regent Seven Seas Cruises Send your request by post to the following address: Norwegian Cruise Line Holdings Ltd. Legal Department: Privacy Team 7665 Corporate Centre Drive Miami, Florida 33126 0333 2412319 CHILDREN Our products and Services may be used by, or collect personal data about, children under the age of 16 only with the involvement of and, as needed, consent from the child's parent or guardian. To the extent we process personal data about children, we do so for the purposes described in the consent request and to provide the requested services. If you have reason to believe that we have collected personal data from someone under 16 years of age in connection with our Services without adequate involvement from the child’s parent or guardian, please let us know by contacting us via the methods described under “How to Contact Us.” COUNTRY/REGION-SPECIFIC DISCLOSURES California: You can find more information about how we process the personal data of California residents by reviewing our California Resident Privacy Notice here. European Union and the United Kingdom: If you are located in the European Union or the United Kingdom, you have certain rights regarding your personal data, subject to local data protection laws. These include the following rights: access your personal data rectify the data we hold about you erase your personal data restrict our use of your personal data object to our use of your personal data receive your personal data in a usable electronic format and transmit it to a third party (right to data portability) lodge a complaint with your local data protection authority. If you would like to discuss or exercise these rights, please contact us via the method described under "How to Contact Us." We encourage you to contact us to update or correct your data if it changes or if the personal data we hold about you is inaccurate. We will contact you if we need additional data from you in order to honour your requests. Brazil: If you are located in Brazil, you have certain rights regarding your personal data. These include the following rights: access your personal data rectify the data we hold about you erase your personal data restrict our use of your personal data object to our use of your personal data receive your personal data in a usable electronic format and transmit it to a third party (right to data portability) lodge a complaint with your local data protection authority. If you would like to discuss or exercise these rights, please contact us via the method described under "How to Contact Us." We encourage you to contact us to update or correct your data if it changes or if the personal data we hold about you is inaccurate. We will contact you if we need additional data from you in order to honour your requests. THIRD PARTIES WE DON’T OWN OR CONTROL Our websites, applications, including mobile applications, and social media sites include links to other websites whose privacy practises may differ from our practises. If you submit personal data to any of those sites, your information is governed by their privacy policies. We are not responsible for the privacy practises or the content of any sites to which our websites, applications, including mobile applications, and social media sites provide links. We encourage you to carefully read the privacy policy of any website you visit. SOCIAL MEDIA FEATURES Our websites include social media features, such as the Facebook "Like" button, and widgets, such as the "Share" button, or interactive mini-programmes that run on our websites (the "Features"). These Features may collect your Internet protocol address or which page you are visiting on our websites and may set a cookie to enable the Feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our websites. Your interactions with these Features are governed by the privacy policy of the company providing it. INTERNATIONAL DATA TRANSFERS We are headquartered in the United States but have global operations and affiliates. Accordingly, your personal data may be transferred to, stored, and processed in various countries, including those that are not regarded as ensuring an adequate level of protection for personal data under UK law, European Union law or by the European Commission. We have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to ensure that your data is adequately protected. For more information on the appropriate safeguards in place, please contact us at the details below. HOW TO CONTACT US If you have any questions, comments, or concerns about how we handle your personal data, then you may contact us at PrivacyTeam@nclcorp.com and we will try to resolve your concern. If you are located in the European Union or the United Kingdom and wish to exercise your rights or contact our Data Protection Officer click here. If you are located in Germany and wish to exercise your rights or contact our representative in Germany click here. If you are located in Brazil, please contact us by clicking here to exercise your access, data portability and erasure rights, and by clicking here to exercise your other rights listed above or contact our Data Protection Officer. We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you may have the right to make a complaint to the data protection authority of your country of residence. PRIVACY POLICY UPDATES We may update this Privacy Policy from time to time without prior notice. You can determine when this Privacy Policy was last revised by checking the updated date. We encourage you to periodically review this Privacy Policy to ensure you understand our privacy practises. If you have a registered account, we may notify you of any changes to our Privacy Policy via email and we may ask you to affirmatively acknowledge and consent to the changes the next time you use our Services. If we make any revisions that materially change the ways in which we process your personal data, we will notify you of these changes before applying them to that personal data. Sign up to get the hottest cruise deals! THE NCL DIFFERENCE The Freestyle Experience Free at Sea Cruises Cruise Ships Cruise Destinations Ports The Norwegian Edge Dining Entertainment Accommodations The Haven by Norwegian® Latitudes Rewards NCL Travel Blog Need Help Planning? TOP CRUISE DESTINATIONS CRUISING ESSENTIALS New To Cruising Prepare For Your Cruise Order a Brochure Accessible Cruising Apps & Downloads Need Help Finding a Cruise? Try Cruise Coach FAQ Required Documents Passenger Bill of Rights Getting to the Pier Contact Us Need Help Planning? Speak with a Consultant SPECIALS & THEMED CRUISING All Cruise Deals Onboard Gifts Family Cruises Singles Cruises Casino Cruises Music Themed Cruises Meetings & Incentives OUR COMPANY About Norwegian For Investors Safety & Security Accessibility Statement Environmental Commitment Careers Newsroom Awards International Locations Travel Sanctions and Regulations CDC Travel Advisory TRAVEL PARTNERS Partner Login © 2021 Norwegian Cruise Line Holdings Ltd. Legal Notice Privacy Policy Terms and Conditions ENGLISH ENGLISH We use cookies for website performance, analytics and advertising purposes to help us provide you with the most relevant experience. This includes 3rd parties that track your interests to tailor your experience. Do you accept all cookies or would you like to reject all non-essential cookies? For more information, please see our Cookie Policy. MORE OPTIONS REJECT ALL ACCEPT ALL