Skip to main content

Privacy

How we handle your information.

Last updated: October 4, 2026

Who we are

Vidalumi is operated by Vidalumi, LLC, a Florida limited liability company (“Vidalumi,” “we,” “us”). We’re a cruise travel agency: you can search, compare and book cruises on vidalumi.com, with real people to help when you want them.

When you book, we act as your agent. The cruise line is the seller of record: it sells you the cruise, charges you for it and provides it. We place your booking with the cruise line through our booking provider, Traveltek, and the cruise line pays us a commission.

This policy explains what information we collect, why, who we share it with, and the choices you have. It applies to vidalumi.com, our secure payment page and the emails we send you.

What we collect

Your account

  • Your name, email address and password, or your Google or Microsoft identity if you sign in with one of those.
  • Preferences you choose: home port, region, currency, time zone, light or dark mode, and whether you want marketing email.
  • Sailings and searches you save, and price alerts you set.

Traveler profiles

So you only type them once, you can save details for yourself and the people you travel with. A profile can hold a traveler’s title, first and last name, gender, date of birth and nationality, and, for the person who books, a billing address and contact details. Cruise lines need these to make a booking. Please only save someone’s details with their permission.

Bookings and requests

  • The sailing, cabin, fare and guests you choose, any requests you add (such as dining, accessibility or celebration notes), and the cruise line’s booking reference, deposit, balance and payment dates once it confirms.
  • Booking requests and messages you send to our travel specialists, and their notes on helping you.
  • Passport details only where you give them to us, for example to a specialist for a cruise line that asks for them. Our online booking doesn’t ask for passport numbers; most cruise lines collect them from you directly after you book.

Content you add

Reviews, tips, photos, trip notes and anything else you post or save. Content you keep private stays private.

When you use the site

  • Standard request data your browser sends: IP address, browser type, the page you came from and the pages you visit.
  • Usage analytics, described under “Cookies and analytics” below.
  • Error reports when something on the site breaks, so we can fix it. We scrub passwords and card details from them.

Payments and your card

The cruise line is the party that charges you: payment for your cruise goes to the cruise line, not to Vidalumi. The cruise line sets deposits and balances.

When online card payment is available, you enter your card on our secure payment page and your card details go directly to the cruise line; Vidalumi does not store them. Otherwise, a Vidalumi travel specialist can help you pay on the cruise line’s own secure payment page, or you pay as the cruise line directs. Either way, we keep a record of what was paid and when, but never your full card number or security code.

How we use it

  • To book and look after your cruise: place your booking with the cruise line, pass information between you and the cruise line, remind you of payment dates, and help with changes, cancellations and questions.
  • To run your account: save your sailings, searches and traveler profiles, send the price alerts you set, and keep your account secure.
  • To email you: booking and account messages, the alerts you asked for, and, only if you opt in, news from Vidalumi. Every marketing email has a one-click unsubscribe link.
  • To improve Vidalumi: understand which pages and features people use and where they get stuck.
  • To prevent fraud and abuse, and to meet legal duties: for example, rate-limiting scrapers, spotting account takeovers, and keeping the records the law requires of a travel agency.

We don’t sell your personal information, we don’t share it with advertisers, and we don’t build a profile on you to target you with ads across the web. Not to advertisers, not to data brokers, not to anyone offering you a free cruise.

Text messages

We text you only if you’ve signed up, using an unchecked box when you create an account, during a booking, or in your notification settings, or if you text us first. We send booking confirmations and updates, payment and check-in reminders, reminders about calls with your travel specialist, and replies to your messages. No marketing.

We keep a record of when and where you signed up and the wording you agreed to, so we can show your consent if asked.

A travel specialist helping with your booking may also text you personally about it at a number you’ve given us.

Reply STOP to any message to stop, or turn texts off in your notification settings. Message and data rates may apply. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes, and text-message opt-in data and consent are never shared with any third party. Quo, our phone provider, delivers our messages. Full details: Text messages.

Who we share it with

To make your booking

When you book, we share what’s needed to make and manage the booking: guest names, dates of birth, nationality, contact details, your cabin and sailing choices and any requests you add. This is necessary to provide the booking you asked for.

  • The cruise line you book with. The cruise line is the seller of record and holds your reservation; its own privacy policy governs how it uses your information from there.
  • Traveltek, our booking provider, which passes your booking to the cruise line and returns its confirmation to us.

Service providers who work for us

These companies process information on our behalf, only to provide their service to us:

  • Supabase: our database and sign-in provider, in the United States. Holds your account, traveler profiles and bookings.
  • Cloudflare: hosting, content delivery, security and storage for photos you upload. Sees request data such as IP address and browser type. On the live site, Cloudflare Web Analytics also counts page views without cookies.
  • Resend: sends our emails. Sees your email address and the message.
  • Google: if you sign in with Google, we receive your name, email and profile picture. If you allow analytics cookies, Google Analytics receives your site usage.
  • Microsoft: if you sign in with Microsoft, we receive your name and email.
  • Quo (formerly OpenPhone): our business phone provider. When you call, leave a voicemail, or, once texting on our number is switched on, text with our team, Quo processes your phone number and the content of those calls and messages.

We run our own error-monitoring service, so error reports stay on systems we control.

When you follow a link to another site

Some pages link to other companies: shore excursions on Viator, products on Amazon from our packing lists, and cruise lines’ own policy pages. We don’t send them your personal information, but they may learn that you arrived from Vidalumi, and some pages load images or map tiles from other services (Viator’s image servers and OpenFreeMap), which see your IP address. Once you’re on another site, its privacy policy applies.

Vidalumi team members

The travel specialist helping you can see the traveler and booking details needed to help you, and no more. Every read of sensitive booking or traveler data is recorded in an internal audit log we review.

Legal requests and business changes

We may disclose information when the law requires it (a subpoena, court order or regulator’s request) or to investigate fraud or a breach of our Terms. If Vidalumi is acquired or merged, your information may transfer to the new owner; we’ll tell you by email and on the site first, and you can delete your account before it happens.

Booking records and audit logs

We keep a record of the booking requests we send to cruise lines through our booking partner, Traveltek, and of their replies, so we can service your booking, answer questions about it (including “what did we send the cruise line?”), and meet our accounting and legal record-keeping duties as a travel agency.

Handy if you’ve forgotten which cabin you picked. It happens.

Personal details in that record are encrypted before it’s saved: names, contact details, dates of birth and passport details are stored in a form only authorized Vidalumi staff can unlock, and only when needed to service your booking. We never store card numbers or security codes. For a payment we keep only the card type, the last four digits and the cardholder’s name (encrypted). The rest of the record is the booking itself: the sailing, cabin, fare, prices and references.

For some cruise lines, your booking and your card payment are placed together, in one step, from our secure payment page at pay.vidalumi.com. In that step your booking details (traveler names, genders, dates of birth, nationality, any passport, loyalty-program and emergency-contact details we hold, and the lead traveler’s contact details and address) pass through pay.vidalumi.com on their way to the cruise line, together with the card and billing address you enter there. Nothing is stored there: the record described above is kept on vidalumi.com.

We keep booking data as long as necessary to fulfill your trip and comply with legal obligations. You can ask us to delete the personal information we hold about you, subject to what the law requires us to keep — see “Your rights and choices” below.

Cookies and analytics

When you first visit, a banner asks what you’re comfortable with. We sort cookies into three groups:

  • Necessary (always on): keep you signed in, remember your light or dark mode choice, and protect forms from forgery. The site can’t work without them. The only cookies we get truly excited about are the ones on the Lido deck.
  • Analytics (optional, off until you say yes): Google Analytics 4, on the live site only, tells us in aggregate which pages and filters people use.
  • Marketing (optional): reserved. Nothing uses it today.

Cloudflare Web Analytics, mentioned above, sets no cookies and doesn’t follow you across sites.

Global Privacy Control and Do Not Track: if your browser sends either signal, we treat analytics and marketing as declined and don’t ask.

Changing your mind: choose Cookie preferences in the footer of any page.

We don’t use advertising cookies or ad-network tracking pixels, and our booking and account emails carry no tracking pixel.

How long we keep it

  • Your account, saved sailings, alerts and traveler profiles: while your account is open. When you delete your account, we remove them within 30 days.
  • Reviews, photos and shared trip content: reviews and the photos you’ve posted with them are deleted, not kept under another name. A trip circle you created is deleted if you were its last member; if other people are still in it, the circle stays for them. Journal entries and photos you add to a shared trip are deleted; what other members add to the same trip stays with them.
  • Booking records: for as long as we need them to look after the booking and for as long as the law requires a travel agency to keep them, even if you delete your account.
  • The encrypted booking audit record: kept as long as necessary to fulfill your trip and comply with legal obligations.
  • Security logs (such as failed sign-ins): up to 90 days.
  • Aggregated analytics: may be kept, because they don’t identify you.

The cruise line keeps its own copy of your booking under its own privacy policy. Deleting your Vidalumi account doesn’t change what the cruise line holds.

Your rights and choices

You can do most of this from your account settings, or email info@vidalumi.com and we’ll help:

  • See what we hold about you, and download a copy of it.
  • Correct anything that’s wrong.
  • Delete your account and the information tied to it, apart from the records we must keep (see “How long we keep it”).
  • Stop marketing email at any time, using the unsubscribe link or your settings.
  • Withdraw consent for analytics using Cookie preferences.

We reply to requests within 30 days, and we may need to confirm it’s you before we act.

Someone acting on your behalf. You can have another person — a family member, a caregiver, an authorized agent — make one of these requests for you. Ask them to email info@vidalumi.com with your signed, written permission naming them and describing the request. We may also contact you directly to confirm it’s really you asking before we act on it. This applies to anyone making a request on someone else’s behalf, not only California residents.

California residents: you have the right to know, delete and correct your personal information, and to opt out of its sale or sharing for cross-context advertising. We don’t sell or share it that way. We won’t treat you differently for using these rights.

Visitors from the UK or EEA: we rely on performing our contract with you (your account and bookings), our legitimate interests (improving Vidalumi and preventing abuse), legal obligations (booking records) and your consent (analytics and marketing). You have the rights above, plus the right to object and to complain to your local data protection authority. Vidalumi is built for travelers based in the United States.

Children

You must be at least 13 to have a Vidalumi account and 18 to book. We don’t knowingly collect information from children under 13 through their own use of the site. If you believe a child under 13 has created an account, email info@vidalumi.com. We’ll look into it and, if we confirm the account belongs to a child under 13, we’ll delete it.

A parent or guardian can add children to a traveler profile so the cruise line can book them. Those profiles have no login of their own, and we use them only to make and manage bookings.

Security

We protect your information with encryption in transit and at rest, secure sign-in, limited staff access with audit logging, and regular credential rotation. We don’t store card details.

No system is perfectly secure. If a breach affects your information, we’ll tell you promptly, including what was affected and what we’re doing about it, within any time the law requires.

Where your information is processed

Vidalumi is run from the United States and your information is processed mainly in the United States. Cruise lines and Traveltek may process booking information in other countries, including the United Kingdom, as part of making your booking.

Changes to this policy

We’ll update this policy when our practices or the law change, and change the “Last updated” date above. For significant changes, we’ll also post a notice on the site and email account holders before they take effect.

Contact us

Questions or requests about your privacy reach real people:

See also: Terms of Service.