PORT NAVIGATOR: PRIVACY & DATA POLICY
Last updated: 14 February 2026
1. Introduction & Scope
This policy covers data processing by the Port Navigator feature (AI-powered cruise port guide), available on the Limitless Cruises website and the Cruise Port Navigator mobile app.
Data controller: Limitless Cruises Ltd, registered in England.
Contact: travel@limitlesscruises.com
This policy is supplementary to the main Limitless Cruises Privacy Policy, which covers data collected through the wider website, booking enquiries, and other services.
Lawful basis for processing: Legitimate interest (providing and improving the service).
2. Data We Collect
| Data Type | What Exactly | Why |
|---|---|---|
| Your questions | Text messages submitted to Port Navigator chat | To generate responses and improve the service |
| Session identifiers | Randomly generated ID per chat session, not linked to your identity unless logged in | To maintain conversation context |
| Response metadata | Which data source answered, response time, token usage | Service monitoring and quality improvement |
| Feedback | Thumbs up/down and optional comments on responses | To identify and fix poor answers |
| Device type | Whether you are using the website or mobile app | Analytics and debugging |
| Port selections | Which ports you ask about | To serve relevant information |
3. Data We Do NOT Collect
- Name, email, or contact details (unless logged into a Limitless Cruises account or voluntarily provided)
- Precise GPS location
- Payment or financial information
- Health or medical information
- Government-issued identification
- Advertising identifiers or device fingerprints
4. Query Scrubbing (PII Removal)
Important: Before any question is sent to external AI services, we automatically strip:
- Personal pronouns and identifying language
- Name patterns
- Age references
- Medical references
- Family member references
- Any detected personally identifiable information (PII)
This scrubbing occurs before data leaves our servers. External AI providers receive anonymised queries only.
5. Third-Party Data Processors
- Anthropic (Claude AI): Response generation and query classification. API-based processing; not used to train their models. Based in USA; EU Standard Contractual Clauses apply.
- Perplexity AI: Real-time web research for time-sensitive questions. API-based. Based in USA.
- OpenAI: Text embedding generation (converting questions to searchable vector format). API-based. Based in USA.
- Vercel: Hosting and serverless function execution. EU region (Stockholm, Sweden).
- Supabase: Database storage. EU region.
We do not sell, rent, or trade your data to any third party.
6. Data Retention
| Data Type | Retention Period | Deletion Method |
|---|---|---|
| Chat messages | 90 days | Automated scheduled deletion |
| Session data | 90 days | Automated scheduled deletion |
| Rate limit records | 24 hours | Automated expiry |
| Feedback | 12 months | Automated scheduled deletion |
| Cached Q&A (aggregated, no PII) | Up to 180 days, auto-renewed if useful | Automated expiry |
| Aggregated analytics | Indefinitely | Contains no PII |
7. Cookies and On-Device Storage
Website
- Port Navigator uses browser localStorage to cache your recent conversation (up to 50 messages) for your convenience.
- This data remains on your device and is not transmitted to our servers.
- You can clear it via your browser settings at any time.
- Port Navigator does not set any tracking cookies, advertising cookies, or third-party cookies.
- Port Navigator does not use fingerprinting or cross-site tracking.
- For cookies used by the wider Limitless Cruises website, see our main Cookie Policy.
Mobile App
- The app uses on-device storage (iOS UserDefaults / Capacitor Preferences) to cache port data for offline use and store recent AI responses.
- Downloaded port data packs are stored locally for offline access.
- You can delete cached data via the app Settings screen.
- The app does not use tracking technologies, advertising identifiers, or analytics SDKs for Port Navigator specifically.
8. Your Rights (UK GDPR / Data Protection Act 2018)
You have the following rights under UK data protection law:
- Access: request a copy of data we hold about your interactions
- Rectification: request correction of inaccurate data
- Erasure: request deletion ("right to be forgotten")
- Restriction: request we limit processing
- Portability: request data in a machine-readable format
- Object: object to processing based on legitimate interest
Contact: travel@limitlesscruises.com. We will respond within 30 days.
If you are unsatisfied with our response, you may complain to the Information Commissioner's Office (ICO): ico.org.uk, tel: 0303 123 1113.
9. Children's Privacy
Port Navigator is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has used Port Navigator, contact us to request data deletion.
10. International Transfers
Some data processing occurs in the USA (via AI providers). These transfers are protected by:
- UK International Data Transfer Agreement (IDTA)
- EU Standard Contractual Clauses
- Provider-specific data processing agreements
Primary data storage is in the EU (Sweden).
11. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of Port Navigator after changes constitutes acceptance.
12. Contact
For privacy questions about Port Navigator: travel@limitlesscruises.com
Phone: 0114 321 3208