Privacy Policy

1. Who we are

Madame Cruise ("we", "us") arranges ladies-only yacht charters in Dubai, United Arab Emirates. Charters are operated by our licensed marine partner. This policy explains how we handle personal data collected through madamecruise.com, your member account, WhatsApp and our booking process, in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

2. Data we collect

• Inquiry data: name, WhatsApp number, email, preferred date, experience type, group size, occasion and special requests you submit through our forms or WhatsApp.
• Member account data: if you create an account, we store your name, nickname, email, password (encrypted, never visible to us), WhatsApp number, city, nationality, date of birth, languages you speak, your cruise registrations and your sharing preferences. Date of birth is used only to group shared cruises by age band and, with your consent, to show an age to co-passengers.
• Booking data: charter details, payment confirmations (processed by our payment provider, we do not store card numbers), and guest count for safety manifests.
• Feedback data: the rating and comments you choose to send us after a cruise, linked to your account so we can improve.
• Technical data: we use only the essential cookies needed to keep the site working. We do not run analytics, advertising or third-party tracking cookies.

2b. What other guests can see (shared cruises)

On a shared "by the seat" cruise, you can choose to let the other women booked on that same departure see your first name, your age and the languages you speak. These options are off by default, nothing is shared unless you switch them on, and you can change them at any time. Other guests never see your full name, email, phone number, exact date of birth or city, and your details are only ever visible to women booked on the same cruise as you.

3. How we use it

• To prepare quotes, confirm bookings and operate your charter safely.
• To meet maritime safety obligations (passenger manifests required by DMCA regulations).
• To send you information you have asked for. We do not sell data and we do not send marketing without consent.

4. Photography and your image

Consistent with our Privacy Promise: photos taken by our optional on-board photographer are delivered to you privately and deleted from our systems after delivery. We never use guest images in marketing.

5. Sharing and processors

Booking details are shared only with the crew operating your charter, our halal-certified caterer (dietary needs only), and authorities where maritime law requires it. We use trusted processors to run the service: Netlify (website hosting and inquiry forms), Supabase (secure storage of member accounts and cruise data), Brevo (transactional and notification emails) and Stripe (payment processing; your card details are handled directly by Stripe and never reach our servers). These providers process data on our behalf under their own security and data-protection commitments. We never sell your data or share it publicly.

6. Retention

Inquiry data is kept for 12 months, and booking and safety records for 5 years as required by UAE regulations. Member account data is kept for as long as your account is active; you can delete your account, and all the personal data attached to it, at any time by writing to us.

7. Your rights

You may request access, correction or deletion of your personal data at any time by writing to info@madamecruise.com. We respond within 30 days.

8. Visitors from the European Union (GDPR)

Madame Cruise is established in Dubai, and we also welcome guests who live in the European Union. Whenever we handle the personal data of someone in the EU or the wider European Economic Area, we apply the General Data Protection Regulation (EU) 2016/679 alongside UAE law.

Legal bases we rely on

• Performance of a contract (Article 6(1)(b)): preparing your quote, confirming and operating your booking, taking payment, keeping the safety manifest and running your member account.
• Legal obligation (Article 6(1)(c)): maritime safety and record-keeping duties we owe under UAE law.
• Consent (Article 6(1)(a)): the optional details you choose to show other guests on a shared cruise, and any marketing message. You can withdraw consent at any time, and withdrawing it never affects processing that was lawful before.
• Legitimate interests (Article 6(1)(f)): answering an inquiry you sent us, keeping the site secure and preventing form abuse. We balance these against your rights before relying on them.

Transfers outside the EEA

Your data is processed in the United Arab Emirates, and the processors listed in section 5 may store it outside the European Economic Area. The UAE is not covered by a European Commission adequacy decision, so these transfers rely on the European Commission's Standard Contractual Clauses (Implementing Decision 2021/914), combined with the safeguards described in section 5. You can ask us for a copy of the clauses in place at any time.

Your rights under GDPR

If you are in the EU or the EEA you may request access to your data, correction, erasure, restriction of processing, or portability. You may also object to processing based on our legitimate interests, and withdraw any consent you have given. Write to info@madamecruise.com and we respond within one month. You also have the right to lodge a complaint with the data protection authority of the country where you live.

Why there is no cookie banner

We show no cookie banner because we set nothing that requires your consent. The site uses only strictly necessary storage: the session token that keeps you signed in to your member account, and your language preference. There is no analytics, no advertising pixel and no third-party tracker anywhere on this site, so there is nothing for you to accept or refuse. If that ever changes, a consent banner will arrive with it.

9. Contact

Madame Cruise, Dubai Marina, Dubai, United Arab Emirates, info@madamecruise.com.