Your privacy deserves
the same care.
How Cruises by Bob collects, uses, protects and shares your personal information when you plan and experience your journey with us.
Your privacy matters
wherever you travel.
When you trust Cruises by Bob with your travel arrangements, you may also entrust us with information that is personal, private and sometimes sensitive. This Privacy Notice explains what information we collect, why we use it, how we protect it, who we may share it with, and the rights available to you under applicable Kenyan data-protection law.
What we collect
Information needed to understand your travel needs, arrange your journey and communicate with you.
Why we use it
To provide travel services, manage bookings, meet legal obligations and improve your experience.
Who receives it
Relevant travel suppliers and service providers when necessary to deliver the services you request.
Your rights
You have rights concerning your personal information, including access, correction and objection.
A clear explanation of how we handle your information.
This Privacy Notice applies to personal information processed by Cruises by Bob in connection with our website, enquiries, consultations, cruise bookings and related travel services.
Cruises by Bob is a Nairobi-based travel business specialising in cruise holidays and related travel arrangements for travellers in Kenya and beyond.
We aim to handle personal information lawfully, fairly and transparently, and to collect only the information reasonably necessary for the purposes for which it is processed.
Kenya is our primary privacy framework.
Our processing of personal data is primarily governed by the Data Protection Act, 2019 and applicable Kenyan data-protection requirements. Where another jurisdiction's mandatory privacy law applies to a particular individual or transaction, additional obligations may also apply.
Information that helps us plan your journey.
The information we collect depends on how you interact with Cruises by Bob and the services you request. We do not seek to collect information that is unnecessary for the relevant purpose.
Identity information
Your name, date of birth, nationality and other identifying information where required for travel arrangements or legal purposes.
Contact information
Your telephone number, WhatsApp number, email address and other contact details you provide to us.
Travel information
Cruise preferences, destinations, itineraries, cabin preferences, traveller details and related travel requirements.
Passport & visa information
Passport and visa information where this is necessary to provide visa assistance or complete travel arrangements.
Transaction information
Information relating to invoices, payments, booking transactions and financial records required for our business or legal obligations.
Communications
Enquiries, emails, WhatsApp conversations, booking correspondence, requests and customer-service communications.
Special requirements
Where necessary, information relating to accessibility, dietary requirements or other travel needs may be collected to arrange appropriate services.
Technical information
Information such as IP address, browser, device information, website activity and cookie-related information.
Where you provide information about another person, such as a family member or fellow traveller, you should, where appropriate, ensure that they are aware that their information is being provided to us and how it may be used.
Information is used to deliver the journey you ask us to arrange.
Depending on the circumstances, Cruises by Bob may use personal information to:
- Respond to travel enquiries and consultation requests.
- Prepare cruise recommendations and quotations.
- Process cruise, flight, hotel, visa, insurance and related travel arrangements.
- Communicate booking confirmations, invoices, schedules and travel documents.
- Coordinate information with travel suppliers required to fulfil your booking.
- Assist with visa or documentation processes where that service has been requested.
- Provide customer support before, during or after your journey.
- Maintain business, accounting, tax and other legally required records.
- Protect our business, systems, customers and website from fraud, misuse or security threats.
- Improve our website, services, content and customer experience.
- Send marketing communications where permitted and where the appropriate legal basis exists.
We do not rely on consent for everything.
Personal information may be processed on different lawful grounds depending on the purpose and circumstances.
Contractual necessity
Where processing is necessary to provide services you have requested, including arranging or managing a booking.
Legal obligations
Where information must be processed to comply with applicable legal, regulatory, accounting or other obligations.
Consent
Where consent is the appropriate legal basis, we will seek it for the relevant purpose and provide an appropriate way to withdraw it.
Legitimate interests
Where permitted by law, we may process information for legitimate business or service purposes while considering the rights and interests of the individual.
We do not treat simply visiting our website as blanket consent to every form of data processing. The purpose and legal basis for processing depends on the particular activity.
Your journey involves a network of travel partners.
A cruise holiday can involve cruise lines, airlines, hotels, visa providers, insurance companies, transfer companies and payment providers. We may therefore need to share relevant information with third parties where this is necessary to provide the services you request.
- Cruise lines and cruise booking providers.
- Airlines and flight booking providers.
- Hotels and accommodation providers.
- Visa application and related service providers.
- Travel insurance providers.
- Ground transportation and transfer providers.
- Payment and financial-service providers.
- Technology, hosting and service providers supporting our business.
- Professional advisers where reasonably necessary.
- Government, regulatory or law-enforcement authorities where legally required or permitted.
We do not sell your personal information.
Cruises by Bob does not sell or rent customer personal information to third parties for their independent commercial use.
Where information is shared with a supplier, we seek to limit the information shared to what is reasonably necessary for the relevant service or purpose.
Your holiday may cross borders. Your information may too.
Because Cruises by Bob arranges international travel, some personal information may need to be transferred to or accessed by service providers outside Kenya.
For example, a cruise booking may require relevant traveller information to be provided to a cruise line or other supplier operating outside Kenya. Visa and travel arrangements may also involve organisations in another country.
Where personal information is transferred outside Kenya, we will seek to do so in accordance with applicable Kenyan data-protection requirements and the safeguards or other lawful conditions that apply to the transfer.
The countries to which information may be transferred will depend on the itinerary, suppliers selected and services requested.
We take reasonable measures to protect the information entrusted to us.
Cruises by Bob uses appropriate technical, organisational and practical measures designed to reduce the risk of unauthorised access, loss, misuse, alteration or disclosure of personal information.
- Access to information is limited to people who reasonably need it for their role.
- We use appropriate security measures for our website and business systems.
- Payment information is handled through the relevant payment channels and providers.
- We seek to maintain appropriate safeguards when working with external service providers.
- We take reasonable steps to identify and respond to suspected security incidents.
No website, electronic transmission or storage system can be guaranteed to be completely secure. We therefore encourage customers to take reasonable care when transmitting sensitive information online.
We keep information for as long as there is a reason to keep it.
Cruises by Bob retains personal information only for as long as reasonably necessary for the purpose for which it was collected, or where a longer period is required or permitted by law.
Different information may therefore be retained for different periods. Factors may include whether a booking is active, whether we need the information to provide after-sales support, whether a dispute exists, and whether accounting, tax or other legal obligations require us to maintain a record.
When information is no longer required, we take reasonable steps to securely delete it, anonymise it, or otherwise dispose of it appropriately.
A better website experience, with transparency.
Our website may use cookies and similar technologies to support website functionality, remember certain preferences, understand how visitors use the site and improve our content and user experience.
Some cookies may be necessary for the website to function, while others may support analytics or additional functionality.
You can manage or disable cookies through your browser settings. Disabling certain cookies may affect how some parts of the website operate.
Where our website uses third-party services that place their own cookies or tracking technologies, those providers may process information according to their own privacy practices.
You have rights over your personal information.
Subject to the applicable provisions and limitations of Kenyan law, you may have rights including the following:
Right to be informed
To receive information about how your personal data is collected and used.
Right of access
To request access to personal data concerning you that we hold, subject to applicable legal limitations.
Right to correction
To request correction of inaccurate, incomplete or outdated personal information.
Right to object
To object to certain processing of your personal information where the law gives you that right.
Right to deletion
To request deletion of personal data where the applicable legal conditions for erasure are met.
Right to withdraw consent
Where processing is based on consent, you may withdraw that consent, subject to the consequences and limitations permitted by law.
Right to data portability
Where applicable, you may request your personal data in a structured and commonly used format, subject to the conditions provided by law.
How to make a request
Contact us using the details at the end of this notice. Please provide enough information for us to identify you and understand the request. We may need to verify your identity before responding to certain requests.
Family holidays are welcome. Children's information deserves care.
Cruises by Bob arranges travel for families and children may therefore appear as passengers on bookings made by parents or guardians.
Where a parent, guardian or authorised traveller provides information about a child for the purpose of arranging travel, we use that information only for the relevant travel, booking, safety, legal or service purpose.
We do not encourage children to independently submit personal information to our website or contact us without appropriate parental or guardian involvement.
External websites have their own privacy practices.
Our website may contain links to cruise lines, airlines, hotels, visa providers, payment providers and other third-party websites.
Once you leave the Cruises by Bob website, the privacy practices, security measures and terms of that third party apply. We encourage you to review the relevant provider's privacy notice before submitting personal information to them.
Useful travel information, without the noise.
We may occasionally send information about cruises, destinations, travel inspiration, offers or Cruises by Bob news where we have an appropriate legal basis to do so.
You can opt out of marketing communications at any time. Choosing not to receive marketing messages will not affect essential communications relating to an existing booking or service you have requested.
Privacy practices can evolve as our business does.
We may update this Privacy Notice from time to time to reflect changes in our services, technology, business practices or applicable legal requirements.
When we make material changes, we will update the date shown at the beginning of this notice and, where appropriate, provide additional notice.
Questions about your personal information?
If you have a question about this Privacy Notice, want to exercise a data-protection right, or have a concern about how your information has been handled, please contact Cruises by Bob first.