Royal Caribbean International

"We may share your personal data with the following recipients: Other members of Royal Caribbean Group... Travel partners - When you book through a Travel Partner, We will need to share details of your booking with that partner. Travel Partners may process your information on Our behalf or may make decisions themselves about how and why to process your information... Suppliers - We may need to share your personal information with Suppliers... Business partners – We may need to share your personal information with Business Partners."

Personal data is shared broadly across Royal Caribbean Group entities, travel agencies, suppliers, and business partners, with travel partners making independent decisions about how to use the data.

"We may share your personal data – including your name, email address, address and date of birth – with third party social media platforms, including Facebook, and websites for the purposes of allowing those platforms to display targeted advertisements to you. Advertising Cookies may be set by Us and/or third parties to enable the delivery of more relevant advertisements, including on third party websites. These Cookies are able to build a profile of your interests by tracking your activities across Our Digital Platforms and those of others, including websites."

Royal Caribbean shares personal identifiers with Facebook and other platforms for targeted advertising, and uses cookies that track user activity across their own and third-party websites to build interest profiles.

"We may also use personal data collected directly by Our systems to identify individuals who have been in close contact in circumstances where there is a threat to health such as a communicable illness. We may capture this information when, for example, you scan your SeaPass card to purchase a drink at a café onboard or through the CCTV footage captured onboard. We may use information from these systems to understand guests' flows of movement around the ship, which areas on the ship are busiest."

Royal Caribbean tracks guests' physical movements around the ship using SeaPass card scans and CCTV footage, including facial recognition, creating detailed location profiles of passenger activity.

"Technical information related to use of Our Digital Platforms - Details about the browser, device and internet connection that you use when you browse Our Digital Platforms, technical information, including your IP address, MAC address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform... Your device provides this information when you use Our Digital Platform whether or not you are signed into your account or have accepted cookies."

Royal Caribbean collects detailed device fingerprinting data including MAC address, browser plugins, and IP address even when users haven't signed in or accepted cookies.

"We retain your personal data only for as long as necessary: (i) for the purposes set out in this privacy notice; (ii) to provide Our products and services to you; (iii) to comply with Our legal obligations (e.g., to comply with tax or accounting rules or in connection with legal proceedings); or (iv) to comply with Our usual business data retention policies."

No specific retention timelines are given — data is kept for undefined durations under broad justifications like 'usual business data retention policies,' giving the company effectively indefinite retention.

"This Privacy Notice may be updated from time to time for any reason. Updates to Our Privacy Notice will be posted to the Digital Platforms. In the event We are involved in a merger, acquisition, or sale of all or a portion of Our assets, you will be notified via email and/or in a prominent notice on Our Digital Platforms of any change in ownership or uses of this information."

Royal Caribbean reserves the right to change the privacy notice at any time for any reason, with no requirement for user consent — only posting updates to their platforms, with email notice limited to mergers/acquisitions.

"You also have the right to ask Us to: provide you with access to your personal data; correct your personal data; and/or delete your personal data. Click on the respective link to submit your request: Guest Data Subject Request Form or Marketing Subscriber Data Subject Request Form. Note, requests are subject to Us verifying your identity."

There is no self-service deletion option — users must submit a formal request form and undergo identity verification, adding friction to the account deletion process.