Privacy Policy

We may collect information about you in a variety of ways, including:

• Personal Data: Full name, email address, phone number, mailing address (including city, state, ZIP code, and country), and Reward Redemption ID that you voluntarily provide when redeeming milestone rewards.
• Booking & Loyalty Data: Information related to your VIFP (Very Important Fun Person) Club membership, cruise booking history, and milestone achievements used to verify your eligibility for rewards.
• Device & Usage Data: Browser type, operating system, IP address, pages visited, time spent on pages, referring URLs, and other diagnostic data collected automatically through cookies and similar tracking technologies.
• Shipping Data: Delivery address and contact information necessary to fulfill your reward shipments.

We use the information we collect for the following purposes:

• To verify your identity and eligibility for milestone rewards.
• To process and fulfill reward redemptions, including shipping physical rewards to your designated address.
• To communicate with you regarding your reward status, shipment tracking, and order confirmations.
• To improve and personalize your experience on our website.
• To monitor and analyze usage trends to enhance site performance and functionality.
• To comply with legal obligations and enforce our terms of service.
• To send promotional communications about Carnival Rewards and upcoming cruises, where you have provided consent.

We do not sell your personal information. We may share your data with:

• Service Providers: Third-party vendors who assist with reward fulfillment, shipping, payment processing, analytics, and customer support, bound by contractual confidentiality obligations.
• Carnival Affiliates: Other entities within the Carnival Corporation family of brands for loyalty program management and cross-brand services.
• Legal Requirements: When required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of Carnival, our customers, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our assets, your personal data may be transferred as part of the transaction.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Reward redemption records are retained for a minimum of 5 years for compliance purposes. You may request deletion of your data at any time, subject to applicable legal obligations.

We use cookies, web beacons, and similar technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors come from. You can control cookie preferences through your browser settings. Types of cookies we use include:

• Essential Cookies: Required for core site functionality such as navigation, security, and form submission.
• Analytics Cookies: Help us understand how visitors interact with our website to improve performance and user experience.
• Functional Cookies: Remember your preferences and settings to provide a more personalized experience.
• Marketing Cookies: Used to deliver relevant advertisements and track the effectiveness of marketing campaigns (only with your consent).

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to certain exceptions.
• Portability: Request transfer of your data to another service provider in a machine-readable format.
• Opt-Out: Opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly.
• Restrict Processing: Request that we limit the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

We implement industry-standard administrative, technical, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure server infrastructure, access controls, and regular security audits. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your data in compliance with applicable data protection laws, including Standard Contractual Clauses approved by the European Commission where applicable.

Our website may contain links to third-party websites, including Carnival Cruise Line's main website and partner sites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.