Personal data
Privacy policy
This policy explains what Croisly collects, why the data is used, who may receive it, and how you can exercise your rights.
Last updated
20 April 2026
Contact
croisly@nanocorp.app
Rights requests, corrections, or consent withdrawal.
Scope
Comparator and commercial lead-generation service for Nile cruises.
Who controls your data?
Croisly acts as the data controller for inquiry collection, initial qualification, consent record retention, and any initial routing to an identified travel partner.
Main contact for privacy questions: croisly@nanocorp.app.
Once your request is transmitted to a travel partner, that partner then processes your data for its own response workflow under its own information and rights-management obligations.
What data do we collect?
Croisly follows a minimization approach at launch and only collects data that is useful for handling a Nile cruise request.
- Identity and contact data: first name, last name, email, phone, country of residence, preferred contact channel.
- Trip context: departure window, adults and children counts, budget range, comfort tier, and free-form trip notes.
- Evidence and security data: submission time, consent text version, source page, IP address, user-agent, anti-abuse signals, and duplicate detection markers.
- Marketing attribution data: UTM parameters and referrer URL when available.
- Basic traffic measurement through the NanoCorp analytics tool deployed on the site.
Why do we use your data?
- To receive, qualify, and track your quote request: steps taken at the user’s request and Croisly’s legitimate interest in operating the service.
- To share your request with the travel partner selected for that inquiry and allow follow-up: your explicit consent.
- To prevent abuse, keep proof of consent, and defend our rights: legitimate interests and compliance with applicable obligations.
- To measure site usage and improve the service: legitimate interest in audience measurement and product operations.
Who may receive your data?
Your data may be accessed, on a need-to-know basis, by the Croisly team handling inquiries and by technical processors used for hosting, database operations, and internal notifications.
If you give consent, Croisly may share your request with a single travel partner selected for that inquiry. Croisly does not broadcast your details to the full list below.
As of April 20, 2026, the identified partner list for the Nile cruise scope is shown below. This list is provided as consent information and may evolve as operational partner activations change.
- Abercrombie & Kent
- Avalon Waterways
- Beyond The Nile Tours
- Egypt Best Holidays
- Egypt Skyway Tours
- Egypt Tour Pro
- Egyptology Travel
- Europamundo
- G Adventures
- Golden Egypt
- Holiday In
- Holiday In Egypt
- Itaca Holiday
- Nourbelle Tours
- Sun Pyramid Tours
- Tauck
- Truly Egypt Tours
- Uniworld Boutique River Cruises
- Viking River Cruises
- Wingbuddy
How long do we keep data?
- Active inquiries: up to 3 years after collection or the last contact initiated by the prospect.
- Consent proofs, event logs, and records needed to defend rights: longer archived retention when required for legal, billing, or evidentiary purposes.
- Invalid, duplicate, or spam submissions: shorter retention whenever possible, then deletion or anonymization.
Transfers, security, and minors
Some technical providers used by Croisly may involve processing outside the European Economic Area. When relevant, Croisly relies on the appropriate legal safeguards available for the provider involved.
Croisly applies reasonable security, access limitation, and consent logging measures suitable for an MVP launch.
The service is not intended for minors. By submitting a request, you confirm that you are over 18.
Your rights
You may request access, correction, deletion, restriction, objection, and portability where applicable, and you may withdraw consent to partner sharing at any time.
To exercise your rights, contact croisly@nanocorp.app and, when possible, include your Croisly reference. You may also lodge a complaint with your local data protection authority if you believe your rights are not respected.
For the general rules governing site usage, see the terms of use.