California Resident Privacy Notice

When you cruise with us, register to cruise with us, set up an account with us, request information about our Company, communicate with us, visit websites, apply for employment with us, sign up for promotions, contests, or sweepstakes, or access our Services through various other methods, we collect personal information about you and your visit.

The chart below describes the categories of personal information we may have collected within the last 12 months, our sources for collection, our reasons for collecting personal information, and the categories of other parties with which we may have shared personal information for a business purpose. Please note that in the chart below, not every type of personal information listed under each category is used for every purpose, received from every source or shared with every party listed next to that category.

Personal information we collect	Where we got it	Why we got it or disclosed it	Who we disclosed it to for business purposes
Identifiers (e.g., name, salutation, title, date of birth, place of birth, gender, email address, telephone number, mobile number, address, emergency contact information, photographs and images, passports, alien resident cards, visas, residency permits, Social Security numbers, driver’s licenses, redress numbers, IP address, unique personal identifier, and login information)	From you, other guests in your reservation, your representatives and agents, your travel agents, our marketing, advertising, casino, and employee recruitment partners, and members of our family of companies.	To provide you and your group with Services, identify and authenticate you and your contact information, advertise and market our Services, communicate with you, comply with our obligations under applicable laws, ensure the health and safety of employees and guests, prevent fraud, provide emergency, health and security services, exercise our rights, customize your experience, evaluate you for potential employment, and the consideration, negotiation or completion of a corporate transaction.	Other guests in your reservation, your representatives and agents, your group leader, your travel agent, our marketing, advertising, and casino partners, our partners that assist with or provide your travel arrangements, process your payments, provide health services, provide onboard services, and provide port services and excursions, fraud prevention providers, operating systems and platforms providers, governmental and recognized law enforcement agencies, public health authorities, administration and port agents, healthcare providers, financial institutions, legal counsel, potential transaction partners, advisors, and members of our family of companies.
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code section 1798.80(e)) (e.g., name, signature, Social Security number, health information, bank information and income and business information, credit or debit card information, credit-related information, physical characteristics or description, address, telephone number, passport number, driver’s license, state identification card number, insurance policy number, education, employment and employment history)	From you, other guests in your reservation, your representatives and agents, your travel agents, our advertising, marketing, employee recruitment, and casino partners, healthcare providers, and members of our family of companies.	To provide you and your group with Services, identify and authenticate you and your contact information, advertise and market our Services, communicate with you, comply with our obligations under applicable laws, ensure the health and safety of employees and guests, prevent fraud, provide emergency, health and security services, exercise our rights, customize your experience, evaluate you for potential employment, and the consideration, negotiation or completion of a corporate transaction.	Other guests in your reservation, your agents and representatives, your group leader, your travel agent, our advertising, casino, and marketing partners, our partners that assist with or provide your travel arrangements, provide health services, provide onboard services, and provide port services and excursions, fraud prevention providers, operating systems and platforms providers, governmental and recognized law enforcement agencies, public health authorities, administration and port agents, healthcare providers, financial institutions and payment processors, legal counsel, potential transaction partners, advisors, and members of our family of companies.
Protected classification characteristics under California or federal law (e.g., racial or ethnic origin, religion or creed, national origin or ancestry, sex, age, physical or mental disability, veteran status, marital status, and citizenship)	From you, other guests in your reservation, your representatives and agents, your travel agents, our advertising, marketing, and employee recruitment partners, and healthcare providers.	To provide you and your group with Services, identify and authenticate you, advertise and market our Services, comply with our obligations under applicable laws, ensure the health and safety of employees and guests, prevent fraud, provide emergency and security services, exercise our rights, customize your experience, evaluate you for potential employment, and the consideration, negotiation or completion of a corporate transaction.	Other guests in your reservation, your agents and representatives, our partners that assist with or provide your travel arrangements, provide health services, provide onboard services, and provide port services and excursions, operating systems and platforms providers, governmental and recognized law enforcement agencies, administration and port agents, healthcare providers, legal counsel, potential transaction partners, advisors, and members of our family of companies.
Commercial information (e.g., transactional history, purchases and amount paid for Services, flight number, hotel booking, cabin number, loyalty program information, travel companions and family members, your activity on board our ships, your previous travel preferences, details of your play and spend at casinos, and details regarding your interactions with our call centers)	From you, other guests in your reservation, your representatives and agents, your travel agents, our marketing, advertising, and casino partners, our providers that assist with or provide your travel arrangements, and members of our family of companies.	To provide you and your group with Services, identify and authenticate you, advertise and market our Services, communicate with you, comply with our obligations under applicable laws, ensure the health and safety of employees and guests, prevent fraud, provide emergency, health and security services, exercise our rights, customize your experience, and the consideration, negotiation or completion of a corporate transaction.	Other guests in your reservation, your agents and representatives, your travel agent, our marketing, advertising and casino partners, our providers that assist with and provide your travel arrangements, process your payments, provide health services, and provide onboard services and excursions, fraud prevention providers, operating systems and platforms providers, governmental and recognized law enforcement agencies, public health authorities, administration and port agents, legal counsel, potential transaction partners, advisors, and members of our family of companies.
Biometric information (e.g., faceprints derived from facial recognition technology)	Directly from you.	For contact tracing purposes during a pandemic or other global health crisis, to facilitate and expedite your embarkation and/or disembarkation by taking your photograph and matching it against the photograph we collected from you during check-in or embarkation.	We do not disclose this information to third parties.
Internet or other similar network activity (e.g., browsing history, search history, and information regarding your interaction with websites, applications, videos, emails and advertisements)	From you, our marketing, advertising and fraud prevention partners, and members of our family of companies.	To provide you and your group with Services, identify and authenticate you, advertise and market our Services, comply with our obligations under applicable laws, ensure the safety of employees and guests, prevent fraud, provide emergency and security services, exercise our rights, customize your experience, and the consideration, negotiation or completion of a corporate transaction.	Your agents and representatives, our advertising, marketing, and payment processing partners, fraud prevention providers, operating systems and platforms providers, governmental and recognized law enforcement agencies, legal counsel, potential transaction partners, advisors, and members of our family of companies.
Geolocation data (e.g., your location on board our ships and geolocation data gathered from your devices)	From you, and our marketing, advertising and fraud prevention partners.	To provide you and your group with Services, identify and authenticate you, advertise and market our Services, comply with our obligations under applicable laws, ensure the health and safety of employees and guests, prevent fraud, provide emergency, health and security services, exercise our rights, customize your experience, and the consideration, negotiation or completion of a corporate transaction.	Your agents and representatives, our advertising and marketing partners, our partners that assist with or provide health services, fraud prevention and operating systems and platforms providers, governmental and recognized law enforcement agencies, public health authorities, potential transaction partners, and advisors.
Sensory data (e.g., recordings of your calls to our call centers, images from closed circuit television (“CCTV”) cameras on board our ships, including at all access points and throughout public areas, temperature readings, which may be taken using thermal imaging cameras).	From you.	To provide you and your group with Services, identify and authenticate you, advertise and market our Services, comply with our obligations under applicable laws, ensure the health and safety of employees and guests, prevent fraud, provide emergency, health and security services, exercise our rights, customize your experience, and the consideration, negotiation or completion of a corporate transaction.	Your agents and representatives, our marketing and advertising partners, operating systems and platforms providers, our partners that assist with or provide health services, governmental and recognized law enforcement agencies, public health authorities, legal counsel, potential transaction partners, and advisors.
Professional or employment-related information (e.g., employment application details, including name, employment history, telephone number, address, email address, education history, reference details, military service and immigration status)	From you, your representatives and agents, and our employee recruitment and casino credit partners.	To identify and authenticate you, communicate with you, verify your participation in our military appreciation program, comply with our obligations under applicable laws, ensure the safety of employees and guests, prevent fraud, provide emergency and security services, exercise our rights, evaluate you for potential employment, and the consideration, negotiation or completion of a corporate transaction.	Your agents and representatives, your potential future employers, operating systems and platforms providers, governmental and recognized law enforcement agencies, our casino credit and employee recruitment partners, legal counsel, potential transaction partners and advisors.
Non-public education information (e.g., any education records contained in employment applications)	From you, your representatives and agents, and our employee recruitment partners.	To identify and authenticate you, comply with our obligations under applicable laws, ensure the safety of employees and guests, prevent fraud, exercise our rights, evaluate you for potential employment, and the consideration, negotiation or completion of a corporate transaction.	Your agents and representatives, operating systems and platforms providers, governmental and recognized law enforcement agencies, legal counsel, potential transaction partners and advisors.
Inferences drawn from other personal information (e.g., inferences about your interests, travel and entertainment preferences)	Your travel agents, our marketing, advertising, and casino partners, fraud prevention providers, and members of our family of companies.	To provide you and your group with Services, identify and authenticate you, advertise and market our Services, comply with our obligations under applicable laws, ensure the health and safety of employees and guests, prevent fraud, provide emergency, health and security services, exercise our rights, customize your experience, and the consideration, negotiation or completion of a corporate transaction.	Your agents and representatives, our marketing, advertising and casino partners, operating systems and platforms providers, governmental and recognized law enforcement agencies, public health authorities, legal counsel, potential transaction partners, advisors, and members of our family of companies.
Sensitive personal information (e.g., social security, driver’s license, state identification card and passport numbers; account log-in and password allowing access to your account with us; racial or ethnic origin, religious or philosophical beliefs, or union membership; biometric information; information regarding consumers’ health; and sex life or sexual orientation)	From you, other guests in your reservation, your representatives and agents, your travel agents, our fraud prevention and casino credit partners, our providers that assist with or provide your travel arrangements, our employee recruitment partners, and healthcare providers.	To provide you and your group with Services, to identify and authenticate you, to communicate with you, to comply with our obligations under applicable laws, to ensure the health and safety of employees and guests, to prevent fraud, to provide emergency, health and security services, to exercise our rights, to evaluate you for potential employment, for the consideration, negotiation or completion of a corporate transaction, for contact tracing purposes during a pandemic or other global health crisis, and to facilitate and expedite your embarkation and/or disembarkation by taking your photograph and matching it against the photograph we collected from you during check-in or embarkation. We do not use your sensitive personal information for any other purpose, including to infer characteristics about you.	Our partners that assist with or provide your travel arrangements, provide health services, and provide port services and excursions, fraud prevention providers, your group leader, operating systems and platforms providers, government and recognized law enforcement agencies, public health authorities, our casino credit and employment recruitment partners, administration and port agents, healthcare providers, legal counsel, potential transaction partners, advisors, and in emergency situations and/or with your consent, other guests in your reservation, your emergency contacts, and/or your representatives or agents.

Data collected when you create an account with us, purchase our products or use our Services may include data about yourself and those traveling with you. By providing us with personal information of any other person, you confirm that you have the authority to do so on their behalf and have provided them with the information set forth in this California Resident Privacy Notice.

Please be aware that we have photographers on board taking photographs for guests to purchase. If you would not like to be photographed, please let our photographers know and they would be happy to take reasonable steps to comply with your request. Please note that we are unable to guarantee that you will not be included in photographs on an incidental basis.

When you visit websites or otherwise receive Services, and to the extent permissible under applicable law, we automatically collect some categories of personal information from you, including data collected using cookies, embedded scripts, and other tracking technologies (“Cookies and Tracking Technologies”), for website analytics to improve your online experience, analyze website usage, provide better security and to personalize online and offline marketing. More information about our use of Cookies and Tracking Technologies and your choices are available in our Cookie Policy. We respond to the Global Privacy Control. For information about how to opt out of receiving targeted advertising, please visit our Cookie Policy.

As defined by the CCPA and CPRA, we may have “shared” or “sold” the following personal information for the purposes and to the parties set forth below:

What we shared or sold	Why we shared or sold it	Who we may have shared or sold it to
Identifiers	To advertise or market the services provided by or jointly with other businesses and the Services of members of our family of companies, to remind you of future cruise credits you have purchased with us, and for the Norwegian Cruise Line brand only, to advertise or market a co-branded credit card with a financial institution	Advertising and marketing partners (e.g., travel agents and financial institutions), advertising and marketing providers (e.g., ad agencies and ad tech providers), operating systems and platforms providers, and members of our family of companies
Commercial information	To advertise or market the services provided by or jointly with other businesses and the Services of members of our family of companies, and to remind you of future cruise credits you have purchased with us	Advertising and marketing partners (e.g., travel agents and financial institutions), advertising and marketing providers (e.g., ad agencies and ad tech providers), operating systems and platforms providers, and members of our family of companies
Internet or other similar network activity	To advertise or market the services provided by or jointly with other businesses and the Services of members of our family of companies	Advertising and marketing providers (e.g., ad agencies and ad tech providers), operating systems and platforms providers, and members of our family of companies
Inferences drawn from other personal information	To advertise or market the services provided by or jointly with other businesses and the Services members of our family of companies	Advertising and marketing providers (e.g., ad agencies and ad tech providers), operating systems and platforms providers, and members of our family of companies

We do not sell or share your sensitive personal information. We also do not knowingly sell or share the personal information of minors under 16 years of age without affirmative authorization.

We retain your personal information for as long as we have a relationship with you or in accordance with applicable law, and such relationship includes any request to receive marketing or other promotional materials from us or membership in our loyalty programs. When deciding how long to keep your personal information after our relationship with you has ended, we take into account our legal obligations, including requirements of regulators and governmental agencies that have authority over us. We may also retain records to investigate or defend against potential legal claims.

We will delete or anonymize your personal information at the end of the retention period. If there is any information that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further processing or use of the data. We will maintain anonymous data in deidentified form and will not attempt to re-identify the information.

California privacy laws provide California residents with specific rights regarding their personal information. This section describes those rights and explains how to exercise them.

Right to Access Information

You have a right to request that we disclose certain information to you about our collection and use of your personal information. Once we receive and verify your request, as applicable, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purposes for collecting, selling, or sharing that personal information.
• The categories of third parties with whom we sell or share that personal information and the categories of personal information that were sold or shared with each category of third parties.
• The categories of other parties with whom we disclosed personal information for a business purpose and the categories of personal information that we shared with each category of other parties.
• The specific pieces of personal information we collected about you.

Right to Request Deletion of Your Personal Information

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive, confirm and verify your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception to the deletion right applies.

Right to Request Correction of Your Personal Information

You have the right to request that we correct your personal information that we collected from you and retain, subject to certain exceptions. Once we receive, confirm and verify your request, we will correct your personal information, unless an exception applies.

Right to Opt Out of Sales or Sharing of Your Personal Information

You have the right to opt out of the sale or sharing of your personal information.

Exercising Access, Deletion, Correction, and Sales/Sharing Opt-Out Rights

If you or your authorized agent wish to exercise the access, deletion, and correction rights described above, please submit a request to us by clicking here, or calling us at the applicable toll-free number below. You may exercise your right to opt out of sales and sharing of your personal information by clicking on the appropriate link below or calling us at the applicable toll-free number below.

              Oceania Cruises requests: Click here or call (833) 553-0085

              Regent Seven Seas Cruises requests: Click here or call (833) 284-4924

              Norwegian Cruise Line requests: Click here or call (800) 665-9231

A request to exercise the rights described above must: (1) provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and (2) describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it. We will verify your identity by asking for certain identifying information and matching that against the information we have on file. In certain cases, we may need to ask for more information.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

Right to Be Free from Discrimination

We will not discriminate against you for exercising any of the rights described above. Unless otherwise permitted by law, we will not deny you goods or services, provide you with a different level or quality of goods or services, charge you different prices or rates for goods or services, or retaliate against an employee, job applicant, or independent contractor because you have exercised your rights described above.

Shine the Light Requests

Under California Civil Code Section 1798.83, California residents have the right to request in writing from businesses with whom they have an established business relationship: (a) a list of the categories of personal data, such as name, email and mailing address and the type of services provided to the customer, that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties' direct marketing purposes; and (b) the names and addresses of all such third parties. To request the above data, please contact us by email to PrivacyTeam@nclcorp.com or write us at: Attn: Legal Department: Privacy Team, Norwegian Cruise Line Holdings Ltd., 7665 Corporate Center Drive, Miami, FL 33126. We will respond to such requests for data access within 30 days following receipt at the email or mailing address stated above. Please note that we are only required to respond to each customer once per calendar year.

If you have any questions, comments, or concerns about how we handle personal information, you may contact us at PrivacyTeam@nclcorp.com, and we will try to resolve your concern.