Trust Center

How we handle your data

This page is maintained by STEPOLOGY to answer common security and privacy questions about reserving the Virgin Cruise Retreat 2027. It describes the controls currently enabled in our app it is not an independent certification or third-party audit.

What we collect

To book a cabin we collect contact details (email, phone), traveler details (legal name, date of birth, passport info, citizenship, address), rooming preferences, emergency contact, dietary and accessibility notes, and payment details processed by our payment provider.

Passport and traveler data is required by the cruise line to issue boarding documents. We do not use it for marketing.

How we protect it

Reservation data is stored in our managed Postgres database with row-level security enabled. Application access requires authentication, and only the STEPOLOGY admin team can read full reservation records.

Card details are never stored on our servers. Payments are tokenized and handled by Stripe; we only retain the references Stripe gives us (customer ID, payment method ID, charge IDs) to process your deposit and monthly installments.

Traffic to the site is served over HTTPS. Secrets and API keys are stored in our backend's secret manager and are not exposed to the browser.

Who we share it with

We share the minimum necessary data with the following providers:

  • Stripe payment processing (deposits, monthly installments, refunds).
  • Virgin Voyages boarding, cabin assignment, and passport validation for sailors on the manifest.
  • Travefy trip itinerary delivery to travelers.
  • Supabase / Lovable Cloudmanaged database, authentication, and application hosting.

We do not sell your data and do not share it for third-party advertising.

Retention & deletion

We retain reservation and passport records for the duration of the trip plus the period required for accounting and dispute resolution (typically up to 7 years for payment records). You can request deletion of optional fields (rooming notes, dietary preferences) at any time by contacting us.

Your choices

You can request a copy of your reservation data, ask us to correct it, or ask us to delete it once your trip and payment obligations are complete. We will respond within 30 days.

Reporting a security issue

If you believe you've found a security or privacy issue, email yo@stepologyofficial.com with details and steps to reproduce. Please give us a reasonable window to respond before public disclosure.

Contact

Questions about this page or your reservation? Reach the STEPOLOGY team at yo@stepologyofficial.com.

Last updated: June 2026. This page is editable content owned by STEPOLOGY and may change as our practices evolve.