Privacy Policy

The Royal Yacht Britannia Privacy Policy

The Royal Yacht Britannia Trust are committed to protecting and respecting your privacy. This policy together with our terms and conditions sets out the basis on which any personal data we collect from you, or that you provide to us shall be processed. Please read the following carefully to understand our views and procedures.

We keep this policy under regular review and it may change from time to time so please check this page occasionally to ensure that you are happy with the changes. By using our website, you are agreeing to be bound by this policy.

If you have any requests concerning your personal information or any queries with regard to the capture, storage and use of personal information or your rights, please contact us by email: [email protected] or telephone 0131 555 8800.

Privacy Policy Sections

Who we are
How do we collect information from you?
Automated decisions and Profiling
Who has access to your information?
Your choices
Right to Erasure
How you can access and update your information
Security precautions in place to protect the loss, misuse or alteration of your information
Use of Cookies
Links to other websites
Are you 16 or under?
Transferring data outside EU
How to complain

Who we are

We are The Royal Yacht Britannia Trust and our overriding objective is the dignified preservation, maintenance and education of the general public of The Royal Yacht Britannia.

We are a registered Scottish charity (no. SC028070) and company limited by guarantee (no. SC185443) and the principle address is The Royal Yacht Britannia Trust, Ocean Drive, Leith, Edinburgh, EH6 6JJ. We also have a subsidiary company Royal Yacht Enterprises (no. SC185472) who are bound by this privacy policy.

Our Data Protection Officer is Pete Rubie, The Royal Yacht Britannia Trust, Ocean Drive, Leith, Edinburgh, EH6 6JJ.

How do we collect information from you?

We collect information directly supplied by you and in some instances automatically. We collect information in the following ways:

Data Type	Collection Method	What is collected	Information Use	Processing bases	Retention
Donors	Completion of Gift Aid forms	Name Address	Process gift aid claims from HMRC;	Legal obligation	7 Years
Annual Pass Holders	Completion of application forms	Name Address Email address Telephone Number Photograph	Carry out our obligations to annual pass holders;	Contract; Legitimate interests – We have a Legitimate intertest to process your personal data in order to fulfil the benefits of the annual pass and individuals should reasonably expect us to use their data in this way.	12 Months after membership lapses
Visiting Groups/Tour Guides	Incoming enquiries via email, telephone or letter	Name Address Email address Telephone Number	Carry out our obligations arising from any contracts entered into by you and us;	Contract; Legitimate interests – We have a legitimate interest to process your personal data in order response to enquiries submitted and individuals should reasonably expect us to use their data in this way.	3 Years from last booking
Private and Corporate Event Customers	Incoming enquiries via email, telephone or letter	Name Address Email address Telephone Number	Carry out our obligations arising from any contracts entered into by you and us;	Contract; Legitimate interests – We have a legitimate interest to process your personal data in order response to enquiries submitted and individuals should reasonably expect us to use their data in this way.	5 Years from last enquiry/ booking
Guests of Fingal	Booking accommodation, Completion of manual check in forms, Incoming enquiries via email, telephone or letter	Name Address Email address Telephone Number Passport Number Car registration Credit/Debit Card details,	Carry out our obligations arising from any contracts entered into by you and us; Fulfil legal requirement; Protect your property	Contract; Legal obligation; Legitimate interests – If your car is parked within our property boundary we have a legitimate interest to process your personal data such as car registration in order to provide a secure location.	5 Years from last enquiry/ booking
Online	Purchasing ticket, product or making a donation Competition entries Submitting enquiries, Booking accommodation	Name Address Email Address Telephone Number Information of visited webpages, Passport Number on occasions, Car registration	Process orders, reservations or donations you have submitted; processing entries into a competition respond to enquiries, requests or complaints you may have made; analysis and statistical purposes;	Contract; Legal obligation; Legitimate interest – We have a legitimate interest to process your personal data in order response to enquiries submitted and individuals should reasonably expect us to use their data in this way.	Financial transaction information shall be retained for 7 Years. Any other data shall be retained for 12 months from last interaction
Onboard Activities	Competition entries Completion of Feedback forms Recording of CCTV	Name Address Email Address Photographs CCTV imagines	processing entries into a competition entries into a competition; seek your views or comments on the service we provide; marketing activities; Security	Legitimate interests – We have a legitimate interest to process your personal data in order respond to enquiries or competition entiries submitted. We also process your personal data for safety and security by way of CCTV, processing such as this is for indicating possible criminal acts and/or threats to public security and constitutes a legitimate interest	6 Months; CCTV images keep for 30 days;
Photographs	Photographs taken of visitors onboard Britannia	Biometric data (Photos)	Publish photos on our Website	Legitimate Interest – We have a legitimate interest to show visitors on our website in order demonstrate to other potential visitors what to expect. Individuals may opt out of photos being taken at the time or request removal of any photo’s from our website by emailing [email protected]	1 year
Services Users	Wi Fi connection process	IP Address; MAC address; Details of data usage; Details of websites visits;	analysis and statistical	Legitimate interests – we have a legitimate interest to process your personal data to monitor activity undertaken on our broadband connection to ensure no unlawful activity is being undertaken and to ensure the service we are offering is adequate.	12 months
E-newsletter and promotional offer subscribers	Clicking an electronic link or opting in while completing another data collection form	Email Address	send communications which you have requested and that may be interest to you. These may include news, information and special offers about our goods and services;	Consent	12 months from last opened email
Staff/ Recruitment	Completion of application forms Submission of CV Via recruitment agencies	Name Address Email Address Telephone Number Employment History Salary Medical Conditions Criminal Convications	Review and progress recruitment; Meet employers obligations;	Contract and Legal Obligation	Staff information is retained for 6 years after leaving employment; Unsuccessful candidates information is kept for 6 months after recruitment process
3rd Party Providers	When you have expressly opted in to your details being passed to us by the selected 3rdparty	Name Email Address	Send one off introductory communication	Consent	6 months
Other	General enquiries via email, telephone, letter or social media	As provided and relevant to enquiry	respond to enquiries, requests or complaints you may have made;	Legitimate interests – We have a legitimate interest to process your personal data in order respond to enquiries to have submitted	12 months

Automated decisions and Profiling

We shall never use your information to make any automated decisions about you, however we may use the information you have provided in order to ensure you receive the most relevant communications from us.

Who has access to your information?

We may disclose your information to any member of our group. We shall take all reasonable steps to keep your details secure and will never sell or share your details with 3rd parties for marketing purposes.

We may pass your information to Third Party Service Providers working on our behalf. This includes service providers, subcontractors and other associated organisations and is for the purpose of completing tasks and providing services to you such as processing orders and sending communications. When we use Third Party Service Providers, we disclose only the personal information that is necessary to deliver the service. We have written agreements in place that require our providers to keep your information secure and protected, prevents them using your data for their own benefit and to ensure that your data is only processed as directed by ourselves.

We would only release your personal information to third parties if you have specifically requested us to do so or the law requires us too. For example if a court order was received or for the purposes of preventing a crime.

Your choices

We respect your right of privacy, you have a choice about whether or not you wish to receive information from us. If you do not wish to receive direct marketing communications from us with news, information or special offers you have the choice by ticking the relevant boxes whenever you submit information to us. Your choice will not affect the service you receive and although you opt out of marketing communications you may still receive communications such as order confirmations and communications to allow us to facilitate your enquiry or complaint.

You can change what communications you receive or restrict the processing of your information at any time by clicking unsubscribe from any marketing email you receive or by contacting us by email: [email protected] or telephone 0131 555 8800.

Right to Erasure

You have the right to request the deletion or removal of your personal data where there is no compelling reason for its continued processing. This right can be enforced in the following circumstances:

The personal data is no longer necessary in relation to the purpose it was originally collected/processed
You withdraw consent for their data to be used
You object to the processing of data and there is no overriding legitimate interest for continuing to process the data
Your personal data was unlawfully processed based on its collection method
If the legal or contractual permitted use of personal data has lapsed i.e. if data is sourced from a 3rd party and the use is restricted to a timeframe or specific purpose

There may be some instances when a request for erasure can be refused such as if the data is required to comply with a legal obligation such as financial audits. In this instance, your information shall only be processed for the legally obliged purpose and removed when the information is no longer required.

How you can access and update your information

You have the right to request a copy of the information we hold about you which will be provided free of charge. Any such as requests must be made in writing via email at [email protected], over any of our social media channels or in writing to:

The Royal Yacht Britannia

Ocean Drive

Leith

Edinburgh

EH6 6JJ

Wherever possible we shall provide a copy of your information in your preferred format however if this is not possible we shall ensure it is in a machine readable form. If requested by you and it is technically feasible we shall provide your information directly to another organisation.

The accuracy of your information is important to us so should you discover any inaccuracies please notify as soon as possible using the channel above and we will correct our records.

To protect your privacy and security, we will take reasonable steps to verify your identity before providing or correcting and information.

Security precautions in place to protect the loss, misuse or alteration of your information

We will take all steps reasonably necessary to ensure that any data collected from you is treated securely and in accordance with this privacy policy. Any sensitive information such as credit or debit card details are protected with 128/256 bit SSL encryption (Depending on your browser).

Unfortunately, the transmission of information via the internet is not completely secure and while we will do our best to protect your personal data, we cannot guarantee its security. Any transmission is done at your own risk.

In addition, we have security procedures in place to protect paper based systems and computerised databases from loss and misuse. Only authorised personnel, who require access to perform their role have access to this information and adhere to guidelines as to what use may be made of this.

Use of Cookies

We collect information about your general Internet usage by using a cookie file that is stored on the hard drive of your computer. They collect statistical data about your browsing actions and patterns and do not identify you as an individual. You may refuse to accept cookies by activating the setting on your browser, though this may mean you are unable to access certain parts of our site.

Links to other websites

Our website may contain links to other websites run by other organisations. This privacy policy applies only to our website‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access via links from our website.

In addition, if you linked to our website from a third party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site.

Are you 16 or under?

We do not knowingly send any marketing communications to anyone under the age 16. When subscribing to receive communications from us you are acknowledging that you are over the age 16.

If you are under 16 and wish to purchase a ticket or product please seek permission from your parent or guardian before providing your details.

Transferring data outside EU

We always aim to store and maintain your data within the EU however there may be occasions when this is not possible. By way of an example, this may happen if one of our service providers experience technical difficulties and are required to transfer data to a server located in a country outside of the EU. If this was to happen appropriate security measures shall be taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this policy.

In addition, if you use our services while you are outside of the EU, your information may be transferred outside of the EU in order to provide you with those services.

How to complain

If you have a complaint about how we use your information or this privacy policy please contact us by email: [email protected] or telephone 0131 5558800. If you are unsatisfied with the outcome of your complaint you can contact the Information Commissioner’s Office at the following address:

Information Commissioner's Office
45 Melville Street
Edinburgh
EH3 7HL

Tel: 0303 123 1113

Email: [email protected]

Alternatively, you can have a Live Chat at: https://ico.org.uk/global/contact-us/live-chat

Royal Yacht Britannia, Privacy Policy.

DigiTickets Privacy Policy

Policy Owner

This policy is owned and distributed by IT and Compliance manager of Digital Ticketing Systems Limited

Who we are

In this Privacy Policy, references to "we", "us", and "our"" are to Digital Ticketing Systems Limited (Company number 07044584). References to "our Website" or "the Website" are to *.digitickets.co.uk.

Digital Ticketing Systems Limited is the data controller responsible for the personal information collected through this Website.

Information We Collect

We may collect and process the following categories of personal information:

Information You Provide Directly

When you contact us, make a purchase, register for services, or complete forms on our Website, we may collect information such as:

Name
Postal address
Email address
Telephone number
Purchase and booking information
Any other information voluntarily provided by you

Payment Information

Payments made through our Website are processed by authorised payment service providers. We do not store your full credit or debit card details on our systems.

Our payment providers may process payment information and carry out fraud prevention and verification checks. Where international transfers are required, appropriate safeguards will be applied in accordance with applicable data protection laws.

Digital Ticketing Systems is PCI DSS v4.0.1 compliant and are annually assessed/certified.

Website Usage Information

When you visit our Website, we may automatically collect:

IP address
Browser type and version
Device information
Screen resolution
Operating system
Referral source
Pages visited and actions taken on the Website
Date and time of access

Marketing Preferences

If you choose to receive marketing communications, we will record your preferences and any interactions with our emails, including whether emails are opened or links are clicked.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our Website, remember your preferences, analyse usage, and improve user experience. Further information is provided in our Cookie Policy below.

How We Use Your Information

We process personal information for the following purposes:

To provide products and services you request
To process transactions and fulfil orders
To provide customer support and after-sales services
To manage bookings and accounts
To improve our Website, products, and services
To ensure Website security and prevent fraud
To comply with legal and regulatory obligations
To send marketing communications where we have your consent or another lawful basis to do so

Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

Performance of a contract: to provide goods or services you have requested.
Legal obligation: where processing is necessary to comply with legal requirements.
Legitimate interests: to manage and improve our business, Website security, and customer experience.
Consent: where required, including for certain cookies and marketing communications.

Where we rely on consent, you may withdraw it at any time.

Sharing Your Information

We may share your personal information with:

Payment processors
Hosting and IT service providers
Delivery and fulfilment partners
Marketing and communications providers
Analytics and Website performance providers
Professional advisers and auditors
Regulatory authorities, law enforcement agencies, or courts where required by law

All third-party service providers are required to process personal information only on our instructions and in accordance with applicable data protection laws.

We do not sell personal information to third parties.

International Transfers

Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place, such as:

Transfers to countries deemed to provide an adequate level of protection; or
Approved contractual safeguards, such as the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, regulatory, and reporting requirements.

Retention periods vary depending on the type of information and the purpose for which it is processed.

Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly, remember preferences, improve performance, and provide analytics information.

How We Use Cookies

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the operation of the Website and cannot be disabled through our cookie management tools.

Cookie	Purpose	Duration
PHPSESSID	Maintains user session and shopping basket functionality	Session / 24 minutes
dtAnalyticsConsent	Records cookie consent preferences	1 year

Analytics Cookies

These cookies help us understand how visitors interact with the Website so that we can improve performance and usability.

These cookies are only placed with your consent.

Google Analytics

Examples include:

_ga
_ga<container-id>
_gid
_gat_<tracker-name>

Used to collect aggregated statistical information about Website usage.

Google Privacy Information:

https://support.google.com/analytics/answer/6004245

Microsoft Clarity

Examples include:

_clck
_clsk
CLID
ANONCHK
MR
MUID
SM

Used to analyse user interactions and improve Website usability.

Microsoft Clarity Information:

Performance Monitoring Cookies

Performance monitoring tools help us identify technical issues and improve Website reliability.

Examples may include cookies used by services such as New Relic.

Managing Cookies

When you first visit our Website, you will be presented with a cookie banner allowing you to:

Accept all cookies
Reject non-essential cookies
Choose your cookie preferences

You may change your preferences at any time through our cookie settings tool.

You can also manage cookies through your browser settings. Disabling certain cookies may affect Website functionality.

Your Data Protection Rights

Under UK GDPR, you may have the right to:

Access your personal information
Correct inaccurate information
Request deletion of your information
Restrict processing
Object to processing
Request portability of your data
Withdraw consent where processing is based on consent
Lodge a complaint with the Information Commissioner's Office (ICO)

For more information about your rights, visit:

https://ico.org.uk/

Automated Decision-Making

We do not generally make decisions producing legal or similarly significant effects using solely automated processing.

Where automated tools are used for fraud prevention, security monitoring, or service administration, appropriate safeguards will be applied in accordance with applicable data protection legislation.

Childrens Data

Our Website is not intended to knowingly collect personal information from children unless necessary to provide services requested by a parent, guardian, school, attraction, venue, or authorised organisation.

Where we process children's personal information, we take additional care to ensure appropriate protections are in place.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Digital Ticketing Systems (t/a DigiTickets)

Sentio House, Pynes Hill, Exeter, Devon, EX2 5AZ

www.digitickets.co.uk/compliance-request

If you have concerns about how we use your personal information, you may submit a privacy complaint to us using the contact details above.

We will acknowledge your complaint and investigate it in accordance with applicable data protection legislation. We aim to respond without undue delay and within the timescales required by law.

If you remain dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).

Other Websites

This Privacy Policy applies only to this Website. Links to third-party websites are provided for convenience only. We are not responsible for the privacy practices of those websites, and we encourage you to review their privacy policies before providing any personal information.

Last Updated: 5 August 2026

The Royal Yacht Britannia Ticket Portal