Privacy Policy
The Royal Yacht Britannia Privacy Policy
Privacy Policy
The Royal Yacht Britannia Trust are committed to protecting and respecting your privacy. This policy together with our terms and conditions sets out the basis on which any personal data we collect from you, or that you provide to us shall be processed. Please read the following carefully to understand our views and procedures.
We keep this policy under regular review and it may change from time to time so please check this page occasionally to ensure that you are happy with the changes. By using our website, you are agreeing to be bound by this policy.
If you have any requests concerning your personal information or any queries with regard to the capture, storage and use of personal information or your rights, please contact us by email: [email protected] or telephone 0131 555 8800.
Privacy Policy Sections
- Who we are
- How do we collect information from you?
- Automated decisions and Profiling
- Who has access to your information?
- Your choices
- Right to Erasure
- How you can access and update your information
- Security precautions in place to protect the loss, misuse or alteration of your information
- Use of Cookies
- Links to other websites
- Are you 16 or under?
- Transferring data outside EU
- How to complain
Who we are
We are The Royal Yacht Britannia Trust and our overriding objective is the dignified preservation, maintenance and education of the general public of The Royal Yacht Britannia.
We are a registered Scottish charity (no. SC028070) and company limited by guarantee (no. SC185443) and the principle address is The Royal Yacht Britannia Trust, Ocean Drive, Leith, Edinburgh, EH6 6JJ. We also have a subsidiary company Royal Yacht Enterprises (no. SC185472) who are bound by this privacy policy.
Our Data Protection Officer is Pete Rubie, The Royal Yacht Britannia Trust, Ocean Drive, Leith, Edinburgh, EH6 6JJ.
How do we collect information from you?
We collect information directly supplied by you and in some instances automatically. We collect information in the following ways:
Data Type |
Collection Method |
What is collected |
Information Use |
Processing bases |
Retention |
Donors |
Completion of Gift Aid forms |
Name Address
|
Process gift aid claims from HMRC;
|
Legal obligation |
7 Years |
Annual Pass Holders |
Completion of application forms |
Name Address Email address Telephone Number Photograph |
Carry out our obligations to annual pass holders; |
Contract; Legitimate interests – We have a Legitimate intertest to process your personal data in order to fulfil the benefits of the annual pass and individuals should reasonably expect us to use their data in this way. |
12 Months after membership lapses |
Visiting Groups/Tour Guides |
Incoming enquiries via email, telephone or letter |
Name Address Email address Telephone Number
|
Carry out our obligations arising from any contracts entered into by you and us; |
Contract; Legitimate interests – We have a legitimate interest to process your personal data in order response to enquiries submitted and individuals should reasonably expect us to use their data in this way. |
3 Years from last booking |
Private and Corporate Event Customers |
Incoming enquiries via email, telephone or letter |
Name Address Email address Telephone Number
|
Carry out our obligations arising from any contracts entered into by you and us; |
Contract; Legitimate interests – We have a legitimate interest to process your personal data in order response to enquiries submitted and individuals should reasonably expect us to use their data in this way. |
5 Years from last enquiry/ booking |
Guests of Fingal |
Booking accommodation, Completion of manual check in forms, Incoming enquiries via email, telephone or letter |
Name Address Email address Telephone Number Passport Number Car registration Credit/Debit Card details,
|
Carry out our obligations arising from any contracts entered into by you and us; Fulfil legal requirement; Protect your property |
Contract; Legal obligation; Legitimate interests – If your car is parked within our property boundary we have a legitimate interest to process your personal data such as car registration in order to provide a secure location. |
5 Years from last enquiry/ booking |
Online |
Purchasing ticket, product or making a donation Competition entries Submitting enquiries, Booking accommodation |
Name Address Email Address Telephone Number Information of visited webpages, Passport Number on occasions, Car registration |
Process orders, reservations or donations you have submitted; processing entries into a competition respond to enquiries, requests or complaints you may have made; analysis and statistical purposes; |
Contract; Legal obligation; Legitimate interest – We have a legitimate interest to process your personal data in order response to enquiries submitted and individuals should reasonably expect us to use their data in this way. |
Financial transaction information shall be retained for 7 Years. Any other data shall be retained for 12 months from last interaction |
Onboard Activities |
Competition entries Completion of Feedback forms Recording of CCTV |
Name Address Email Address Photographs CCTV imagines |
processing entries into a competition entries into a competition; seek your views or comments on the service we provide; marketing activities; Security |
Legitimate interests – We have a legitimate interest to process your personal data in order respond to enquiries or competition entiries submitted. We also process your personal data for safety and security by way of CCTV, processing such as this is for indicating possible criminal acts and/or threats to public security and constitutes a legitimate interest |
6 Months; CCTV images keep for 30 days; |
Photographs |
Photographs taken of visitors onboard Britannia |
Biometric data (Photos) |
Publish photos on our Website |
Legitimate Interest – We have a legitimate interest to show visitors on our website in order demonstrate to other potential visitors what to expect. Individuals may opt out of photos being taken at the time or request removal of any photo’s from our website by emailing [email protected] |
1 year |
Services Users |
Wi Fi connection process
|
IP Address; MAC address; Details of data usage; Details of websites visits; |
analysis and statistical |
Legitimate interests – we have a legitimate interest to process your personal data to monitor activity undertaken on our broadband connection to ensure no unlawful activity is being undertaken and to ensure the service we are offering is adequate. |
12 months |
E-newsletter and promotional offer subscribers |
Clicking an electronic link or opting in while completing another data collection form |
Email Address |
send communications which you have requested and that may be interest to you. These may include news, information and special offers about our goods and services;
|
Consent |
12 months from last opened email |
Staff/ Recruitment |
Completion of application forms Submission of CV Via recruitment agencies |
Name Address Email Address Telephone Number Employment History Salary Medical Conditions Criminal Convications |
Review and progress recruitment; Meet employers obligations; |
Contract and Legal Obligation |
Staff information is retained for 6 years after leaving employment; Unsuccessful candidates information is kept for 6 months after recruitment process |
3rd Party Providers |
When you have expressly opted in to your details being passed to us by the selected 3rdparty |
Name Email Address |
Send one off introductory communication |
Consent |
6 months |
Other |
General enquiries via email, telephone, letter or social media |
As provided and relevant to enquiry |
respond to enquiries, requests or complaints you may have made; |
Legitimate interests – We have a legitimate interest to process your personal data in order respond to enquiries to have submitted |
12 months |
Automated decisions and Profiling
We shall never use your information to make any automated decisions about you, however we may use the information you have provided in order to ensure you receive the most relevant communications from us.
Who has access to your information?
We may disclose your information to any member of our group. We shall take all reasonable steps to keep your details secure and will never sell or share your details with 3rd parties for marketing purposes.
We may pass your information to Third Party Service Providers working on our behalf. This includes service providers, subcontractors and other associated organisations and is for the purpose of completing tasks and providing services to you such as processing orders and sending communications. When we use Third Party Service Providers, we disclose only the personal information that is necessary to deliver the service. We have written agreements in place that require our providers to keep your information secure and protected, prevents them using your data for their own benefit and to ensure that your data is only processed as directed by ourselves.
We would only release your personal information to third parties if you have specifically requested us to do so or the law requires us too. For example if a court order was received or for the purposes of preventing a crime.
Your choices
We respect your right of privacy, you have a choice about whether or not you wish to receive information from us. If you do not wish to receive direct marketing communications from us with news, information or special offers you have the choice by ticking the relevant boxes whenever you submit information to us. Your choice will not affect the service you receive and although you opt out of marketing communications you may still receive communications such as order confirmations and communications to allow us to facilitate your enquiry or complaint.
You can change what communications you receive or restrict the processing of your information at any time by clicking unsubscribe from any marketing email you receive or by contacting us by email: [email protected] or telephone 0131 555 8800.
Right to Erasure
You have the right to request the deletion or removal of your personal data where there is no compelling reason for its continued processing. This right can be enforced in the following circumstances:
- The personal data is no longer necessary in relation to the purpose it was originally collected/processed
- You withdraw consent for their data to be used
- You object to the processing of data and there is no overriding legitimate interest for continuing to process the data
- Your personal data was unlawfully processed based on its collection method
- If the legal or contractual permitted use of personal data has lapsed i.e. if data is sourced from a 3rd party and the use is restricted to a timeframe or specific purpose
There may be some instances when a request for erasure can be refused such as if the data is required to comply with a legal obligation such as financial audits. In this instance, your information shall only be processed for the legally obliged purpose and removed when the information is no longer required.
How you can access and update your information
You have the right to request a copy of the information we hold about you which will be provided free of charge. Any such as requests must be made in writing via email at [email protected], over any of our social media channels or in writing to:
The Royal Yacht Britannia
Ocean Drive
Leith
Edinburgh
EH6 6JJ
Wherever possible we shall provide a copy of your information in your preferred format however if this is not possible we shall ensure it is in a machine readable form. If requested by you and it is technically feasible we shall provide your information directly to another organisation.
The accuracy of your information is important to us so should you discover any inaccuracies please notify as soon as possible using the channel above and we will correct our records.
To protect your privacy and security, we will take reasonable steps to verify your identity before providing or correcting and information.
Security precautions in place to protect the loss, misuse or alteration of your information
We will take all steps reasonably necessary to ensure that any data collected from you is treated securely and in accordance with this privacy policy. Any sensitive information such as credit or debit card details are protected with 128/256 bit SSL encryption (Depending on your browser).
Unfortunately, the transmission of information via the internet is not completely secure and while we will do our best to protect your personal data, we cannot guarantee its security. Any transmission is done at your own risk.
In addition, we have security procedures in place to protect paper based systems and computerised databases from loss and misuse. Only authorised personnel, who require access to perform their role have access to this information and adhere to guidelines as to what use may be made of this.
Use of Cookies
We collect information about your general Internet usage by using a cookie file that is stored on the hard drive of your computer. They collect statistical data about your browsing actions and patterns and do not identify you as an individual. You may refuse to accept cookies by activating the setting on your browser, though this may mean you are unable to access certain parts of our site.
Links to other websites
Our website may contain links to other websites run by other organisations. This privacy policy applies only to our website‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access via links from our website.
In addition, if you linked to our website from a third party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site.
Are you 16 or under?
We do not knowingly send any marketing communications to anyone under the age 16. When subscribing to receive communications from us you are acknowledging that you are over the age 16.
If you are under 16 and wish to purchase a ticket or product please seek permission from your parent or guardian before providing your details.
Transferring data outside EU
We always aim to store and maintain your data within the EU however there may be occasions when this is not possible. By way of an example, this may happen if one of our service providers experience technical difficulties and are required to transfer data to a server located in a country outside of the EU. If this was to happen appropriate security measures shall be taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this policy.
In addition, if you use our services while you are outside of the EU, your information may be transferred outside of the EU in order to provide you with those services.
How to complain
If you have a complaint about how we use your information or this privacy policy please contact us by email: [email protected] or telephone 0131 5558800. If you are unsatisfied with the outcome of your complaint you can contact the Information Commissioner’s Office at the following address:
Information Commissioner's Office
45 Melville Street
Edinburgh
EH3 7HL
Tel: 0303 123 1113
Email: [email protected]
Alternatively, you can have a Live Chat at: https://ico.org.uk/global/contact-us/live-chat
Royal Yacht Britannia, Privacy Policy.
DigiTickets Privacy Policy
Who we are
In this privacy policy references to "we", "us" and "our" are to The Royal Yacht Britannia. References to "our Website" or "the Website" are to royalyachtbritannia.digitickets.co.uk.
Information collected and its use
The information we collect via the Website may include:
- Any personal details you knowingly provide us with through forms and our email, such as name, address, telephone number etc.
- In order to effectively process credit or debit card transactions it may be necessary for the bank or card processing agency to verify your personal details for authorisation outside the European Economic Area (EEA). Such information will not be transferred out of the EEA for any other purpose.
- Your preferences and use of email updates, recorded by emails we send you (if you select to receive email updates on products and offers).
- Your IP Address, this is a string of numbers unique to your computer that is recorded by our web server when you request any page or component on the Website. This information is used to monitor your usage of the Website.
- Information about your device such as your web browser, screen resolution and operating system. This information is used to ensure we continue to support the different devices used by our customers.
- Data recorded by the Website which allows us to recognise you and your preferred settings, this saves you from re-entering information on return visits to the site. Such data is recorded locally on your computer through the use of cookies. Most browsers can be programmed to reject, or warn you before downloading cookies, information regarding this may be found in your browsers 'help' facility.
We do not store any credit card details.
What we do with your information
Any personal information we collect from this website will be used in accordance with the Data Protection Act 1998 and other applicable laws. The details we collect will be used:
- To process your order, to provide after sales service (we may pass your details to another organisation to supply/deliver products or services you have purchased and/or to provide after-sales service);
- In certain cases we may use your email address to send you information on our other products and services. In such a case you will be offered the option to opt in/out before completing your purchase.
We may need to pass the information we collect to other companies for administrative purposes. We may use third parties to carry out certain activities, such as processing and sorting data, monitoring how customers use the Website and issuing our e-mails for us. Third parties will not be allowed to use your personal information for their own purposes.
Cookie Policy
Like many websites we use cookies to store and then retrieve small bits of information on your computer when you visit. This information is used to make the site work as you expect it to. It is not personally identifiable to you, but it can be used to give you a more personalised web experience.
Some of the information stored is put there by other companies whose software we have added to the site, and this can also impact your experience of other websites you may visit after leaving ours.
If you continue to use this site without taking action to prevent the storage of this information, you are effectively agreeing to this use.
If you want to learn more about the general uses of cookies, including how to stop them being stored by your computer, please visit Cookiepedia - all about cookies.
Below is a list of the different types of cookies used on this site, and an explanation of what they are used for. If you would like any more information, please get in touch.
Cookie |
Name |
Expiration Time |
Purpose |
Shopping Basket |
PHPSESSID |
24 minutes |
This cookie is used to keep track of what items are in a user's shopping basket. |
Cookie Consent |
dtAnalyticsConsent |
1 year |
This cookie is used to monitor the users consent for analytical cookies on our site. No user data is collected without this being enabled. |
Google Analytics |
_ga |
2 years |
These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. |
_gid |
24 hours |
||
_gat_tracker-name |
1 minute |
||
Microsoft Clarity |
_clck |
1 year |
These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site and how they interact with the website. |
_clsk |
1 year |
||
CLID |
1 year |
||
ANONCHK |
1 year |
||
MR |
1 year |
||
MUID |
1 year |
||
SM |
1 year |
||
New Relic |
__cfduid |
1 year |
This cookie is used to collect information about visitor's experience of the site in terms of performance. This helps us to monitor that our systems are working quickly and effectively, and to identify any problematic areas. |
Your Rights
You have the right to request a copy of any information that we currently hold about you. In order to receive such information please send your contact details including address to the following address:
The Royal Yacht Britannia
Ocean Drive, Leith, Edinburgh
EH6 6JJ
Other websites
This privacy policy only covers this website. Any other websites which may be linked to by our website are subject to their own policy, which may differ from ours.