How Above Decks treat your personal information and how to check what details we hold about you.
This privacy notice sets out what you can expect from us when we ask for, or hold, your personal information obtained for the purpose of booking your yacht charter.
Your privacy
We know how important it is to protect your privacy and to comply with the UK General Data Protection Regulations (UK GDPR).
If we ask for your personal information we will:
- let you know why we need it
- only ask for what we need, and not collect excessive or irrelevant information
- make sure nobody has access to it who shouldn’t
- let you know who we share your information with
- not share it with other organisations unless we have told you in advance, unless we are obliged to do so by law
- only keep it for as long as we need to and tell you how long
- not make it available for commercial use, such as marketing
In dealing with your personal information, we will also:
- value the personal information entrusted to us and make sure we respect that trust
- abide by the law when it comes to handling personal information
In return, to help us keep your information accurate and up to date, we ask you to:
- give us accurate information
- tell us as soon as possible of any changes
Data you share with us.
To book your Above Decks experience you will need to share with us your;
- name and contact details so that we can communicate with you during the booking process. This is also required to issue your invoice and receipt.
- your dietary requirements so that we can tailor our menus
- your medical details if the medical condition impacts on your time or activities onboard
How we store your data.
We store your personal data on our secure UK email server. Invoices are stored on the quickbooks platform.
How long we keep this data.
We only keep your details for 3 month after the hire date. A copy of your invoice is kept for 7 years in line with our legal requirements for HMRC purposes on the quickbooks platform.
How we dispose of your data.
We dispose of the data collected by deleting off our email and quickbooks platforms.
How to exercise your rights under the GDPR
You have a number of rights under the UK GDPR which you can exercise by contacting us at the details provided below.
You can find out what personal information, if any, we hold about you and if we do hold information about you we will:
- give you a description of it
- tell you why we are holding it
- tell you who it could be disclosed to
- let you have a copy of the information in an intelligible form
You are entitled to request that we correct information about you if it is incomplete or inaccurate.
You can ask us to remove or delete personal information we hold about you. Please note however, that this right is only applicable in certain circumstances. We will let you know whether information can be deleted when you make your request. You can ask us to restrict how we use your information. Again, this right is only applicable in certain circumstances and we will explain those to you when you make your request.
You can object to certain types of uses of your personal information.
You can find out more information about your rights under GDPR on the Information Commissioner’s website.
How to make a complaint
If you’re unhappy with the way we have handled your personal information or you believe that we have not handled your information in a way that is compliant with the UK GDPR, please email us at [email protected].
We will acknowledge your complaint within 2 working days and let you have a full response within 20 working days.
If you are not satisfied with our response you can complain to the Information Commissioner’s Office.
