Privacy policy

1. Who is responsible for your information

For the purposes of UK data protection law, the controller is Whitstable Yacht Club, Sea Wall Whitstable Kent CT5 1BX. The contact details used for privacy enquiries are [email protected] and +44 20 7946 0958. The VAT identifier shown for business information is GB 201640519.

This notice explains how personal information is handled when you use this website, request a consultation, provide details about a vessel or communicate about repair and maintenance work.

2. Information we collect

When you submit an enquiry we may collect your name, telephone number or email address, vessel type, the description you provide and any damage photograph you choose to attach. A photograph can contain contextual information about a vessel, marina or location and may also include file metadata depending on how the image was created.

We may also receive technical information necessary for site security and delivery, such as device or browser information, request time and network information generated when a webpage is requested.

3. Why we use personal information and our lawful bases

We use enquiry details to understand the requested service, respond to questions, arrange inspection, prepare a scope of work and take steps requested before a contract is entered into. Where work is commissioned, information is used to administer the contract, coordinate attendance, keep service records and manage payment or warranty-related communication.

We may process limited technical and correspondence information where necessary for legitimate interests such as site security, fraud prevention, record keeping, defending legal claims and improving the reliability of our enquiry process. Where consent is required for optional storage, analytics or marketing, those activities are based on consent and can be withdrawn for future use.

4. Photographs and vessel information

Damage photographs are used to understand context before an inspection and to help plan access, tools or specialist attendance. A photograph is not treated as a substitute for physical inspection where the repair decision depends on structure, measurements, electrical testing or mechanical operation.

We do not ask you to include passports, financial documents, crew medical information or other unnecessary personal documents in a damage image. If such information is visible accidentally, tell us so we can consider whether it should be removed from the working record.

5. Sharing information

Information may be shared with service providers that support hosting, communications, document storage or professional advice where this is necessary and subject to appropriate protections. If a repair requires a specialist subcontractor, relevant vessel and contact details may be shared to the extent needed to arrange or perform that work.

We may also disclose information where required by law, to respond to lawful requests, to protect legal rights or to deal with an insurance, safety or regulatory matter connected with the work.

6. International transfers

Where a supplier processes personal information outside the United Kingdom, we consider the transfer mechanism and protections required by UK data protection law. Depending on the destination, this can include an adequacy regulation or approved contractual safeguards.

7. Retention

Initial enquiries that do not proceed are kept only for as long as reasonably needed to respond, follow up and maintain appropriate business records. Records connected with completed or ongoing work may be kept for longer where necessary for contractual, accounting, safety, warranty or legal purposes.

Retention periods are reviewed according to the type of record. Information that is no longer required is deleted, anonymised or securely disposed of where appropriate.

8. Your rights

Under UK data protection law, you may have rights to access personal information, correct inaccurate information, request erasure in applicable circumstances, restrict processing, object to certain processing and receive information in a portable format where the legal conditions apply. Where processing relies on consent, you can withdraw that consent for future processing.

You also have the right to complain to the Information Commissioner's Office if you have concerns about the handling of your personal information. We encourage you to contact us first if you would like us to address a concern directly.

9. Cookies and similar technologies

This website provides a cookie choice interface and describes categories, purposes and control options in the separate cookie policy. Non-essential storage or access technologies are used only where the required consent has been obtained.

10. Changes to this notice

We may update this notice to reflect changes in our services, suppliers or legal obligations. The current version is published on this page with the revision date below.

Last updated: 21 August 2026.