Privacy Policy
Privacy Policy for Kingdom Sail Ltd
At Kingdom Sail Ltd, we are committed to safeguarding your privacy and protecting your personal information. This Privacy Policy outlines how we collect, use, and protect your data in compliance with the General Data Protection Regulation (GDPR). It applies to personal data collected via our website, services, or during our interactions, including SMS communications.
1. Information We Collect
We may collect and process the following categories of personal data:
- Personal Information: Name, address, email address, phone number, and date of birth.
- Financial Information: Credit card or bank details for payment processing.
- Medical Information: Health details provided by participants, including any dietary requirements, allergies, or conditions relevant to the safety of participants during our camps.
- Travel Information: Passport details, flight information, and travel insurance where relevant.
- Technical Data: IP address, browser type, device information, and browsing behaviour on our website via cookies and similar technologies.
2. How We Use Your Information
We use your personal information for the following purposes:
- Service Delivery: Process camp registrations, communicate with participants, and deliver our sailing programs.
- Safety and Wellbeing: To ensure the health and safety of all participants, including collecting relevant medical information.
- Payments: To process your payments for services and events.
- Marketing and Communications: If you have opted in to receive such communications, we will send you updates, offers, and newsletters.
- SMS Communications: Send important updates and reminders about our programs, events, or services via text messages.
Legal Compliance: To comply with any legal obligations, such as health and safety requirements or immigration laws for travel purposes.
3. Legal Basis for Processing Personal Data
We rely on the following legal bases under the GDPR for processing personal data:
- Contractual Necessity: Processing your data to fulfil our obligations under the contract (e.g., for camp registrations and bookings).
- Consent: Where you have given explicit permission for certain activities (e.g., receiving marketing emails or SMS notifications).
- Legitimate Interests: Where processing is necessary for our legitimate interests (e.g., improving our services), provided these interests do not override your fundamental rights.
- Legal Obligation: To comply with legal and regulatory requirements (e.g., safety or health reporting obligations).
4. Sharing Your Information
We do not sell or trade your personal data. However, we may share your information in the following circumstances:
- Service Providers: We trust third-party providers who assist in delivering our services, such as payment processors, SMS providers,
medical professionals, and insurance providers. All third parties are required to comply with GDPR and protect your data. - Legal Authorities: If required by law or necessary to protect the safety and rights of Kingdom Sail Ltd, its employees, or participants.
- Emergency Services: If we need to share medical or contact information with emergency services or health professionals during an emergency while participating in our programs.
5. International Data Transfers
In some cases, we may transfer your data outside of the European Economic Area (EEA). If we do so, we ensure that appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission.
- Adequacy Decisions by the European Commission for countries with adequate data protection.
6. Data Security
We implement appropriate technical and organizational measures to ensure the security of your data. This includes encryption, secure servers, and restricted access to sensitive information. However, no transmission of data over the internet is completely safe, and we cannot guarantee the absolute security of your data.
7. Data Retention
We will retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including legal or regulatory requirements. Medical information is deleted after the completion of the camp or event, except where required for legal reasons. You can request deletion of your personal data at any time.
8. SMS Communications and 10DLC Compliance
We may send you SMS communications to provide important updates, reminders, or promotional offers related to our programs and services. By providing your phone number, you consent to receive such communications. We comply with 10DLC (10-Digit Long Code) regulations to ensure lawful and secure use of SMS services. Key points include:
- Opt-In Requirement: You must explicitly opt in to receive SMS communications. This opt-in will be clearly documented.
- Purpose of SMS Communications: Messages may include program updates, payment reminders, health and safety alerts, or promotional information.
- Opt-Out Option: You can opt out of SMS communications at any time by replying with “STOP” to any message or contacting us directly.
- Data Security: We ensure all SMS-related data is transmitted securely and protected in compliance with applicable laws and standards.
- Third-Party Providers: We use compliant third-party SMS services to deliver messages and ensure adherence to regulatory requirements.
9. Your GDPR Rights
Under the GDPR, you have the following rights:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right of Rectification: You can request that any incorrect or incomplete data be corrected.
- Right of Erasure: You can request that we delete your personal data, subject to legal obligations.
- Right to Object: You can object to the processing of your data, including for marketing purposes.
- Right to Restrict Processing: You can request a restriction on the processing of your data in certain circumstances.
- Right to Data Portability: You can request a copy of your data in a machine-readable format.
- Right to Withdraw Consent: If you have given consent for processing, you have the right to withdraw it at any time.
To exercise these rights, please contact us using the information provided below.
10. Cookies and Tracking Technologies
Our website uses cookies to improve user experience and track browsing behaviour. You can manage cookie settings in your browser or opt out where applicable.
11. Children’s Privacy
We take extra care in protecting the privacy of children under 16. Personal data for children participating in our programs is collected with parental consent and is only used for the safety and well-being of the child during our sailing camps.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at:
Kingdom Sail Ltd
Email: [email protected]
Phone: +1 (415) 360-8357
Address: Intershore Consult (BVI) Ltd. Intershore Chambers, Road Town, Tortola, British Virgin Islands VG1110
You also have the right to lodge a complaint with your local data protection authority if you believe we have not complied with your data protection rights.
Effective Date: December 18, 2024