Privacy Policy

Last updated: 24 April 2026

Who we are and how to contact us

Clipper Ventures plc (referred to in this Privacy Policy as “Clipper Ventures”, “we”, “us” or “our”) is the organisation that determines how and why your personal information is used. We are therefore the data controller for the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018. You can contact us about privacy or data protection matters at:

  • Email: privacy@clipper-ventures.com

  • Postal: Data Protection Officer, Clipper Ventures plc, Granary and Bakery Building, Royal Clarence Yard, Weevil Lane, Gosport, Hampshire, PO12 1FX, United Kingdom

  • Company number: 03087938

You also have the right to raise concerns with the Information Commissioner’s Office (ICO) via www.ico.org.uk, although concerns can usually be resolved more quickly if raised with Clipper Ventures first.

The information we collect

The information collected depends on the nature of the relationship with Clipper Ventures, for example as a race crew applicant, race participant, training customer, event guest, sponsor contact, supplier or website visitor. Personal data collected may include:

  • Identification details, such as name, title, date of birth, nationality, passport details, photographs and video images

  • Contact details, such as email address, telephone number and postal address

  • Application and participation details, such as sailing experience, qualifications, references, next of kin and logistical information

  • Financial and transaction data, such as payment details, billing information and transaction history

  • Technical and usage data, such as IP address, browser type, device information and information about use of the website

  • Marketing and communications data, such as preferences for receiving updates and promotional communications

Special category medical data

As part of the operation of races, training and related events, Clipper Ventures also collects and uses special category personal data concerning health, which is subject to additional legal protection under the UK GDPR.

This may include:

  • Medical history and health information provided in medical questionnaires and forms

  • Information about injuries, illnesses, allergies, disabilities, medications and relevant treatment

  • Medical assessments and fitness-to-participate decisions

  • Health information recorded in incident or accident reports or during medical consultations linked to Clipper Ventures activities

Medical information is only collected where necessary for defined and legitimate purposes, and only where Clipper Ventures has both a lawful basis under Article 6 UK GDPR and a condition for processing special category data under Article 9 UK GDPR and the Data Protection Act 2018.

Where information comes from

Personal information may be collected directly from the individual, generated by Clipper Ventures during the organisation and delivery of races, training and events, or received from relevant third parties where lawful to do so.

These third parties may include medical professionals, travel or port agents, insurers, insurance brokers, sponsors, corporate partners and public sources such as Companies House, depending on the context of the relationship.

How information is used and the legal bases for doing so

Personal data is only processed where there is a lawful basis under the UK GDPR and, for medical information, a further condition permitting the processing of special category data.

General personal data

Clipper Ventures may use personal data for the following purposes:

  • To manage applications and participation in races, training and events, including logistics, communications and operational delivery; this will usually be necessary for the performance of a contract or for steps taken before entering into a contract

  • To operate, maintain and improve websites, digital services and customer experience; this is generally carried out in Clipper Ventures’ legitimate interests in running and improving its business and services

  • To manage enquiries, complaints, customer service and ongoing relationships; this may be necessary for contract performance, legal compliance or legitimate interests

  • To undertake marketing and promotional activities where permitted by law; this may be based on consent where required, or on legitimate interests where appropriate

  • To manage compliance, insurance, disputes, finance, governance and legal claims; this may be necessary for legal obligations or legitimate interests

Medical and health data

Medical and health information is used only where necessary and proportionate for purposes such as assessing fitness to participate, making reasonable adjustments, managing medical incidents, arranging insurance, complying with health and safety obligations and handling legal claims.

Depending on the circumstances, the relevant lawful bases and special category conditions may include:

  • Performance of a contract or steps prior to entering into a contract

  • Compliance with legal obligations, including health and safety duties

  • Legitimate interests in the safe and proper operation of races, training and events

  • Explicit consent, where this is the most appropriate basis for particular medical processing

  • Provision of health care, management of health systems or services, public interest in safety, or the establishment, exercise or defence of legal claims, where applicable under Article 9 UK GDPR and Schedule 1 to the Data Protection Act 2018

Medical information is not used to make solely automated decisions producing legal or similarly significant effects without meaningful human involvement, unless permitted by law and notified appropriately.

Consent and individual choice

Where Clipper Ventures relies on consent, it will explain clearly what the consent covers, ask for a clear affirmative indication, and keep a record of when and how consent was provided.

Consent can be withdrawn at any time. Withdrawal does not affect the lawfulness of processing undertaken before withdrawal, but it may mean Clipper Ventures is unable to provide certain services where the relevant information is necessary, for example where medical information is needed to assess fitness to participate safely.

Who information may be shared with

Personal data, including medical information, is shared only where necessary, proportionate and lawful. Clipper Ventures does not sell personal data. Depending on the circumstances, information may be shared with:

  • Clipper Ventures staff and contractors who need the information to perform their roles

  • Medical professionals and providers supporting races, training or events

  • Skippers, onboard medics and designated crew, but only to the extent necessary for safety and incident response

  • Port agents, travel providers and logistics providers

  • Insurers, brokers and claims handlers

  • IT, hosting, payment, communications, marketing and analytics providers acting as processors

  • Professional advisers, auditors, regulators and law enforcement bodies where required or justified by law

Medical and health information is only shared with those who have a genuine need to know it for the relevant purpose, and subject to appropriate confidentiality obligations.

International transfers

Some races, events, suppliers or service providers may be located outside the United Kingdom and the European Economic Area, which can involve international transfers of personal data.

Where personal data is transferred internationally, Clipper Ventures will ensure that at least one recognised transfer mechanism applies, such as a UK adequacy regulation, the use of approved contractual safeguards such as the International Data Transfer Agreement or standard contractual clauses, or another lawful exception under the UK GDPR where applicable.

Medical data will not be shared outside the UK or EEA unless this is necessary for a legitimate and lawful purpose such as urgent medical support during an overseas race or event, a fitness assessment involving an overseas medical provider, or compliance with insurance or legal obligations. In such cases, Clipper Ventures will seek to minimise the amount of information shared and apply appropriate confidentiality and transfer safeguards wherever reasonably practicable.

How long information is kept

Personal data is retained only for as long as necessary for the purposes for which it was collected, including to satisfy legal, regulatory, insurance, accounting or reporting requirements.

Retention periods vary according to the type of information and the purpose for which it is held. Medical and incident records may be retained for longer periods than standard customer records because of safety, legal and insurance considerations.

When information is no longer needed, it will be securely deleted or anonymised in accordance with Clipper Ventures’ retention practices.

How information is protected

Clipper Ventures applies appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage.

These measures may include access controls, secure storage, encryption, confidentiality requirements, staff training, provider due diligence, contractual controls and breach response procedures. Where legally required, Clipper Ventures will notify affected individuals and the ICO of reportable personal data breaches.

Individual rights

Under the UK GDPR, individuals have rights in relation to their personal data, subject to certain conditions and exemptions. These rights may include the right to:

  • Be informed about how personal data is used

  • Request access to personal data

  • Request correction of inaccurate or incomplete data

  • Request erasure in certain circumstances

  • Request restriction of processing in certain circumstances

  • Object to processing based on legitimate interests, including direct marketing

  • Withdraw consent where consent is relied on

  • Request data portability where applicable

Requests can be made using the contact details in the first section of this Privacy Policy. Clipper Ventures may need to verify identity before responding and will ordinarily respond within the time limits set by law.

Children’s information

Clipper Ventures’ websites, races, training and events are not intended to be used by children, and Clipper Ventures does not knowingly target or market its services to children.

Crew members must be at least 17 at the time of registration and 18 by the time of departure of the leg or legs of the race in which they participate.

Clipper Ventures does not intentionally invite or encourage children under 17 to register as race crew or to enter into contracts for participation. If an individual under 18 provides personal information, this should only be done where it is lawful and appropriate for the relevant activity, and with the knowledge and supervision of a parent or guardian.

Where online forms or services ask for age, that information may be used to help ensure that personal data is not collected from children inappropriately. If someone registers and states that they are aged 14 or younger, they will not be added to Clipper Ventures’ marketing or customer databases and Clipper Ventures will not retain their details for the purposes described in this Privacy Policy, other than to the limited extent necessary to maintain system integrity, security or suppression records.

If Clipper Ventures becomes aware that personal data has been collected from a child in circumstances where there is no appropriate legal basis, the information will be deleted as soon as reasonably practicable.

If it is believed that a child has provided personal data inappropriately, the Data Protection Officer should be contacted using the details in the first section of this Privacy Policy.

Cookies and similar technologies

Clipper Ventures’ websites use cookies and similar technologies to make the sites work, to understand how they are used, and to personalise and improve services. A cookie is a small text file that a website stores on a device when that website is visited. The types of cookies used may include:

  • Strictly necessary cookies – these are essential to make the websites work and to enable visitors to move around and use features such as secure areas. Without these cookies, services requested by the user cannot be provided

  • Performance and analytics cookies – these help Clipper Ventures understand how visitors use the websites so that performance can be measured and improved. These cookies may collect information such as which pages are visited, how long users spend on the site and which links are clicked

  • Functional cookies – these enable the websites to remember choices made by the user and provide enhanced functionality or improved personalisation

  • Advertising and social media cookies – these may be set by Clipper Ventures or by third-party platforms to help deliver relevant advertising, measure campaign effectiveness, enable content sharing or support embedded media and social features

When a visitor first uses the websites, they will be presented with information about cookies and given the opportunity to accept or reject non-essential cookies. Non-essential cookies, such as analytics or advertising cookies, will only be set where the visitor has consented to them.

What happens if cookies are disabled?

Visitors can usually use browser settings to refuse some or all cookies, or to alert them when cookies are being set. If cookies are disabled or refused:

  • some parts of the websites may not function properly or may become inaccessible

  • preferences or login details may not be remembered

  • certain services, embedded content or website features may not work as intended

Essential cookies are necessary for core site functionality and cannot be switched off through the website’s own systems, although many browsers allow these to be blocked. Blocking all cookies at browser level may prevent some parts of the website from functioning correctly.

Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in services, processing practices or applicable law, including changes to the UK data protection framework. Where changes are significant, appropriate steps will be taken to bring them to attention. The latest version will always appear on this page with the revision date shown above.