Privacy Policy
British AUC Sport - Data Protection & Privacy
1. Introduction
British AUC Sport ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or use our services.
For the purpose of the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), the data controller is British AUC Sport of 128 City Road, London, EC1V 2NX, United Kingdom.
Please read this policy carefully to understand our practices regarding your personal data. By using our website and services, you acknowledge the practices described in this policy.
2. Information We Collect
We may collect and process the following categories of personal data about you:
a. Personal Identification Information:
- • Full name, date of birth, and nationality
- • Home address, email address, and telephone number
- • Passport and visa information (where required for travel)
- • Emergency contact details and next of kin information
b. Medical and Health Information:
- • Medical history, allergies, and current medications
- • Injury history and physical health conditions
- • Family medical history
- • Insurance information
c. Technical Data:
- • IP address, browser type, and device information
- • Cookies and usage data (see our Cookie Policy)
- • Website analytics and browsing behaviour
3. How We Use Your Information
We use your personal data for the following purposes:
- • To process and administer programme bookings and registrations
- • To communicate with you about your booking, programme updates, and important information
- • To ensure your safety and wellbeing during our programmes, including medical treatment if necessary
- • To comply with legal and regulatory obligations
- • To improve our services, website, and customer experience
- • To process payments and refunds
- • To send marketing communications (only with your explicit consent)
4. Legal Basis for Processing
We process your personal data on the following legal bases as set out in the UK GDPR:
a. Contractual Necessity:
Processing necessary to perform our contract with you, including processing bookings, payments, and delivering programme services.
b. Legal Obligation:
Processing required to comply with legal obligations, such as health and safety requirements, safeguarding, and immigration laws.
c. Legitimate Interests:
Processing for our legitimate interests, including improving our services, website analytics, and fraud prevention.
d. Consent:
Processing based on your explicit consent, such as for marketing communications and processing special category data (medical information).
5. Data Sharing and Disclosure
We may share your personal data with the following categories of recipients:
- • Our staff, coaches, and medical personnel for programme delivery and safety purposes
- • Service providers who assist us with our operations (payment processors, IT services, transport providers)
- • Regulatory bodies and law enforcement where required by law
- • Insurance providers in connection with claims
- • Accommodation providers and activity centres for programme logistics
We do not sell your personal data to third parties. All data sharing is conducted in accordance with applicable data protection laws.
6. International Transfers
Your personal data may be transferred to and processed in countries outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions as recognised by the UK Government.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Typically:
- • Booking and programme data: retained for 6 years after the programme ends
- • Medical information: retained for 3 years after the programme ends
- • Financial records: retained for 7 years as required by HMRC
- • Marketing data: retained until you withdraw consent or unsubscribe
8. Your Rights
Under UK data protection law, you have the following rights regarding your personal data:
- • Right to be informed: You have the right to be informed about how we use your data (this policy).
- • Right of access: You can request a copy of the personal data we hold about you.
- • Right to rectification: You can ask us to correct inaccurate or incomplete data.
- • Right to erasure: You can request deletion of your data where there is no compelling reason to retain it.
- • Right to restrict processing: You can ask us to suspend processing of your data in certain circumstances.
- • Right to data portability: You can request your data in a machine-readable format.
- • Right to object: You can object to processing based on legitimate interests or direct marketing.
To exercise any of these rights, please contact us at sports@britishauc.com. We will respond to your request within 30 days.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption, access controls, secure servers, and regular security assessments.
However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee its absolute security.
10. Cookies
Our website uses cookies to enhance your browsing experience, analyse site traffic, and support our marketing efforts. You can control cookie preferences through your browser settings.
For detailed information about the cookies we use and how to manage them, please contact us at sports@britishauc.com.
11. Third-Party Links
Our website may contain links to third-party websites, plug-ins, and applications. Clicking those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices.
12. Children's Privacy
Our programmes are designed for children and young people. Where we collect personal data relating to a child under 18, we obtain consent from a parent or legal guardian. We encourage parents to discuss data privacy with their children and to monitor their online activities.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:
Email: sports@britishauc.com
Address: British AUC Sport, 128 City Road, London, EC1V 2NX, United Kingdom
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
Last updated: 1 June 2026