The Ski Club of Great Britain (“the Ski Club”, “we”, “our” or “us”) is committed to protecting your privacy and handling your personal information responsibly.

Ski Club of Great Britain Limited is the data controller responsible for your personal information. Our registered address is:

Ski Club of Great Britain Limited
Canterbury Court
Kennington Park
1–3 Brixton Road
London
SW9 6DE

As the data controller, we are responsible for deciding how and why your personal information is collected and used.

This Privacy Policy explains how we collect, use, store and share your personal information when you use our websites, become a member, purchase products or services, book holidays or activities, contact us, or otherwise interact with us.

We process your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.

If you have any questions about this Privacy Policy or how we process your personal information, please contact us at:

Email: [email protected]

Depending on how you interact with the Ski Club, we may collect and process the following categories of personal information:

Information you provide directly

This includes information you provide when you:

• become a member;
• purchase products or services;
• book holidays, guiding or events;
• request travel insurance;
• enter competitions;
• subscribe to newsletters and other communications;
• contact us with enquiries or complaints;
• complete surveys or feedback forms;
• participate in forums or community features.

The information collected may include:

• name;
• postal address;
• email address;
• telephone number;
• date of birth;
• gender;
• membership information;
• emergency contact details;
• passport information where required for travel;
• payment and billing information (processed securely by our payment providers);
• preferences relating to holidays, skiing and communications.

In certain circumstances, we may need to collect and process special category personal data in order to provide our services safely and effectively.

This may include information relating to:

• medical conditions;
• disabilities or accessibility requirements;
• allergies;
• dietary requirements;
• other health information relevant to your participation in holidays, activities or events.

We process this information only where it is necessary to provide the services you have requested, protect your vital interests, comply with legal obligations, or where you have provided your explicit consent where required by UK data protection law.

Access to this information is restricted to authorised personnel and trusted service providers who require it to administer your booking, deliver the requested services or help ensure your safety.

We retain this information only for as long as necessary for the purpose for which it was collected or where required by law.

Information collected automatically

When you use our websites or digital services, we may automatically collect information including:

• IP address;
• browser type and version;
• operating system;
• device identifiers;
• pages visited;
• search activity;
• referring websites;
• website usage statistics;
• login activity;
• cookie identifiers;
• diagnostic and security information.

Information from third parties

We may receive personal information from trusted third parties including:

• payment providers;
• booking partners;
• insurance providers;
• customer relationship management systems;
• marketing platforms;
• authentication providers;
• analytics providers;
• social media platforms where you have authorised access.

App and Digital Service Information

Where you use our mobile applications or connected digital services, we may receive information relating to your participation in Ski Club activities, including trip participation, resort visits, activity history and other information necessary to deliver those services.

We use your personal information for a variety of legitimate purposes, including to:

• administer your membership;
• provide products and services you request;
• process holiday, event and insurance bookings;
• manage payments and refunds;
• communicate with you regarding your membership, bookings and enquiries;
• provide customer support;
• issue digital membership cards and related services;
• improve our websites, products and services;
• personalise content and communications where appropriate;
• administer competitions and promotions;
• maintain the security of our systems;
• detect and prevent fraud;
• comply with legal and regulatory obligations;
• maintain records relating to safeguarding, complaints and disputes where required;
• carry out statistical analysis and reporting;
• understand how members use our services to improve future experiences.

Where we process health or other special category personal data, we do so only where necessary for the safe provision of holidays, activities or other requested services and where permitted under applicable law.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects for individuals.

Our legal basis for processing your personal information depends upon the reason we collected it. We will process your information only where we have a lawful basis to do so, including:

• where processing is necessary to perform a contract with you;
• where we have your consent;
• where processing is necessary to comply with a legal obligation;
• where processing is necessary to protect your vital interests or those of another person;
• where processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

Where we rely on consent, you may withdraw that consent at any time, although this will not affect processing already carried out before consent was withdrawn.

We take appropriate technical and organisational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures include secure hosting environments, encrypted communications where appropriate, access controls, monitoring, and policies designed to protect the confidentiality and integrity of personal information.

Where payments are processed on our behalf, our payment providers are required to comply with the Payment Card Industry Data Security Standard (PCI DSS). We do not store your full payment card details on our own systems.

Where we provide secure methods of accessing your account, including passwordless authentication, you are responsible for maintaining the security of your device and authentication methods.

Although we take reasonable steps to protect your personal information, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.

We may share your personal information with trusted third-party organisations where this is necessary to provide our services, fulfil our contractual obligations, comply with legal requirements or pursue our legitimate interests.

Depending on the services you use, we may share your information with the following categories of organisations:

Payment Services

Payment providers who securely process membership fees, holiday bookings, event bookings and product purchases on our behalf.

Membership and Customer Management

Customer relationship management and membership administration platforms that enable us to manage memberships, bookings, enquiries and customer support.

Holiday, Travel and Insurance Partners

Holiday providers, guiding partners, travel companies, insurance providers and other organisations involved in delivering the services you have requested. Where you book a holiday or travel service through us, we will share only the personal information necessary to administer your booking and fulfil our contractual obligations.

Communications

Email delivery providers, mailing houses and other communication platforms that enable us to send service messages, newsletters and marketing communications where you have consented to receive them.

Website Infrastructure and Security

Website hosting providers, cloud infrastructure providers, security services, content delivery networks and technical support providers that help us operate, maintain and protect our websites and digital services.

Website Analytics and Advertising

Analytics providers who help us understand how our websites are used and improve their performance. Where you have provided your consent, advertising partners may also process information to help us measure and deliver relevant advertising.

Other Service Providers

Address verification services, digital wallet providers, website search providers, fraud prevention services and other carefully selected suppliers who support the delivery of our services.

Professional Advisers and Legal Requirements

Professional advisers including legal, financial and audit advisers, together with regulatory authorities, law enforcement agencies and government bodies where we are required to do so by law or where necessary to protect our legal rights.

We require all organisations processing personal information on our behalf to protect it appropriately and to process it only in accordance with applicable data protection legislation and our instructions.

Some of the organisations that provide services to us may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we ensure appropriate safeguards are in place to protect your information in accordance with UK data protection law. These safeguards may include:

• the UK International Data Transfer Agreement (IDTA);
• the UK Addendum to the European Commission’s Standard Contractual Clauses (SCCs);
• transfers to countries recognised by the UK Government as providing an adequate level of protection for personal information; or
• other lawful transfer mechanisms permitted under applicable legislation.

Some of our service providers, including payment providers, cloud service providers, communications providers and technology partners, may process personal information outside the UK where appropriate safeguards are in place.

Further information about the safeguards we use for international transfers is available on request.

Some of our membership products, holidays and activities are available to children and young people.

Where we collect personal information relating to a child, we do so only where it is necessary to provide the requested services, administer memberships, process bookings or comply with our legal obligations.

Where appropriate, we expect a parent or legal guardian to provide information on behalf of a child or to authorise its collection.

Parents or guardians may contact us at any time to request access to, correction of or deletion of a child’s personal information, subject to applicable legal requirements.

To operate our services, we rely on carefully selected third-party organisations who process personal information on our behalf.

These providers may assist us with:

• payment processing;
• membership administration;
• holiday bookings;
• customer relationship management;
• website hosting;
• cloud infrastructure;
• email delivery;
• analytics;
• digital membership cards;
• fraud prevention;
• customer support.

We require these organisations to process personal information securely, only in accordance with our instructions, and in compliance with applicable data protection legislation.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

Where automated systems are used to support our services, they assist staff in providing those services and are not used to make decisions without meaningful human involvement.

When you first visit our websites, you will be presented with a cookie preference banner that allows you to manage your consent for non-essential cookies.

You may change your cookie preferences at any time by accessing the cookie settings available on our website.

Most web browsers also allow you to control or delete cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of certain areas of our websites.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including providing our services, complying with legal obligations, resolving disputes and enforcing our agreements.

Retention periods vary depending on the type of information and the purpose for which it was collected. In determining appropriate retention periods we consider:

• legal and regulatory requirements;
• contractual obligations;
• operational business needs;
• safeguarding responsibilities;
• financial reporting obligations;
• the nature and sensitivity of the information.

Where personal information is no longer required, we will securely delete, anonymise or otherwise dispose of it in accordance with our data retention procedures.

Some information may be retained for longer where required by law or where necessary for the establishment, exercise or defence of legal claims.

When you visit our websites, we may automatically collect technical information including your IP address, browser type, operating system, device information, pages visited, referring website and other diagnostic information.

We use this information to:

• maintain the security of our systems;
• prevent fraud and abuse;
• improve website performance;
• understand how visitors use our websites;
• diagnose technical issues;
• produce statistical reports about website usage.

Under UK data protection law, IP addresses may constitute personal data and are processed accordingly.

Our websites use cookies and similar technologies to enable essential website functionality, remember your preferences, improve performance, measure website usage and, where you have given consent, support advertising and marketing activities.

Essential cookies are required for the operation and security of our websites and cannot be disabled through our cookie preference centre.

Non-essential cookies, including analytics and advertising cookies, are only used where you have provided your consent. You can manage your cookie preferences at any time through our cookie settings.

For full details of the cookies we use, including their purpose, duration and provider, please refer to our Cookie Policy.

Where permitted by law, we may contact you about membership, products, services, events, holidays and other activities that we believe may be of interest to you.

Where required, we will obtain your consent before sending electronic marketing communications. You may withdraw your consent or update your marketing preferences at any time by using the unsubscribe link included in our emails, updating your preferences through your member account, or contacting us directly.

We will continue to send service communications that are necessary to administer your membership, bookings or the services you have requested, even if you choose not to receive marketing communications.

Under UK data protection law you have a number of rights in relation to your personal information, including:

• the right to access the personal information we hold about you;
• the right to request correction of inaccurate or incomplete information;
• the right to request deletion of your personal information where applicable;
• the right to request restriction of processing in certain circumstances;
• the right to object to processing carried out on the basis of legitimate interests;
• the right to withdraw consent where processing is based on consent;
• the right to receive certain personal information in a portable format;
• the right not to be subject to decisions based solely on automated processing that have legal or similarly significant effects.

You also have the right to object to receiving direct marketing communications from us at any time. Marketing emails include an unsubscribe link, and you may also update your communication preferences through your member account or by contacting us directly.

If you wish to exercise any of these rights, please contact us using the details below.

If you are unhappy with how we have handled your personal information, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Website: https://www.ico.org.uk

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal obligations or the way we process personal information.

Any updates will be published on this page and, where appropriate, we may notify members of significant changes by email or through other communication channels.

Last updated: 31 July 2026

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or would like further information about how we process your personal information, please contact us.

Email: [email protected]

Post:
Ski Club of Great Britain Limited
Canterbury Court
Kennington Park
1–3 Brixton Road
London
SW9 6DE