This page covers both Yacht Week and Ski Week. Your security notice lists the categories that applied to you — if you want the exact contents of your own record rather than the categories, there are two routes, and the quicker one is in your own hands.
The fastest route: download it yourself
Log in to your account and open Edit profile. At the bottom is a panel called Danger zone — the Go off radar button opens a dialog that lists what we currently hold on you, category by category with a count for each, and offers Download my data: a spreadsheet of the personal details we hold about you.
Downloading deletes nothing. You can take the copy and close the dialog — your account stays exactly as it was. The same dialog is also where deletion lives, if that is what you came for; the article on deleting your account covers it.
The spreadsheet contains your own data only. It leaves out what is not yours to receive even though it touches your record — other guests' names on a shared booking, for example — and internal system references, which are secrets rather than personal data.
If you hold accounts with both Yacht Week and Ski Week, each has its own download on its own site, because they are separate companies with separate records.
The written route: a subject access request
If you cannot log in, or you want us to check your record individually and answer formally, write to us and we will treat it as a subject access request. Reply to your security notice, or write to the notice address shown on it, and say that you want a copy of the personal data we hold about you. You do not need to use any particular wording, quote any legislation, or explain why.
If the email address you are writing from is different from the one you booked under, tell us the name and address you used, so we can find the right record.
What happens next
We add you to the list and confirm receipt. We then check your individual record and come back to you in writing with what it contains.
We do this rather than repeating the general categories back to you, because the two are not always the same. Records vary — some people have details on file that others do not, and occasionally a field contains something other than what its name suggests.
How long the written route takes
The law allows up to one month, extendable where a request is complex. Volumes are high at the moment, so we would rather point at the statutory period than promise you a shorter one and miss it. The download, by contrast, is immediate — which is why we suggest starting there if you can log in.
Why written answers come by email
We answer to the email address we already hold for you, because we cannot reliably confirm identity any other way. Given that this incident involved identity details, that matters more than usual.
You can also delete everything
A copy of your data and deletion of your data are separate things, and you can do either or both — the same dialog handles both. See the article on deleting your account and your data in your brand's collection.