Yes. We reported the incident to the relevant supervisory authorities, and the case references are below so that you can quote them rather than take our word for it.

Day 8 Experiences Ltd runs Yacht Week and is the company that holds your guest record. It sits under Day 8 AB, registered in Stockholm, which is why the incident was reported in Sweden as well as the UK.

The same incident affected other companies in the group, which made their own separate reports under their own references. If you also travelled with Ski Week, that is a separate company and a separate record — its answers are at help.theskiweek.com. If you worked our trips as a skipper, host or Event Team member, your records most likely sit with Quarterdeck Life Ltd, at help.quarterdeck.co.

Some people appear in more than one, most often former Yacht Week skippers whose records moved to Quarterdeck when it was set up. If that is you, ask us and we will tell you which entity holds what.

You can complain to your national data protection authority at any time, and you do not need our agreement or our involvement to do it. You can go to them directly whether or not you have raised anything with us first, and whether or not you are satisfied with what we have told you.

If you live elsewhere, your own country's authority can take your complaint.

Reporting an incident is a legal obligation, not a resolution. It does not undo what was copied, and it does not settle anything between you and us. We are saying it plainly because notifying a regulator is sometimes presented as though it closes the matter. It does not.