Privacy Policy

1. Who We Are

Armada Yacht Club Ltd, trading as Armada Club (“Armada Club”, “we”, “us”, “our”), is a private members’ club offering access to a curated fleet of superyachts for dining, wellness, and business experiences.

Armada Yacht Club Ltd is registered in England and Wales (company number 16827082, incorporated 3 November 2025) with its registered office at 167–169 Great Portland Street, London W1W 5PF, United Kingdom. For data protection enquiries, contact us at claire@armadayachtclub.com.

2. What Data We Collect

We may collect and process the following personal data:

• Identity data: name, title, date of birth, nationality, photograph
• Contact data: email address, telephone number, postal address
• KYC & verification data: passport or ID documents, proof of address, source of wealth/funds documentation, PEP (Politically Exposed Person) screening results
• Financial data: bank details for membership payments, transaction history
• Membership data: membership tier, preferences, dietary requirements, booking history, feedback
• Technical data: IP address, browser type, device information, cookies
• Marketing data: communication preferences, event attendance

3. How We Use Your Data

We process your personal data for the following purposes:

• Membership administration: processing applications, managing accounts, delivering experiences
• KYC & compliance: identity verification, anti-money laundering (AML) checks, sanctions screening, PEP checks, required by law and essential for maintaining the integrity of our membership
• Experience delivery: dietary requirements, preferences, special requests shared with yacht chefs and crew on a need-to-know basis
• Communications: membership updates, event invitations, service information
• Legal obligations: compliance with UK law, HMRC requirements, regulatory requests
• Legitimate interests: improving our services, security, fraud prevention

4. Legal Basis for Processing

We rely on the following legal bases under UK GDPR:

• Contract: processing necessary to fulfil your membership agreement
• Legal obligation: KYC, AML, and regulatory compliance
• Legitimate interests: service improvement, security, fraud prevention
• Consent: marketing communications (you may withdraw consent at any time)

5. KYC & Enhanced Due Diligence

As a private members’ club serving ultra-high-net-worth individuals, we conduct thorough Know Your Customer (KYC) checks on all applicants. This includes:

• Identity verification via government-issued documents
• Proof of address
• Source of wealth and source of funds verification
• Screening against international sanctions lists
• PEP (Politically Exposed Person) screening
• Ongoing monitoring as required by regulation

This data is processed under our legal obligations and legitimate interest in maintaining the safety and reputation of the club. KYC data is stored securely with restricted access and retained as required by law (typically 5 years after membership ends).

6. Who We Share Data With

We may share personal data with the following categories of third parties, all bound by data processing agreements consistent with UK GDPR:

• Yacht owners and crew: dietary requirements, preferences, and guest names only, on a need-to-know basis for experience delivery
• KYC/AML service providers: for identity verification and compliance checks
• Payment processors: for secure membership payments
• Email and CRM platform (Brevo, EU-based): stores newsletter subscribers and processes contact-form submissions and transactional email delivery
• Content management platform (Sanity, EU-based): stores enquiry records submitted via the website for internal follow-up
• Hosting and infrastructure (Vercel): serves the website and processes form submissions
• Professional advisors: lawyers, accountants, insurers as necessary
• Regulatory bodies: when required by law

We never sell your personal data. We never share your identity or membership status publicly without your explicit consent.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and role-based permissions
• Regular security audits and penetration testing
• Ongoing cyber security investment
• Staff training on data protection
• Incident response procedures

8. Data Retention

• Membership data: retained for the duration of membership plus 2 years
• KYC/AML data: retained for 5 years after membership ends (legal requirement)
• Financial data: retained for 7 years (HMRC requirement)
• Marketing data: until consent is withdrawn

9. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (where legally permitted)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent for marketing

To exercise any of these rights, contact claire@armadayachtclub.com.

10. Cookies

Our website uses cookies. See our Cookie Policy for details.

11. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on this page.

12. Contact

Armada Yacht Club Ltd (trading as Armada Club)
167–169 Great Portland Street, London W1W 5PF, United Kingdom
Company number: 16827082 (view on Companies House)
Email: claire@armadayachtclub.com
Website: armadayachtclub.com

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.