The Royal Household regards the lawful and correct treatment of personal information as vital to successful operations and to maintaining the confidence of those with whom it deals. The Royal Household’s policy is that the whole organisation will treat personal information lawfully and correctly and therefore fully endorses and adheres to the Principles of data protection described in the Data Protection Act 1998.

What information do we collect?

The Royal Household needs to collect certain types of information about the people with whom it deals in order to operate. For example, we may keep: 

  • a record of any correspondence (by post, email or any other method);
  • if you apply for a job with us, your contact information and details of your skills and qualifications relevant to the position; 
  • address details and credit card information for processing of ticket requests to visit one of our sites or sales of goods through one of our shops (including our online store);
  • names and addresses of individuals who have been nominated or invited to attend an event or function.

How do we use your information?

We use information held about you in the following ways:

  • to provide you with information you request from us or which we feel may interest you where you have consented to be contacted for such purposes;
  • names and addresses may be added to a database to manage correspondence from the public; 
  • biographical details might be collected for people being presented to Members of The Royal Family;
  • Information about employees is collected to manage aspects of their employment, such as the payment of salaries and pensions, performance assessment, and training and development. 
  • if you apply for a job with us, to help administer the recruitment process:
  • if you purchase goods or services from us, to administer their sale and delivery.

To whom will we pass your information?

All personal information will be held in a secure manner and will not be used for marketing purposes or used for any purpose not stated in this policy without your permission. We will however send personally identifiable information about you to other organisations, companies or people when:

  • we have your consent to share the information;
  • we respond to court orders or other legal processes;
  • we are required by law to provide information to others or we (in good faith) believe that we are required to do so by any order of the Courts or other competent body or agency;
  • we are required to do so for the protection or defence of rights or property or to protect the personal safety of Members of The Royal Family and employees of The Royal Household or the public at large.
  • we will not otherwise sell or pass your personal information on to any third parties without first obtaining your consent.

How can I access this information?

Anyone about whom the Household holds personal information has the right to request access to records which may contain personal information relating to them. If you wish to access your personal information you should complete a Data Protection Access Request Form.

There is a charge of £10 to cover administrative costs. Cheques should be made payable to the 'Treasurer to The Queen'. The form along with payment and two photocopied forms of ID should be returned to: The Data Protection Administrator, Information Assurance, Buckingham Palace, London, SW1A 1AA. Applications will be processed within 40 calendar days of the receipt of payment.

What can you expect from us?

  • we will protect your personal information and make sure nobody has access to it who shouldn’t;
  • let you know if we share it with other organisations and if you can object to this;
  • make sure we don’t keep it longer than necessary;
  • ensure we do not make your personal information available for commercial use without your permission; and
  • when responding to subject access requests we will
  • provide you with copies of your personal information, unless it is exempt;
  • give a description of the purpose(s) for which we are processing your information; and
  • tell you to whom your information has been passed.

What if you are unhappy with our response?

Any individual who wishes to lodge a data protection complaint either in regard to access procedures or other data protection issues should in the first instance write to The Keeper of the Privy Purse, in his capacity as the Household’s Data Controller. All complaints will be investigated.

How to contact us

Questions, comments and requests regarding this Privacy Policy are welcomed and should be addressed to: the Information Assurance Manager, Information Assurance, Buckingham Palace, London, SW1A 1AA.

For more information on the Data Protection Act, visit www.ico.gov.uk or call +44 (0)1625 545745.