The wedding of Princess Eugenie of York with Mr Jack Brooksbank: Public Ballot Privacy Notice


What information do we collect?

The name, address, telephone numbers, email address, date of birth, place of birth of all applicants.

How is it collected?

The data is collected via a web form. Access to this form is via the Royal Family website and the website of The Duke of York.  You can apply for the ballot from either of these sites.

Why do we collect it?

Your personal data is gathered in order to be able to administer the ballot for the Royal Wedding.  For those who are successful in the ballot, we require your information to send out Entry Cards and information for the event, to make arrangements for those who need special assistance, and to know who will be on the premises on the day for security and health and safety purposes.

How do we use your personal data?

We will use your personal data to administer the ballot. For those chosen in the ballot we will conduct security accreditation checks.  If you are a successful applicant, we will use your personal data to communicate with you about the event. 

How is it stored and processed?

Your data will be collected by a third party supplier to the Royal Household from the web form.  Once you press "Submit", you will receive an acknowledgement of receipt and your data will then be transferred securely to the Royal Household's network.  Your data will be held securely on this network, to be processed for the purposes of the ballot selection and the administration of the event. 

Who will it be shared with?

Your data will be processed by employees of the Royal Household. If you are successful in the ballot, your data will be shared with the Police who will undertake accreditation checks prior to Entry Cards being issued.  On the day of the Royal Wedding, prior to you entering the precincts of Windsor Castle, your ID documentation will be checked against the details provided on your application.  

Please also be aware that bag and person search is a condition of public entry to the Castle precincts for such events.  Your personal data will not be passed to any other third parties.

How do we protect your personal data?

The Royal Household takes the security of your data very seriously.  We have internal policies and controls in place to ensure that your data is processed and retained securely, and is not accessed except by our staff or authorised third parties in the proper performance of their duties.

When the Royal Household engages third parties to process personal data on our behalf, they do so on the basis of written instructions.  These third parties are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data in line with the relevant legislation.

How long do we keep it?

The personal data gathered by our third party supplier will be deleted by them shortly after you have received your confirmation of receipt and it has been transferred to the Royal Household network.  

If you are unsuccessful in the ballot, your personal data will be deleted within one calendar month after the event.  If you are a successful applicant, your name and address, and the names and addresses of the other members of your party, will be stored indefinitely in the Royal Archives.

What are my rights?

As a data subject, you have a number of rights.  You can:

  • access and obtain a copy of your data on request;
  • ask us to change incorrect or incomplete data;
  • ask us to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing; and
  • object to the processing of your data where we are relying on our legitimate interests as the legal ground for processing.

Please note that none of these rights are absolute and we reserve the right to refuse your request where exceptions apply.

Contact information and further advice

The Keeper of the Privy Purse is the registered Data Controller for the Royal Household.  If you wish to contact the Data Controller or have any queries about how we process your personal data, please send an email to [email protected]

If you have concerns about the use of your personal data, the Information Commissioner's Office is an independent body set up to uphold information rights in the UK.  They can be contacted through their website: or their helpline on 0303 123 1113, or in writing to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.