Data Protection Rights
Last reviewed: 8 October 2026
Under UK GDPR, you have the right to request access to, rectification of, erasure of, restriction of, portability of, and objection to the processing of your personal data. This right is commonly known as a Subject Access Request (SAR).
1. Response time
We will respond to your request within a maximum period of one month from receipt (UK GDPR art. 12.3). If your request is complex or we receive a high volume of requests, we may extend this period by a further two months, informing you of the extension and the reasons within the initial one-month period.
2. Identity verification
To protect your privacy, we will verify your identity before disclosing personal data. We will request at least two identification items (e.g. copy of ID and proof of address). If we cannot verify your identity, we will not be obliged to respond (UK GDPR art. 12.6).
3. Cost
The request is free of charge. However, we may charge a reasonable fee or refuse to respond to manifestly unfounded or excessive requests (UK GDPR art. 12.5).
4. Request form
Please fill in the form below. You will receive a reference number that we recommend you keep for any follow-up.
5. If you prefer not to use this form
You can write to us directly at tickets@libertydreams.co.uk from the email address associated with your account. Please clearly indicate which right you wish to exercise.
6. Complaints
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.
UK/UE Legal equivalence for EEA residents
UK/UE legal equivalence for EEA residents: Liberty Dreams LTD, through its platform WishToSail.com (a company registered in the United Kingdom, Companies House nº 12724306), applies both the UK General Data Protection Regulation and the EU Regulation 2016/679 when the user resides in the European Economic Area. Maritime professional qualifications (STCW) are mutually recognised between the United Kingdom and the European Union under the EU-UK Trade and Cooperation Agreement 2020 (Part 2 Title III). The competent supervisory authority for UK residents is the Information Commissioner's Office (https://ico.org.uk/); for EEA residents, the supervisory authority of the Member State of residence, coordinated through the European Data Protection Board (https://edpb.europa.eu/). The recognition of qualifications is carried out in accordance with Directive 2005/36/EC and its successor Directive (EU) 2024/782, with reference to Cedefop (https://www.cedefop.europa.eu/).