Last updated: 18 August 2026 | Effective for: Dragon Archive (www.dragonarchive.org)
This Privacy Policy explains how The Dragon Archive (“the Archive,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with our website at www.dragonarchive.org (the “Site”), which serves as a historical archive documenting the International Dragon one-design yacht class, including boat ownership histories, build and registration records, regatta results, and associated photography.
We have written this policy to comply with the EU/UK General Data Protection Regulation (“GDPR” / “UK GDPR”), and to align with the general principles of other major privacy laws, including the California Consumer Privacy Act as amended by the CPRA (“CCPA/CPRA”), Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”), Brazil’s Lei Geral de Proteção de Dados (“LGPD”), and Australia’s Privacy Act 1988. Where these laws differ, the section “Your Rights by Region” below explains what applies to you.
1. Who We Are
The Dragon Archive is a project of the International Dragon Association (the Dragon Class Owners’ Association), and is the data controller responsible for the personal data described in this policy.
Email: privacy@dragonarchive.org
2. What Information We Collect
| Category | Examples | Source |
|---|---|---|
| Historical ownership & vessel records | Owner names, dates of ownership, sail numbers, boat names, national class association affiliations, correspondence about a vessel’s history | Class association records, prior owners, public regatta results, donated archives |
| Regatta & event photography | Photographs and captions that may identify individuals (skippers, crew, spectators) | Submitted by photographers/owners, or sourced from public event coverage |
| Contact form submissions | Name, email address, message content, and anything voluntarily included | Directly from you |
| Data request / rights request submissions | Name, email, description of your request, information needed to verify identity | Directly from you |
| Analytics & technical data | IP address (may be truncated/anonymized), browser type, device type, pages viewed, referring site, approximate location | Automatically, via analytics tools and cookies |
| Cookies & similar technologies | Consent preferences, session identifiers, embedded content tokens (e.g., video/map embeds) | Set by the Site and third-party embeds, per your cookie choices |
3. Why We Use Your Information
3.1 Historical archive content (ownership records, regatta history, photographs)
We process this data on the basis of legitimate interest (GDPR Art. 6(1)(f)) — maintaining an accurate, publicly accessible historical record of the Dragon class, a class with over 90 years of racing history, is a legitimate interest of the class community, and we have concluded this interest is not overridden by individual privacy interests, given the historical, non-sensitive, and largely already-public nature of the information (boat ownership and regatta results are traditionally recorded and published by national and international class associations).
Where we retain and continue to process this data even after an individual’s objection or deletion request, we rely on the archiving in the public interest exemption under GDPR Article 89 and applicable derogations in national implementing law. This allows us to retain historical records where erasure would seriously impair or make impossible the archival purpose, subject to appropriate safeguards (see Section 7).
3.2 Photographs
Where photographs are clearly identifiable and were not already public via press/event coverage, we rely on consent from the photographer/submitter and, where reasonably practicable, from identifiable subjects, or on legitimate interest for historical event documentation. You may object at any time (Section 7).
3.3 Contact and data request forms
We process the information you submit on the basis of your consent (by submitting the form) and, where your request concerns exercising a legal right, our legal obligation to respond to it.
3.4 Analytics and cookies
Non-essential analytics and embedded content cookies are used only with your consent, collected via our cookie banner. Strictly necessary cookies (e.g., to remember your consent choice) are used on the basis of legitimate interest / as exempt from consent requirements under the ePrivacy Directive.
4. Cookies
Our cookie banner lets you accept or decline non-essential cookies by category (analytics, embedded content) before any such scripts run. Your choice is stored for up to 180 days, after which we will ask again. You can change your preference at any time via “Cookie settings” in the site footer.
| Category | Purpose | Consent required? |
|---|---|---|
| Strictly necessary | Remembering your cookie choice, basic site function | No |
| Analytics | Understanding site usage (e.g., [Plausible / Google Analytics / etc.]) | Yes |
| Embeds | Third-party content such as maps or video (e.g., [YouTube / Google Maps]) | Yes |
5. Who We Share Information With
- Service providers: hosting provider Bluehost, form backend, and analytics provider, each acting as a processor under contract.
- The public: historical ownership records, regatta results, and photographs are published openly on the Site as the core function of the archive, unless you have successfully objected or requested restriction (Section 7).
- We do not sell personal information, and we do not share data with third parties for their own independent marketing purposes.
6. International Data Transfers
Given the Dragon Class’s international membership, visitors to this Site come from many countries. The Site is hosted by Bluehost, Inc. (10 Corporate Drive, Burlington, MA 01803, USA), meaning personal data is transferred to and processed in the United States. Where this involves transferring personal data out of the EEA, this transfer is safeguarded by Standard Contractual Clauses issued by the European Commission, incorporated into Bluehost’s Data Processing Addendum. Bluehost’s parent company Newfold Digital maintains a specific UK GDPR Privacy Notice Addendum designed to supplement its core privacy policy for users located in the United Kingdom.
Other service providers we use (e.g., our analytics and form-handling providers) may also process data outside your country; each is bound by its own data processing agreement incorporating an equivalent safeguard (Standard Contractual Clauses, an adequacy decision, or the UK IDTA/Addendum as applicable).
7. Your Rights
Subject to the exemptions described below, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Erase your data (“right to be forgotten”)
- Restrict processing in certain circumstances
- Object to processing based on legitimate interest
- Port data you provided to us, where technically feasible
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with your local data protection authority
Submit requests by emailing privacy@dragonarchive.org. We will respond within 30 days.
Archival exemption (GDPR Art. 89): Because the Site exists specifically to preserve the historical record of the Dragon Class, erasure and objection rights for historical ownership and regatta records may be limited where deletion would seriously impair our ability to maintain an accurate archive. In these cases we will, wherever possible, offer alternatives such as removing your name from public display while retaining an anonymized/pseudonymized record, or noting your objection in the record, rather than deleting historical entries outright. We will always explain our reasoning if we decline a deletion request on this basis, and you retain the right to complain to a supervisory authority about that decision.
8. Your Rights by Region
European Economic Area & United Kingdom (GDPR / UK GDPR)
Rights as listed in Section 7 apply in full, subject to the Article 89 archival safeguards described above. Supervisory authority complaints can be lodged with your national data protection authority or, for UK residents, the Information Commissioner’s Office (ico.org.uk).
California, USA (CCPA/CPRA)
California residents have the right to know what personal information is collected, request deletion, correct inaccurate information, opt out of “sale” or “sharing” of personal information (we do not sell or share data for cross-context behavioral advertising), and not be discriminated against for exercising these rights. Submit requests via the contact details in Section 1.
Canada (PIPEDA)
You have the right to access personal information we hold about you, challenge its accuracy, and withdraw consent where processing is consent-based, subject to legal and contractual restrictions.
Brazil (LGPD)
Data subjects (titulares) have rights of access, correction, anonymization, portability, deletion, and information about entities with whom data has been shared, exercised through the contact details above.
Australia (Privacy Act 1988)
You may request access to and correction of personal information we hold, and may complain to the Office of the Australian Information Commissioner if you believe we have breached the Australian Privacy Principles.
Other jurisdictions
If your local law grants rights not listed above, contact us and we will do our best to accommodate your request consistent with our archival obligations.
9. Data Retention
Historical ownership, vessel, and regatta records are retained indefinitely as the core archival purpose of the Site. Contact form and data request submissions are retained for one year, only as long as needed to handle the inquiry. Analytics data is retained for 24 months per our analytics provider’s settings.
10. Children’s Privacy
The Site is not directed at children, and we do not knowingly collect personal data from children under 16. If you believe a child’s data has been included (e.g., in historical crew records — Dragon crews have long included junior sailors), contact us and we will review it.
11. Security
We take reasonable technical and organizational measures to protect personal data, including HTTPS encryption, access controls, etc. No method of transmission or storage is 100% secure.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be noted on this page with an updated “Last updated” date.
13. Contact Us
For any privacy question or to exercise your rights: privacy@dragonarchive.org