Privacy Policy

YHA (England & Wales) is committed to protecting your personal information. This Privacy Notice explains how we collect information about you, how we use the information we collect, and how you can instruct us if you prefer to change the use of that information.

YHA (England & Wales) will update this Privacy Notice on a regular basis so that it reflects the measures we are taking in relation to your personal data. This Privacy Notice was last updated on the 9th August 2021.

1. Who we are

YHA (England & Wales) is one of the UK’s leading charities for young people, providing a wide range of hostel accommodation and programmes. Our aim is to improve health, wellbeing and life skills through travel and real adventure.

YHA (England & Wales) is a data controller and a data processor in terms of the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018, and is registered with the Information Commissioner’s Office (ICO).

  • ICO registration Number: Z6434257
  • Company Registration Number: 282555
  • Registered Charity Number: 306122

2. How we collect your information

Information about you will be collected by YHA (England & Wales) in a number of ways:

  • When you book accommodation
  • When you check in at one of our properties
  • When you join as a member
  • When you donate, buy raffle tickets, take part in fundraising events or subscribe to our lottery
  • When you volunteer
  • When you contact us
  • When you take part in surveys, events and competitions
  • When you review our Hostels or provide feedback on our services
  • When you use our websites
  • When you interact with us through social media or email
  • When you book our accommodation through third party websites
  • When you are involved in an accident or incident at one of our properties

3. What personal information we collect

YHA (England & Wales) may collect the following types of personal data about you:

  • Name and contact information (address, email and telephone number)
  • Gender
  • Date of birth
  • Payment details
  • Identification details, such as your passport
  • Medical information
  • Names and personal information for other people associated with a booking – we assume that you have their permission to share this information
  • Information relating to your online interaction with YHA (England & Wales), for example the pages you visit on our websites, your IP address, device and browser type, as well as social media interactions

4. How we use the information we collect

We use your personal information in the following ways:

  • To confirm and remind you of your reservations
  • To provide the services you have requested
  • To manage your volunteering and membership
  • To record and thank you for your donations
  • To manage your raffle entries or lottery subscriptions
  • To manage your participation in fundraising events
  • To record your interactions with us
  • To provide details of Hostel customers and visitors to NHS contact tracing services on request (see section 11 for more information)
  • Where we have your consent to contact you by email, post, text message or phone with relevant communications about our products and services, such as newsletters, surveys, promotions and charity appeals
  • To personalise the services we offer you through relevant communications, where you have given your consent for this
  • To help inform and improve the relevance of our online advertising
  • To analyse data so that we can better understand customer and supporter behaviours, trends and the impact of our activities
  • To analyse data so that we can better understand customer and supporter behaviours, trends and the impact of our activities
  • To record any accidents or incidents that you may have been involved in or witnessed at one of our properties
  • Where we process your personal information it may be held by YHA (England & Wales) or by trusted third party companies which processes it on our behalf

Please also read our Cookie Policy and our website terms and conditions.

5. How we store your personal information

The data that we collect from you will be securely stored and processed in the United Kingdom and may be transferred to, processed or stored at, a trusted third-party destination within Europe.

Where your data is stored and processed by a third party we have contracts in place to ensure that the data is afforded the same protections as it would be if it were hosted in the United Kingdom and in line with the requirements of the UK Data Protection Act 2018 and EU GDPR legislation.

6. How long we keep your information

We retain your personal information for as long as it is needed to fulfil the service you requested. In some cases we must retain personal data in order to meet our legal obligations for reporting (for example, retaining financial records for up to seven years).

When your information is no longer required we will delete it securely.

We may retain information about customers whose conduct has been anti-social or breached our policies, for the purpose of restricting those customers’ future use of our services.

7. How we keep your information safe

We follow good security practices (including appropriate technical and organisational measures) in the processing, storage and disclosure of information which you have given us. We monitor your information where practical to do so to check that it is accurate and up to date.

Our security procedures mean that we will need to confirm your identity before we are able to discuss your membership, bookings or other queries.

YHA (England & Wales) will never ask you to send online passwords, credit card or bank details by email.

8. Information about young people

We welcome children and young people to our hostels and to our online services, and we take extra care when handling information about young people, for example Summer Camps. However, our online bookings, membership, donation and purchasing services are intended for users aged 16 years and over, so please do not use these if you are under 16 years old.

If you provide information to us about children under 16 years old, then you confirm that you are the parent or legal guardian, or have the consent of the parent or legal guardian.


We use Closed Circuit Television (CCTV) at some of our properties, and you may be recorded when you visit them. We use CCTV in order to help protect YHA guests, employees and visitors, and to protect YHA’s premises from criminal activities. CCTV footage will only be viewed when necessary – for example to detect a crime.

We comply with the ICO’s Code of Practice on the use of CCTV.

10. Disclosing your information to other organisations

Some of our hostels are operated by organisations other than YHA (England & Wales). Where you make a booking or enquiry about those hostels, we will pass your information on for the purpose of providing the services or information you have requested.

We may use trusted third parties to process your information on our behalf and when we do, appropriate data privacy contracts and clearly defined processing, storage and retention instructions will be in place. We will only transfer your personal information on the understanding that the third party has undertaken to us that they have in place adequate technical and organisational measures to protect that information.

We may release your information to the police or other authorities where we are under a legal obligation to do so, or where doing so is in your vital interests.

We may engage with trusted third parties to analyse data about our customers, supporters and website users in order to provide us with greater insight into customer and supporter behaviour for the purpose of informing future developments.

We may also provide anonymous statistics to reputable third parties for the purpose of analysis. These statistics will not include any personal information.

11. Collecting and sharing data with NHS Contact Tracing Services – in response to COVID-19

We display NHS Test and Trace QR code posters at the entrances to our Hostels to allow our customers and visitors to check in and support NHS Test and Trace (England) and NHS Wales Test, Trace, Protect services. We also have processes in place to collect and keep a record of staff, customers and visitors who come onto our premises for the purpose of contract tracing. This information will be collected to support NHS Test and Trace (England) and NHS Wales Test, Trace, Protect services.

By maintaining records of staff, customers and visitors, and sharing these with NHS Test and Trace services, we can help to identify people who may have been exposed to the Coronavirus.

From 19th July 2021 in England, and 7th August 2021 in Wales, it is optional, but recommended that customers and visitors provide their contact details at our Hostels.

Where customers and visitors (aged 16 or over) wish to provide their details to support contact tracing, the following information will be collected:

  • Names and contact details
  • The date of visit and the arrival and departure time

Where we have collected this information for the purpose of contact tracing, it will be retained for 21 days. We will only share information with NHS Test and Trace services if it is specifically requested and will do so securely.

NHS Test and Trace services will not disclose this information to any third party unless required to do so by law.

Your information will always be stored and used in compliance with the relevant data protection legislation.

The use of your information is covered by the General Data Protection Regulations Article 6 (1) (f) – legitimate interests of the venue/establishment. The legitimate interest in this case is the interest of YHA in co-operating with NHS Test and Trace services in order to help maintain a safe operating environment and to help fight any local outbreak of coronavirus.

12. Your rights

You may, at any time:

  • Ask us what information we hold about you and what we are doing with it
  • Request copies of the information we hold about you
  • Ask us to correct your information if it is inaccurate
  • Request that we delete your information
  • Ask us to change the way we process your information
  • Object to our processing of your information
  • Change how we communicate with you

Requests in writing (email or post) can be sent to the address below. You will be required to prove your identity before a personal data request is actioned.

If you want to unsubscribe from YHA emails, you will find an unsubscribe link on the footer of our emails. A link is also provided to our email preference centre, which allows you to determine what kind of content you want to receive from YHA (England & Wales) in the future.

13. How to get in touch

If you have any questions about this Privacy Notice or wish to exercise your data privacy rights, please contact us as follows:

Email us: [email protected]

Write to us: Data Protection Team, YHA (England & Wales), Trevelyan House, Dimple Road, Matlock, DE4 3YH

Company Registration Number: 282555

Registered Charity Number: 306122

Registration Number with ICO: Z6434257