Privacy Policy

Last updated: 11 May 2026

West Linton & Carlops Community Development Trust (“WLCCDT”, “we”, “us” or “our”) is committed to protecting your privacy. This policy explains what personal data we collect when you use this website, how we use it, and what rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

The data controller for this website is West Linton & Carlops Community Development Trust, a Scottish charity and a company registered with Companies House.

If you have any questions about this policy or how we handle your personal data, please email us at the address above.

2. What personal data we collect

2.1 Information you give us via the contact form

When you submit our contact form, we ask for and process:

  • Your name
  • Your email address
  • The subject and content of your message

2.2 Information collected automatically

  • Server access logs kept by our hosting provider (Vercel): IP address, browser type, referring page, pages requested and timestamps. These are used to operate the site securely and diagnose problems.
  • Anonymous usage statistics collected by Vercel Web Analytics. Vercel Analytics is privacy-friendly: it does not use cookies and does not collect any data that on its own identifies you.

We do not knowingly collect personal data from children and we do not collect special category data (such as health, ethnicity or political opinions) through this website.

3. How we use your data and our lawful basis

PurposeLawful basis (UK GDPR)
Reply to your enquiry submitted through the contact formConsent (Art. 6(1)(a)) — given when you submit the form
Keep a record of correspondence so we can follow up on community projectsLegitimate interests (Art. 6(1)(f)) — running the charity's community work
Keep the website secure and detect or prevent abuseLegitimate interests (Art. 6(1)(f)) — protecting our site and visitors
Understand which pages are popular so we can improve the siteLegitimate interests (Art. 6(1)(f)) — data is aggregated and anonymous

We will not use your information for marketing or add you to any mailing list unless you separately ask us to.

4. Who we share your data with

We do not sell your personal data. We share it only with the service providers we need to run this website and respond to you:

We may also disclose personal data if required by law, or to protect our rights, property or safety.

5. International transfers

Vercel, Resend and Google are based in the United States. When your data is transferred outside the UK, we rely on the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses, along with supplementary safeguards offered by each provider, to make sure your data continues to receive UK GDPR-equivalent protection.

6. How long we keep your data

  • Contact form messages: kept for up to 24 months after our last contact with you, then deleted unless there is a continuing reason to keep them (for example, an ongoing project enquiry).
  • Server access logs: retained by our hosting provider for a short period (typically 30 days) and then automatically deleted.
  • Anonymous analytics: retained in aggregated form only; no individual visitor record is kept.

7. Your rights

Under UK GDPR you have the right to:

  • Be informed about how we use your personal data
  • Request a copy of the personal data we hold about you
  • Ask us to correct data that is inaccurate or incomplete
  • Ask us to delete your data (the “right to be forgotten”)
  • Ask us to restrict or object to how we use your data
  • Withdraw consent at any time, where we rely on consent — this does not affect anything we did before you withdrew it
  • Ask us to transfer your data to another organisation

To exercise any of these rights, email info@westlintonandcarlopscdt.org. We will respond within one month.

8. Cookies and similar technologies

This website does not set any cookies of its own and does not use advertising or cross-site tracking.

Our home page embeds the WLCCDT Facebook page so you can see recent community posts at a glance. To display this feed, your browser loads content directly from Facebook (connect.facebook.net and facebook.com) when you open our home page. As a result, Facebook receives your IP address, the fact that you visited our home page, and — if you are logged in to Facebook in the same browser — information linked to your Facebook account. The Facebook plugin is provided by Meta Platforms Ireland Ltd and may set its own cookies in your browser. We do not control or have access to the data Meta collects through this plugin. You can read more in the Meta Privacy Policy.

How to avoid this: if you do not want Facebook to receive data when you visit our home page, you can log out of Facebook before visiting, use your browser's private / incognito mode, or block third-party cookies and scripts from facebook.com using your browser settings or an extension such as uBlock Origin or Privacy Badger. The rest of our website will continue to work normally.

Our lawful basis for embedding the Facebook feed is legitimate interests (Article 6(1)(f) UK GDPR) — keeping the community informed of WLCCDT news where it is already published. We have weighed this against the privacy impact on visitors and judged it proportionate given the prominent disclosure above and the straightforward ways to opt out.

9. Security

We take reasonable technical and organisational measures to protect your personal data, including HTTPS encryption in transit, access controls on our inbox, and using reputable service providers. No method of transmission over the internet is 100% secure, but we work to protect your information.

10. Links to other websites

Our website contains links to other websites (for example, the Office of the Scottish Charity Regulator and our Facebook page). This policy only applies to our site; we are not responsible for the privacy practices of other websites.

11. Changes to this policy

We may update this policy from time to time. We will publish any changes on this page and update the “Last updated” date at the top.

12. How to complain

If you are unhappy with how we have handled your personal data, please contact us first at info@westlintonandcarlopscdt.org so we can try to put things right.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):