Privacy policy

1. General

1.1 The Saltire Society is a Scottish Charitable Incorporated Organisation registered under the number SC044731 at 9 Fountain Close, 22 High Street, Edinburgh EH1 1TF.

1.2 The Saltire Society is committed to protecting and respecting your privacy. This Privacy Policy sets out the way we handle your personal information and use data related to you. We will refer to this Privacy Policy when we ask you for your consent and we will keep this page updated so that you can be confident when sharing your information with us, that it will be only used for what we describe here.

1.3 As a not-for-profit organisation, the Saltire Society qualifies for an exemption from the requirement to register with the Office of the Information Commissioner as a data processor, as long as it gathers and processes only such information as is necessary:

1.3.1 to establish or maintain membership or support;

1.3.2 to provide or administer activities for people who are members of the Society or have regular contact with it.

1.4 The Saltire Society has availed itself of this exemption and as such is not a ‘data controller’ of your personal data. Nevertheless it holds itself to high standards as detailed below.

1.5 Your membership is administered on behalf of the Society by a third party contractor, Hall McCartney Ltd (‘our membership administrators’), with whom we have a contractual relationship. Hall McCartney are registered as data processors under the GDP Regulations and are obliged to apply the same standards of confidentiality and privacy as we do ourselves.

2. How we collect your information

2.1 We may collect your personal information in a few limited ways, namely:

2.1.1 directly from you, when you fill in an application for membership, when you make enquiries on our website, or when you interact with us during your time as a member in various other ways (for example, where you attend our AGM or an event organised by us);

2.1.2 directly from you, when you provide your email address to us for the purpose of keeping you informed about our campaigns, events and newsletters;

2.1.3 from someone else who has bought membership on your behalf (for example where they have bought Saltire Society membership for you as a gift and provided us with your contact details for that purpose);

2.1.4 when you apply to us for a bursary, award or other support as we might offer from time to time.

3. The types of information we collect

3.1 We may collect the following types of personal data about you (and your family members, where relevant):

3.1.1 contact and communications information, including your contact details (including email address(es), telephone numbers and postal address(es))

3.1.2 records of communications and interactions we have had with you;

3.1.3 specific information on application forms such as social media handles or a personal website;

3.1.4 photographs or videos for our website and social media;

3.1.5 details of events attended and engagement with our projects or services.

3.2 We may also collect limited data concerning your mobility, special needs or dietary requirements, where you have volunteered this, for example so that we can cater for you when you attend a Saltire Society event.

3.3 We hold no information on your bank accounts or payment cards.

4. How we use personal information

4.1 Members

4.1.1 Personal information provided to us and/or our membership administrators will be used for the purposes outlined at the time of collection or application in accordance with the preferences you express.

4.1.2 Personal data collected and processed by us may be used for the following purposes:

4.1.2.1 administration of membership(s);

4.1.2.2 fulfilment of orders for goods and services;

4.1.2.3 where this is necessary for the performance of a contract (including the

Terms of Membership) with you;

4.1.2.4 communication about our work, membership, and other activities that we think may be of interest to you;

4.1.2.5 administration of donations and legacies;

4.1.2.6 administration of bursaries and awards (see 4.2).

4.2 Individuals and companies applying for an award or bursary

4.2.1 Any personal information that is provided in an application and during any project that has been commended or awarded, are used only for the purpose of reviewing the specific application and the ongoing administration and management of any bursaries or awards that are given.

4.2.2 We may publish information about projects and awards on our own website, including the amount of funds awarded and the recipient of the award/bursary.

4.2.3 The data from unsuccessful applications will be retained for no longer than 12 months following the final meeting of the awarding panel.

4.3 The Saltire Society will not share your information with third parties.

5. Your location

5.1 Our website does not use geolocation data.

6. Your marketing preferences

6.1 The Saltire Society and our membership administrators need to manage your membership subscription and may contact you from time to time in this regard. Examples of the type of communication would be:

6.1.1 membership-related mailings such as your renewal reminder, our regular newsletters and AGM notices;

6.1.2 transaction notifications, such as payment receipts or Direct Debit confirmations.

6.2 For all other types of communication, you always have control of how we communicate with you, for example by subscribing or unsubscribing to receive newsletters by email. You can unsubscribe or update your choices and/or your contact details by contacting us at membership@saltiresociety.org.uk

7. Sharing your information with others

7.1 We do not share your personal information for other organisations to use, other than as set out below.

7.2 Personal data collected by us, or collected and processed on our behalf by our membership administrators, may be shared with the following groups where necessary:

7.2.1 Saltire Society employees and volunteers, for the purposes of administering your membership and giving you access to the full range of membership benefits to which you are entitled;

7.2.2 Also, under strict obligations of confidentiality and with other appropriate protections in place:

7.2.2.1 our Contractors (such as our membership administrators, Hall McCartney Ltd and any firm which deals with dispatching the newsletter and any other mailings);

7.2.2.2 our professional advisors.

7.3 Third party access to your information is always subject to our control.

8. How long is your information kept?

8.1 We hold your information only as long as necessary for the purpose for which we use it. For most membership data, this means we retain it for so long as you have a valid Saltire Society membership and for a period of six years after your last interaction with us (for accounting, tax reporting and record-keeping purposes).

9. Your rights

9.1 You have the right to ask us, in writing, for a copy of all the personal data held about you (this is known as a ‘subject access request’). A copy will be sent to you as soon as possible and this will be no later than one month after your request.

9.2 If you would like to access your personal data held on our behalf, please apply in writing to our membership team: Saltire Society – Subject Access Request, PO Box 21, Baldock SG7 5SH.

9.3 Under the GDPR, you have the following rights:

9.3.1 To require us not to send you marketing communications;

9.3.2 To require that we cease processing your personal data if the processing is causing you damage or distress;

9.3.3 To require us to correct the personal data we hold about you if it is inaccurate;

9.3.4 To request that we erase your personal data;

9.3.5 To request that we restrict our data processing activities (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal);

9.3.6 To receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller; and

9.3.7 To object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights.

9.4 Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply: in particular the exemption relating to not-for-profit organisations managing their membership and activities, not constituting data processing.

10. Contact and complaints

10.1 If you have any queries about this Privacy Policy or how we process your personal information, or if you wish to exercise any of your rights under applicable law, you may contact the Convenor, by email at saltire@saltiresociety.org.uk;
or by post: Saltire Society, 9 Fountain Close, 22 High Street, Edinburgh EH1 1TF.

10.2 If you are not satisfied with how we are dealing with your personal information, you can make a complaint to the Information Commissioner. You can find out more about your rights under applicable data protection legislation from the Information Commissioner’s Office website available at ico.org.uk.

11. Changes to our privacy policy

11.1 We will update this privacy policy form time-to-time to make sure that it stays up-to-date with how we use your personal data and to meet any new legal requirements. The current version will be posted on this page of our website.