1. Introduction
Scottish Heritage Travel Journal ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website and use our services. This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller
Scottish Heritage Travel Journal is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, you may contact us via the contact information provided on our About page.
3. Information We Collect
We may collect and process the following categories of personal data:
- Identity Data: Full name as provided in our newsletter subscription form.
- Contact Data: Email address as provided in our newsletter subscription form.
- Preference Data: Country of residence and areas of interest as optionally provided.
- Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Usage Data: Information about how you use our website, including pages visited, time spent on pages, and navigation paths.
4. How We Use Your Information
We use your personal data for the following purposes, based on the lawful bases indicated:
- To send you our editorial newsletter and travel guides (Lawful basis: Consent).
- To administer and improve our website (Lawful basis: Legitimate interests).
- To analyse website usage and trends to improve user experience (Lawful basis: Legitimate interests).
- To comply with legal obligations (Lawful basis: Legal obligation).
5. Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights regarding your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request correction of inaccurate personal data.
- Right to Erasure: You have the right to request deletion of your personal data in certain circumstances.
- Right to Restrict Processing: You have the right to request restriction of processing of your personal data.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to processing of your personal data based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time.
6. Data Retention
We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Newsletter subscriber data is retained until you unsubscribe or request deletion.
7. Data Security
We have implemented appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.
8. Cookies
Our website may use cookies and similar tracking technologies to enhance your browsing experience and analyse website traffic. You can control cookie settings through your browser preferences. Essential cookies that are necessary for the website to function may not be disabled.
9. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policy of every website you visit.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
11. Complaints
If you are not satisfied with our response to any data protection concern, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).