Your privacy is important to Heathery Heights. This policy sets out information on the personal data we collect about you, and your rights in respect of this data. This policy applies whether you use or interact with our website (www.heatheryheights.co.uk) or our related or associated web pages, social media platforms, landing pages or other online platforms (the “Website”).
Our Website may contain links to third party websites that are not covered by policy. We therefore ask you to review the privacy statements of other websites and applications to understand their information practices.
This policy contains the following information:
Our business name is Heathery Heights of Upper Erskine, Manse Brae, Lochgilphead, Argyll PA31 8QZ.
Our contact email address is firstname.lastname@example.org
We respect your right to privacy and will only process personal information about you in accordance with applicable data protection laws. We comply with General Data Protection Regulation (2016/679) and the UK Data Protection Act 2018. If any of these laws are replaced or superseded, we will also comply with that.
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
We keep this privacy notice under regular review and, if we make any changes to this notice, we will place an updated version on our website and, where appropriate, notify you by e-mail. Regularly reviewing this page ensures you are always aware of what personal information we collect, how we use it and under what circumstances, if any, we will share it with other parties.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Personal data, or personal information, is any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal data about you when you use our Website. Whenever we collect personal data about you, we must have a legal ground to do so. We will ensure that your personal data is processed lawfully, fairly, and transparently without adversely affecting your rights. The type of data we collect is as follows:
We may process your data for compliance with a regulatory requirement or legal obligation to which we are subject to. Your data will only be processed if processing the data to comply with such obligation is a reasonable and appropriate way of achieving compliance.
We may share your data from time to time with third parties, such as contractors who require this information to provide the service to you. This includes volunteers who help us deliver the services to you.
Cookies are small text files placed on your device when you visit our site and are used to make the user’s experience more efficient. We are able to store cookies on your computer where they are necessary for the operation of the site however, for non-essential cookies we need your permission.
These are the types of cookies we use:
Session and persistent cookies can be either first- or third-party cookies. A first-party cookie is set by the Website being visited; a third-party cookie is set by a different website. Both types of cookie may be used by us or our business partners.
The third-party cookies we use are:
All our cookies are categorised by the role they fulfil on our Website:
a. Strictly Necessary: these are essential to enable you to move around our Website and use features such as secure services. Without these cookies such services could not be provided;
b. Functionality: allow the website to remember your choices and to personal certain features. These cookies may be anonymised and cannot track your browsing activity on other websites; and
c. Performance: collect information as to how users use the Website. These cookies don't collect information that identifies a visitor. The information collected is aggregated and used to improve our Website.
d. None of the cookies employed are classified as Behavioural Targeting.
We will always ask for your consent to use non-essential cookies. You are free to withhold consent to this, but it means that we might not be able to provide the full Website experience to you.
If at any time you wish to disable our cookies, you may do so through the settings on your browser, or whenever the pop-up appears on our Website (each time you access the Website).
We store all your personal data on our servers within the United Kingdom and the United States.
If we ever need to transfer your data outside the EEA or the United Kingdom, we will ensure that we have standard contractual clauses in place with these third parties before transferring data outside the EEA or the United Kingdom, and we will conduct regular due diligence on those contractors to ensure that they comply with the General Data Protection Regulation (2016/679). This applies to our server companies in the United States.
Data security is of great importance to us, and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure data collected through our Website. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We will still be responsible for protection of your personal data, even where we have transferred it outside the EEA or the United Kingdom.
We regularly review our data retention obligations to ensure we are not retaining data for longer to fulfil the purposes we collected it for, including for the purposes of satisfying any legal accounting, or reporting requirements.
We may disclose your information in the following cases:
We may contract with third parties to supply services to you on our behalf. These include cloud services used to send emails and technology providers that assist in providing the communication to you.
When you provide us with personal data, you have certain legal rights, and these include:
If you wish to access, rectify, erase or transfer your personal data, please contact us at email@example.com
Please note that our terms and conditions and our policies will not apply to other websites that you get to via a link from our Website. We have no control over how your data is collected, stored or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.
We can update this policy from time to time as laws change or as the Website changes. If we make material changes to the policy, and we need your consent to those changes, we will contact you by email to do so.