Privacy & Cookies Policies

Your privacy is important to us.

All data collected through the use of our website site is intended to be used as a means to further our fundamental aims of bringing farmers, land managers, communities and businesses together to enhance ecosystems and biodiversity in the Pentland Hills.

• We consider user privacy and data protection to be vitally important.
• We adhere to the principles of “privacy-by-design”.
• We will only collect and process data when necessary
• We will never sell, rent or otherwise distribute or make public your personal information
• Our website is not intended for use by children and we do not knowingly collect any data relating to children.

Project L-AND is being developed by the Pentland Land Managers Association (PLMA). The PLMA are project managing this initiative and is responsible for the data outlined in the privacy notice. As such, we are considered the “controller” of this data.

Our contact details are: [email protected]

The project is supported by NatureScot in collaboration with The Scottish Government and in Partnership with the National Lottery Heritage Fund.

Along with L-and’s business and partners' internal computer systems, this website is designed to comply with the following legislation with regards to data protection and user privacy:

• UK Data Protection Act 1988 (DPA)
• UK Data Protection Act 2018 (DPA 2018)

This site’s compliance with the above legislation, all of which are stringent in nature, means that this site is likely compliant with the data protection and user privacy legislation set out by many other countries and territories as well. If you are visiting this website from outside of the UK, please check your own country of residence's specific data protection and user privacy legislation before proceeding to view our website.

Personal data is any data about an individual by which that person can be identified. If conducting business with you, it may be necessary for us to collect the following data:

• Identity Data - including your first and last name.
• Contact Data - including your address, email address and telephone numbers.
• Financial Data - if you opt to donate towards our cause it may be necessary for us to collect payment details from you. This data will not be retained in any form.
• Transaction Data - including details about financial transactions between you and us.

We will be conducting a series of community engagement surveys. These are to understand how the Park is valued by all users and communities and understand what benefits they will support.

The results of our surveys shall be entirely anonymous and used for analytical purposes only. Please don’t include personally identifiable information within survey responses. We do not deliberately collect any such information.

Any commentary you choose to provide in the text boxes will be seen by the project partners, funders, and supporters and may be used in our public feedback reporting (eg. as quotations). You should not include anything in your comments which may reveal your identity, or that of others, or which you do not wish to be used in this way.

Demographic questions including will be used in our data analysis. This information ensures the survey reaches a representative sample of park users. This information cannot be used to identify you.

We use Paperform as a survey hosting platform. We require all 3rd parties to respect the security of personal data and treat it in accordance with the law.

You may choose to provide your email address (either via a survey response or our website) to sign up to our mailing list. This mailing list will be used update subscribers on the progress of the project and inform them when further information or surveys are available.

If you subscribe to the mailing list, you may unsubscribe at any time. Click the 'unsubscribe' link at the bottom of all emails or email [email protected].

We use Acumbamail as an email newsletter platform. We require all 3rd parties to respect the security of personal data and treat it in accordance with the law.

Website Analytics

Our website uses Plausible Analytics to collect data about user interaction. We have chosen them as our provider of analytics hosted within the EU due to their privacy-focussed business model. None of the information gathered by Plausible personally identifies you to us.

"By using Plausible Analytics, all the site measurement is carried out absolutely anonymously. Cookies are not set and no personal data is collected. All data is in aggregate only." - Plausible Analytics - read more...

Website Security & Performance

We use Cloudflare within our website for security and performance purposes. Cloudflare and other firewall software used in the service of the website may log your IP address for security purposes. This information is not used to personally identify you.

We consider Plausible, Paperform, Cloudflare, Acumbamail to be third party data processors (see below).

Forms / Email / Telephone / Verbal

You may contact us via email, telephone, or in person - within which communications you may choose to divulge identity, contact, and other personal data. We endeavour to take all reasonable measures to ensure any such data is held securely.

Cookies

We use only use technologies such as necessary or essential cookies where required to ensure the correct functioning of the website. We do not use tracking cookies or other such technology for the purposes of re-marketing or advertising.

You may disable the use of cookies via the preferences on your web browser. You may also delete any cookies that are stored on your computer. Be aware however that some functions within the website may rely on cookies to operate correctly.

To find out more about cookies in general, and how to manage and delete them, visit www.allaboutcookies.org.

If you do not wish to accept cookies from our website, please leave this site immediately and delete and block all cookies from this site. Your continued usage of this website will be taken as consent that you accept our usage of cookies.

Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Performance of Contract. This means processing your data where it is necessary for us to fulfil a contract with you or to take steps at your request before entering into such a contract.
• Legitimate Interest. This means the interest of our business in conducting and managing our business to provide the best and most secure service possible. We consider and balance any potential impact on you (positive and negative) and your rights before we process your personal data for legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
• Comply with a legal or regulatory obligation. This means processing your personal data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.

Below is a description of the ways we plan to use your personal data, with the legal basis we rely on to do so. We may process your personal data on more than one legal basis depending on specific circumstances.

Other Data / Website Analytics

We use the information we gather with Plausible and Cloudflare to further the aims of L-and, improve our website and security, and to gain insight into the viability or success of marketing campaigns. For these purposes, we may examine trends and gather information about the use of our website for the purpose of analytics.

We may have to share your personal data with Professional advisers including lawyers, bankers, auditors and insurers who provide banking, legal, insurance and accounting services.

HM Revenue & Customs, regulators and other based in the United Kingdom who require reporting of processing activities in certain circumstances.

We require all 3rd parties to respect the security of personal data and treat it in accordance with the law.

3rd Party Processors

We share data with several 3rd parties for the purposes of processing data (in some instances personal data) on our behalf. These 3rd parties have been carefully chosen and comply with the legislation set out in section 3. Among these 3rd party providers are analytics and security service providers. If you do not consent to your data being shared with these data processors, please do not use our website.

• Plausible Analytics (Privacy Policy)
• Cloudflare (Privacy Policy)
• Paperform (Privacy Policy)
• Acumbamail (Privacy Policy)

Website & Email

No personal data is stored or displayed by this website.

Data provided to us for the purposes making an enquiry via email are stored as emails within a secure IMAP email account provided by a GDPR compliant third party. Emails are then securely synced to assigned members' computer systems. This data is password protected and TLS encryption is used in its transfer.

Physical Data Storage

If paper copies of personal data or communications containing personal data are made, they will be kept in secure filing systems.

3rd Party Processor Data Storage

Where data is stored by 3rd party data processors, it is done so on our understanding that storage is secure and compliant with all relevant legislation. This is an important consideration for us when selecting 3rd Party data processor partners.

We use appropriate security measures to prevent personal data from being lost, used or accessed in an unauthorised way.

We limit access to personal data to those members, employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We only retain personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the nature, and sensitivity of the data, the potential risk of harm from its unauthorised use or disclosure, the purposes for which we gathered the personal data and any applicable legal requirements.

Unless subject to an exemption under the data protection laws, you have rights with respect to your personal data. You may find out more about these rights and how to exercise them here: https://ico.org.uk/your-data-matters/

If you do wish to exercise any of your legal rights, please contact us.

You will not have to pay a fee to access your personal data (or to exercise any of your other rights). However, we may charge a reasonable admin fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We will try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

This privacy policy may change in line with legislation or industry developments. We will not explicitly inform our website users of these changes. Instead, we recommend that you check this page occasionally for changes.