Privacy Policy
Creative Stranraer understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of everyone who visits our website, creativestranraer.com. Our data collection and usage practices are outlined here.
Data Protection Officer’s Contact Information
Postal Address:
FAO: Robbie Henderson, Data Protection Officer
The Stove Network
100 High Street
Dumfries DG1 2BJ
Telephone: 01387 252435
Email: rob<at>thestove.org
Who Are We?
Creative Stranraer is a charity based in the south west of Scotland, focusing on supporting innovation and change in the historic town of Stranraer and the surrounding areas. It uses art and creativity both to engage with the community and to drive change. Creative Stranraer works in partnership with local and regional organisations to develop new opportunities and projects, encouraging communities to participate in culture and enterprise to support a new vision for the town. We registered as a SCIO (Scottish Charitable Incorporated Organisation): SC052935 on 8 November 2023.
Who’s in Control?
It is important that you understand who is responsible for keeping your personal data safe. We are the Data Controller of all the personal data collected on this website for the purposes set out in this privacy policy. This means that we are responsible for deciding how your personal data is used and ensuring that it is handled in accordance with the law.
We have appointed a Data Protection Officer (DPO) who is solely responsible for ensuring that your personal data is treated in accordance with this privacy policy and the law. Our Data Protection Officer (DPO) is Robbie Henderson, who can be contacted by emailing rob[at]thestove.org.
Full contact information for our Data Protection Officer (DPO) can be found in the Contact Information Section.
What Data Do We Collect and from Where?
We collect data from you when you visit our website, utilise the contact form, subscribe to our newsletter, sign up for a Creative Stranraer membership, or through web analytics tools embedded within the website:
- Full Name;
- Email Address;
- Page Views;
- Device Information e.g. desktop, tablet, and mobile;
- Visit Duration;
- Traffic Information e.g. referral address.
Third Party Software
Our website’s content management system is WordPress, which complies with the UK General Data Protection Regulation (UK GDPR). Similarly, our contact form, membership sign-up form, and newsletter subscriptions processed by MailChimp also adhere to the UK GDPR. Additionally, we collect website usage data using Google Analytics. The website uses a cookie for Google Analytics, which only logs the user’s IP address—automatically recognised by the web server—to record visitor numbers, usage volumes, visit duration, device information, etc. If you prefer not to accept cookies on your device, you can disable them by adjusting your browser settings. However, this may affect the functionality of our website.
What Do We Use Your Data For?
We aim to be transparent in processing your personal data. It is important for you to understand the methods and reasons behind the use of the personal data we collect. This section outlines the various purposes for which we process your personal data and the information required for each.
Managing Your Membership
We use the personal data you supplied during the membership sign-up process to inform you about our business, Annual General Meetings (AGMs), and various opportunities available to members, such as commissions, or roles as artists or contractors on Creative Stranraer projects.
Marketing
We use the personal data provided during the newsletter subscription process to send you occasional updates on our activities and news regarding Creative Stranraer. Please be aware that you may opt out of direct marketing at any time by clicking the unsubscribe link at the bottom of our emails. Alternatively, you may contact our Data Protection Officer to process your opt-out request.
Tailoring Content to Our Audience
We use the personal data provided by Google Analytics to gauge interest in our events, projects, and workshops. This information helps determine the long-term viability of these initiatives and informs our future funding decisions.
What Is Our Legal Basis for Using Your Data?
We must inform you of the legal basis we rely on for processing your personal data, as outlined in this document. This section details the specific legal grounds for the purposes described above.
Purpose: Enhancing Membership Management
Legitimate Interests: To ensure that our members receive comprehensive business information, benefits, and opportunities. Creative Stranraer is dedicated to the development, funding, and sustainability of the arts and culture within Dumfries & Galloway. This commitment is in direct alignment with the interests of our members.
Purpose: Improving Our Content
Legitimate interests: To make sure that we continue to provide the best and most relevant content to our website users.
How Long Do We Keep Your Data?
Membership data: As members may have a long-standing relationship with their organisation, we will retain current member data indefinitely. We will delete all information relating to former members one year following their departure unless there has been a safeguarding or criminal concern, in which case the information will be kept for five years.
Website usage data: We retain website usage data collected by Google Analytics for 26 months.
What Rights Do You Have?
You have the right to request that we send a copy of the personal data we hold about you. A request to exercise this right is known as a subject access request. This can be done by contacting our Data Protection Officer (DPO) using the provided contact information. Requests can be made either verbally or in writing.
The Right to Access Your Personal Data
We have one month to respond to your request. Should the request be complex, we may extend this period by an additional two months. We will inform you within one month of receiving your request if an extension is necessary and provide an explanation. A copy of your personal data will be provided without charge. However, should a request be unfounded, excessive, or particularly repetitive, we may impose a nominal fee based on the administrative costs involved. You will be promptly informed if any fee is applicable. Identification may be required to process the subject access request. You are entitled to request the correction of any inaccurate data we hold about you. This can be done by contacting our Data Protection Officer (DPO) using the provided contact information. Requests can be made either verbally or in writing.
The Right to Correct Your Personal Data
We have one month to respond to your request. Should the request be complex, we may extend this period by an additional two months. We will inform you within one month of receiving your request if an extension is necessary and provide an explanation. Your data will be corrected without charge. However, should a request be unfounded or excessive, a nominal fee may be imposed, reflecting the administrative costs of amending your personal data. You will be promptly informed if any fee is applicable. In certain circumstances, such as if your data has been processed unlawfully, you have the right to request the deletion of your personal data. This can be done by contacting our Data Protection Officer using the provided contact information. Requests can be made either verbally or in writing.
The Right to Delete Your Personal Data
We have one month to respond to your request. Should the request be complex, we may extend this period by an additional two months. We will inform you within one month of receiving your request if an extension is necessary and provide an explanation. Your data will be erased without charge. However, should a request be unfounded or excessive, a nominal fee may be imposed, reflecting the administrative costs of erasing your personal data. You will be promptly informed if any fee is applicable. In certain circumstances, such as when the personal data is believed to be inaccurate and requires verification, or when the data is no longer needed but retention is requested for the exercise of legal rights, you have the right to request a restriction on the processing of your personal data.
The Right to Request We Limit Our Use and Processing of Your Personal Data
When you request that we restrict the use of your personal data, we are permitted to store it but not use it. This is unless you give your consent, or we need to process the data to exercise a legal claim. You have the right to object to any processing of your personal data where we rely on legitimate interests as the legal basis. This includes all personal data processed for the purposes outlined in this Privacy Policy. To object, please contact our Data Protection Officer using the provided contact information. Objections must be made either verbally or in writing.
The Right to Object Processing Your Personal Data
You have the right to request that we cease sending you direct marketing, such as newsletters. To opt out of email marketing, click the unsubscribe option in any of our email correspondence. Alternatively, you may contact our Data Protection Officer, who will remove you from our email marketing list. Your objection will be processed without charge. However, should an objection be unfounded or excessive, a nominal fee may be imposed, reflecting the administrative costs of the request. You will be promptly informed if any fee is applicable. We have one month to respond to your request. Should the request be complex, we may extend this period by an additional two months. We will inform you within one month of receiving your request if an extension is necessary and provide an explanation. Identification may be required to process the objection request.
What to do if you are under 13 years old?
If you are under 13 years old, you will be required to seek the consent of your parent/guardian before providing any personal data to Creative Stranraer, as without their consent you are not permitted to provide us with your personal data. We may ask for your parent/guardian contact details to seek their consent to process your personal data. This will be done verbally or in writing.
Complaints
If you have any concerns about our use of your personal data, please contact us using the provided details, and we will endeavor to resolve the issue. Should we be unable to assist, you have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office (ICO).