Privacy Policy

Privacy Policy

Perthshire Open Studios CIC

Last updated: [insert date]

Perthshire Open Studios CIC (“we”, “us”, “our”) is committed to protecting your privacy and ensuring that your personal data is handled in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us, subscribe to our communications, or participate in our activities.

1. Who We Are

Perthshire Open Studios CIC is a Community Interest Company registered in Scotland.

Company number: SC498236
Data Controller: Perthshire Open Studios CIC
Email: [insert contact email]
Postal address: [insert address, if you publish one]

If you have any questions about this Privacy Policy or how your data is used, please contact us using the details above.

2. What Personal Data We Collect

We may collect and process the following personal data:

a) Information you provide to us

  • Name
  • Email address
  • Postal address
  • Telephone number
  • Any information you include when contacting us by email or contact form

b) Artist information

If you are a participating artist, we may collect and use:

  • Name and artist biography
  • Images of artwork
  • Website and social media links
  • Studio location (where relevant to the event)
  • Contact details
  • Payment and invoicing information

Artist profiles are displayed publicly on our website and may also appear in printed materials such as our brochure, with your knowledge and participation.

c) Payments

When you make a payment (for example, artist fees or event participation), payments are processed securely by Stripe. We do not store your full payment card details.

d) Website usage data

We may automatically collect limited technical information, including:

  • IP address
  • Browser type
  • Pages visited and interactions with the site

This data helps us understand how our website is used and improve its performance.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

  • Responding to enquiries and communications
  • Managing artist participation and events
  • Displaying artist information publicly as part of our activities
  • Processing payments and keeping financial records
  • Sending newsletters and updates (where you have opted in)
  • Sending transactional or administrative emails
  • Improving our website and services
  • Meeting legal, regulatory, and accounting obligations

We will not sell your personal data or use it for unrelated marketing purposes.

4. Lawful Bases for Processing

We process personal data under the following lawful bases:

  • Consent – for example, when you sign up to receive newsletters
  • Contract – where processing is necessary to manage artist participation or events
  • Legal obligation – for accounting, tax, or regulatory requirements
  • Legitimate interests – where necessary to operate and promote Perthshire Open Studios CIC, provided your rights and freedoms are not overridden

5. Email Communications

We use trusted third-party providers to manage our email communications:

  • Mailchimp – for newsletters and mailing lists
  • Brevo – for transactional and administrative emails

You can unsubscribe from marketing emails at any time by using the link provided in the email or by contacting us directly.

6. Payments

Online payments are processed securely by Stripe. Stripe acts as an independent data controller for payment data and processes personal data in accordance with its own privacy policy.

We only receive the information necessary to confirm payment and manage our records.

7. Sharing Your Data

We only share personal data where necessary, including with:

  • Website hosting providers
  • Mailchimp (newsletter distribution)
  • Brevo (transactional emails)
  • Stripe (payment processing)
  • Professional advisers such as accountants

All third-party service providers are required to handle personal data securely and in compliance with UK GDPR.

We do not transfer personal data outside the UK unless appropriate safeguards are in place.

8. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected, including:

  • The duration of your involvement with Perthshire Open Studios
  • Any legally required retention periods (for example, financial records)

When data is no longer required, it is securely deleted or anonymised.

9. Your Data Protection Rights

Under UK data protection law, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your personal data
  • Restrict or object to processing in certain circumstances
  • Withdraw consent at any time
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact us at [insert contact email].

10. Cookies

Our website uses cookies and similar technologies to ensure it functions properly and to understand how visitors use the site.

We will provide full details in a separate Cookie Policy.

11. External Links

Our website may include links to external websites. We are not responsible for the content or privacy practices of those websites.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and the “last updated” date will be revised accordingly.