Data Protection and Privacy Policy

At the Brown Forbes Memorial Fund, we are committed to protecting and respecting your privacy.

Please read this Privacy Notice, together with any other privacy notice that we may provide to you, as it contains important information about how we collect, manage, use and protect your personal data.

By accessing www.brownforbes.scot (the “website”) or otherwise providing information to us, you agree to our privacy practices as set out in this Privacy Notice.

We may change this Privacy Notice from time to time. Please check this policy frequently to ensure you are aware of the most recent version and the date that it was last updated. This policy was last updated in March 2019.

If you have any questions regarding this policy or about our privacy practices, please contact us at: info@brownforbes.scot or by writing to us at Brown Forbes Memorial Fund C/O Shepherd and Wedderburn LLP, 1 West Regent Street, Glasgow, G2 1RW.

Who are we?

When we say ‘Fund’, ‘we’ or ‘us’ in this policy, we are referring to the Brown Forbes Memorial Fund which is a registered charity in Scotland (Scottish Charity No. SC 029353) with its registered office at 1 West Regent Street, Glasgow, G2 1RW.

The Fund is a "data controller" of the personal data that you provide to us. This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice.

What information do we collect?

- Information you give us.
: Information that we may collect from you includes, but is not limited to your name, address, email address, phone numbers and bank details (if we are providing you with a contribution).
: You may give us such information directly by filling in forms on our website or by corresponding or speaking with us by phone, email, letter or otherwise. This includes information you provide when you access or otherwise use our website, submit a query, request a donation, provide us with feedback or when you report a problem with the website.

- Information we collect about you.
: When you visit our website and receive e-mails from us we may automatically collect the following technical information:
: Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
: Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call us.
: Information provided by cookies.
: Our website uses cookies to better the user's experience while visiting the website. Where applicable this website uses a cookie control system allowing you on your first visit to the website to allow or disallow the use of cookies on your computer/device. This complies with legislation requirements for websites to obtain explicit consent from users before leaving behind or reading files such as cookies on a user's computer/device.
: Cookies are small files saved to the user's hard drive that track, save and store information about the user's interactions and usage of the website. This allows our website, through its server, to provide users with a tailored experience.
: If you wish to prevent the use and saving of cookies from this website on to your computer's hard drive you should take necessary steps within web browser's security settings to block all cookies from our website.
: Our website uses tracking software to monitor its visitors to better understand how you use it. This software is provided by Google Analytics which uses cookies to track visitor usage. The software will save a cookie to the user's hard drive in order to track and monitor engagement and usage of the Website, but will not store, save or collect personal information. You can read Google's privacy policy here for further information or opt out if you wish (here).
: Other cookies may be stored on your hard drive by external vendors when our website uses referral programs, sponsored links or adverts. Such cookies are used for conversion and referral tracking and typically expire after 30 days, though some may take longer.
: If you would like further information about cookies and how they are used, you can visit www.allaboutcookies.org.

-Information we receive about you from other sources.
: We also work with third parties (including, for example, business partners, sub-contractors in technical services, analytics providers, search information providers) and may receive information about you from them.
: We may receive information if you have provided permission to other organisations to share it with us. Before providing permission to such third party organisations to share your personal data, you should check their privacy notices carefully.

How we might use your information?

We use information held about you in the following ways:
- Information you give to us. We will use this information:
: To manage and administer our relationship with you and provide you with any contributions
: To carry out our obligations arising from any contracts entered into between you and us and to provide you with the information and services that you request from us : To provide you with information about our activities
: To ensure that content from our website is presented in the most effective manner for you and for your computer
: For the purposes of the establishment, exercise or defence of legal claims.

- Information we collect about you. We will use this information:
: To administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes
: To provide and improve our site to ensure that content is presented in the most effective manner for you and for your computer

- Information we receive from other sources.
We may combine this information with information you give to us and information we collect about you. We may us this information and the combined information for the purposes set out above (depending on the types of information we receive).

Our Marketing

We may, with your consent, text or e-mail you to provide you with information about our activities or provide you with our e-mail newsletter. You can un-subscribe at any time through an automated system. This process is detailed at the footer of each email. If an automated un-subscription system is unavailable clear instructions on how to un-subscribe will be detailed instead.

We may occasionally, with your consent, call you to provide you with information about our activities or provide you with information about services supplied by us. You may unsubscribe to calls by instructing the person calling you or by contacting us at any time on the details set out in the ‘Contact Us’ section of this notice. We may also communicate with your through postal marketing when it is in our legitimate interests to do this and when these interests do not override your rights. Those legitimate interests include providing you with information on our appeals, services, feedback, and other activities and those of other carefully selected organisations. You have the right to contact us at any time and opt-out of receiving postal communications.

What is our legal basis for using your information?

There are a number of lawful reasons for us to process your personal data.

One of these is called ‘legitimate interest’ and means that we can process your personal data if (i) we have a genuine and legitimate reason; and (ii) are not harming any of your rights and interests.

Our goal is to support the beautification and restoration of the countryside and coastline of Scotland by funding projects and conservation work carried out by registered charities to improve access to Scotland’s coast and countryside.

We will use your personal data in order to help us achieve those goals in relation to any communication with you or application that you submit to us. Whenever we process your personal data for our legitimate interests, we will consider and balance any potential impact on you and your rights under data protection law.

We may also process your personal data when we enter into any contracts with you or where we are required to comply with our legal obligations, or to establish and defend our legal rights, or to prevent and detect crimes such as fraud.

How long will we hold your information for?

We will hold your personal data on our systems for as long as is necessary for the relevant activity.

Therefore, some information may be kept for more or less time depending on how long we reasonably feel it is required for.

We review our retention periods for personal data on a regular basis.

We want to keep in touch with anyone who has shown an interest in the Fund and our work but will delete personal data after seven years if we have not heard further from you as we are very mindful of trying to only send you what you are interested in and only as often as is appropriate.

If you ask us to delete your information in accordance with your rights set out below, we will retain basic information on a suppression list to record your request and to avoid sending you unwanted materials in the future.

Who we might share your information with

We will NOT sell your personal data to any third parties.

We may share your information with selected third parties including:
- Our trustees and volunteers for the purposes of operating the Fund.
- When we use other companies to provide services on our behalf, for example, when using auditors or other professional advisors.
- Business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you.
- IT service providers and analytics and search engine providers that assist us in the improvement and optimisation of our site.
- If we run an event in partnership with other named organisations your details may need to be shared. We will be very clear what will happen to your data when you register.

We may disclose your personal information to third parties to:
- Comply with any court order or other legal obligation or when data is requested by our regulators or by government agencies or law enforcement agencies; - Enforce or apply our terms of use and any other agreements;
- Protect the rights, property, or safety of us, our trustees and volunteers, or others. This may include exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

International transfers of personal data

From time to time, we may transfer your personal information outside of the EU to service providers and sub-contractors. If we do this, your personal information will continue to be subject to one or more appropriate safeguards set out in the law. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Your rights

You have a number of rights that may be exercised in certain circumstances. If you would like to exercise any of these rights, please contact us using the details set out below in the ‘Contact Us’ section. If you exercise any of these rights we may ask for proof of identity and sufficient information about your interactions with us so that we can locate your personal information. If we agree that we are obliged to provide personal information to you (or someone else on your behalf), we will provide it to you or them free of charge except in exceptional circumstances.

You also have the right to lodge a complaint with the data protection regulator, the Information Commissioner’s Office, if you have concerns about how we use your personal information. You can contact the Information Commissioner’s Office at: ico.org.uk.

Your rights include:
- transparency over how we use you data and to make a subject access request for the personal data we hold about you (right of access);
- a right to have your personal data updated and corrected (right of correction/rectification) ;
- a right to ask us to delete your information (right to be forgotten);
- a right to ask us to stop processing your information (right to restriction);
- a right to object to (i) processing based on our legitimate interests; (ii) processing of your information for direct marketing purposes; and (iii) automated decision making and profiling (right to object);
- a right to receive a copy of your information, or have this sent to a third party (right to data portability); and
- a right to claim compensation for material or non-material damage caused if we breach the data protection rules (right to compensation).

If you would like to find out more about your rights, you can visit the Information Commissioner’s Office website.

How you can access and update your information

We strive to maintain accurate, complete, and relevant personal information for the purposes identified in this privacy statement. If any of the personal information we hold about you is inaccurate or out of date, you may ask us to correct it. It is important that the personal information we hold about you is accurate and current. Security precautions in place to protect against the loss, misuse or alteration of your information

We have implemented reasonable measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration and disclosure. Details of these measures can be obtained on request.

Third parties will only process your personal information on our instructions and where they have agreed to treat the information confidentially and to keep it secure. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Our security measures are regularly reviewed.

Contact Us

If you have any questions regarding this policy or about our privacy practices, wish to exercise any of your rights or wish to make a complaint, please contact us at:

Brown Forbes Memorial Fund
C/O Shepherd and Wedderburn LLP
1 West Regent Street,
Glasgow
G2 1RW

E-mail: info@brownforbes.scot