North Berwick West Sands Coastal Erosion Charity (“we”, “us”, “our”) is a charity registered in Scotland (Scottish Charity Number: SC054971). We are committed to protecting your privacy and handling your personal data responsibly, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your data, you can contact us at:

• Email: info@northberwickwestsands.com
• Post: New Club House, Beach Road, North Berwick, East Lothian, EH39 4BB

Depending on how you use our website, we may collect:

• Contact details you provide, such as your name and email address, if you get in touch with us, sign up for updates, or volunteer.
• Donation information, if you make a donation, which may include your name, contact details, and payment information (payment card details are processed securely by our payment provider and are never stored by us directly).
• Technical information, such as your IP address, browser type, and pages visited, collected automatically through cookies and similar technologies (see Section 5). We do not knowingly collect sensitive personal data (such as health information) unless you choose to share it with us, for example as part of a message or enquiry.

We use your personal data to:

• Respond to enquiries and correspondence
• Send updates about our work, campaigns, or events, where you have agreed to receive them
• Process donations and issue receipts or Gift Aid claims where applicable
• Understand how our website is used, so we can improve it
• Meet our legal and regulatory obligations as a Scottish charity

Our legal basis for processing this data is typically your consent, our legitimate interests in running the charity, or a legal obligation (for example, financial record-keeping).

We do not sell your personal data. We may share limited information with trusted third parties who help us operate, such as:

• Payment processors (for donations)
• Email or newsletter providers
• Website hosting and analytics providers These third parties are only permitted to use your data to provide services to us and must handle it securely. We will only share data with other organisations or authorities where required by law.

Our website may use cookies to help it function properly and to understand how visitors use the site. You can control or disable cookies through your browser settings. Disabling cookies may affect how the website performs.

We keep personal data only for as long as necessary for the purposes described above, or as required by law (for example, financial records connected to donations, which are typically retained for at least six years).

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data, in certain circumstances
• Object to or restrict how we use your data
• Withdraw consent at any time, where we rely on consent (e.g. for marketing emails) To exercise any of these rights, please contact us using the details in Section 1.

We take reasonable steps to protect your personal data against unauthorised access, loss, or misuse.

If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve the issue. You also have the right to complain to the UK’s data protection regulator:

Information Commissioner’s Office (ICO)

• Website: https://ico.org.uk
• Telephone: 0303 123 1113

As a Scottish charity, we are also accountable to the Office of the Scottish Charity Regulator (OSCR): https://www.oscr.org.uk

We may update this policy from time to time. Any changes will be posted on this page with an updated revision date.