Privacy Policy

This Privacy Notice is for SCT members and members of the public, to help you to feel confident about the privacy and security of your personal information.

Updated on October 2026

DEFINITIONS

WHO ARE WE?

SCT is a limited company and a registered charity. SCT has two subsidiaries: Sleat Renewables Ltd and Sleat Community Trading Company Ltd. This Privacy Notice relates to SCT only; it does not cover the activities of the subsidiaries.

WHY DO WE HAVE A PRIVACY NOTICE?

We take the privacy and security of your personal information very seriously. SCT is registered with the Information Commissioner’s Office, a requirement of the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025 (DUAA 2025) and takes all reasonable care to prevent any unauthorised access to your personal information. We may hold and use data about you in your capacity as member of SCT, or as an individual acting on behalf of a member (with the relevant permissions), or in any other capacity, for example, when you visit our website. If you are visiting our website or using any of our services, we may use your personal information in accordance with the law and our policies, as set out in this privacy notice.

WHAT DOES THIS PRIVACY NOTICE COVER?

This privacy notice only applies to how SCT deals with your personal information. It does not apply to any other company or to any other company´s websites even if you access them through SCT. If you disclose your personal information to other companies your information will be dealt with according to their privacy practices.

WHY DO WE COLLECT PERSONAL INFORMATION?

We collect and process personal information to enable us to provide services to our members, to maintain our own accounts and records and to support and manage our employees.

WHAT PERSONAL INFORMATION DO WE COLLECT, AND HOW?

We may ask you for information to enable us to provide a service to you and we collect this information by telephone, written correspondence or via a website. We may ask you for information including your name, private/business address, contact telephone numbers and email address. We may also ask you for other information that relates to the service you are using. We may also have contact information about you if you have provided it to us so that we can respond to a query.

ARE WE PERMITTED TO KEEP YOUR DATA?

We collect and process personal data only where we have a lawful basis under UK GDPR, the Data Protection Act 2018 and DUAA 2025. Depending on the circumstances, this may include consent, performance of a contract, compliance with a legal obligation, protection of vital interests, performance of a task carried out in the public interest, or our legitimate interests. Where consent is relied upon, you may withdraw it at any time. Marketing communications will always include a clear option to opt out.

CHARITABLE PURPOSES SOFT OPT-IN

Where permitted by law, SCT may contact supporters by email, text message or other electronic means about our charitable purposes using the charitable purposes soft opt-in. Where we rely on the charitable purposes soft opt-in:

• We will only use personal data that has been collected directly by SCT through our own activities, services, events, fundraising activities or other interactions with supporters.
• We will not use the charitable purposes soft opt-in for personal data obtained from third parties, purchased marketing lists or other externally sourced marketing databases.
• The charitable purposes soft opt-in cannot be used to send direct electronic mail marketing to any person whose personal data was collected before 5 February 2026. As a result, SCT maintains separate records for individuals who provided marketing consent under previous rules and supporters whose details were collected on or after 5 February 2026 and who may be contacted under the charitable purposes soft opt-in.
• We will provide a clear and simple opportunity to opt out of marketing communications when contact details are first collected and in every marketing communication subsequently sent.
• We will not use the charitable purposes soft opt-in to send marketing communications that could reasonably be considered distressing, intrusive or sensitive, even where such communications relate directly to our charitable activities. This is particularly important where personal data has been obtained through support services, crisis intervention activities or other situations involving vulnerable individuals.
• We regularly review and update our privacy notice, data protection policies and data-use practices to ensure supporters are kept informed about how their personal data is collected, used and protected.

HOW LONG DO WE KEEP YOUR DATA?

The time period for which we keep information varies according to what the information is used for. In some cases, there are legal requirements to keep data for a minimum period. Unless there is a specific legal requirement for us to keep the information, we will retain it for no longer than is necessary for the purposes for which the data was collected or for which it is to be further processed.

DO WE SHARE YOUR PERSONAL INFORMATION WITH ANYONE ELSE?

We sometimes use other companies to provide services to you or to provide services to us. To enable them to do this, we may need to share your personal information with them. When we do so, these companies are required to act in accordance with the instructions we give them, and they must meet the requirements of the UK GDPR, the Data Protection Act 2018 and DUAA 2025 to keep the information secure.

We may also provide information, in response to properly made requests, for the purposes of the prevention and detection of crime, and the apprehension or prosecution of offenders. We may also provide information for the purpose of safeguarding national security. In either case we do so in accordance with relevant legislation. We will also provide information when required to do so by law, for example under a court order, or in response to properly made demands, under powers contained in legislation.

If there is a change (or prospective change) in the ownership of SCT or any of its assets, we may disclose personal information to the new (or prospective) owner. If we do so, we will require them to keep it confidential.
If you believe the personal information, we hold on you is incorrect you may amend it by following the procedure set out below in “How can I find out what information SCT holds about me?”

We may share personal information about our customers, staff and volunteers between all three entities to help us deliver services, manage our activities and meet our legal obligations.

HOW DO WE PROTECT YOUR DATA WHEN IT IS TRANSFERRED OUT OF EUROPE?

Countries in the European Economic Area (EEA) are required to have a similar standard of protection of personal data, but this is not always the case in countries outside of the EEA. We do not currently transfer data outside the EEA, but should we need to do so we will take steps to ensure that your data will be given adequate protection as required by the UK GDPR, the Data Protection Act 2018 and DUAA 2025.

HOW CAN I FIND OUT WHAT INFORMATION SCT HOLDS ABOUT ME?

Under UK data protection law you have rights which may include access, rectification, erasure, restriction of processing, data portability, objection to processing, and rights relating to automated decision-making. You also have the right to complain to the Information Commissioner’s Office (ICO).

At any time, an individual may (in writing) request access to the personal data we hold about them. This may be a request to view the data, or a request that we amend or delete the data. SCT will respond to all written requests within one month. Requests will be reviewed by the person responsible for data protection. We will inform the individual the lawful basis under which we hold their personal data. Access will be provided free of charge, except that we reserve the right to refuse, or charge a reasonable fee for, requests for information which are manifestly unfounded, excessive, repetitive, or are copies of information already provided to an individual. If we refuse a request, we will tell the individual why we have refused it and inform them that they have the right to complain to the supervisory authority.

If you would like to view, amend or request deletion of the information we hold about you, you can make a formal request to SCT. Please put your request in writing, clearly identifying yourself. The address is: Sleat Community Trust, Ardvasar, Sleat, Isle of Skye, IV45 8RS. We may have to ask you for further information, for example identification, before we fulfil your request. If a third party is requesting information on your behalf, we will have to be satisfied that they are entitled to do so.

HOW CAN I OPT OUT OF RECEIVING MARKETING INFORMATION?

If you have agreed to receive marketing communications from us, or if we contact you using the charitable purposes soft opt-in where permitted by law, you can opt out at any time.
We will provide a clear and simple method of opting out when we first collect your contact details and in every marketing communication we send. Every marketing email will include clear instructions on how to unsubscribe or manage your communication preferences. You can also contact us directly to update your marketing preferences at:
Sleat Community Trust
Ardvasar, Sleat, Isle of Skye, IV45 8RS
Email: office@sleat.org.uk

These additions fit the style and structure of your existing privacy notice while incorporating the charitable purposes soft opt-in requirements.

HOW DO WE PROTECT YOUR PERSONAL INFORMATION?

We are serious about guarding the security of your personal information and the details of any transactions made. We restrict access to your data to the minimum number of people necessary and provide them with training in how to keep it safe. We take appropriate organisational and technical security measures to protect your data against unauthorised disclosure or processing.

DOES THIS PRIVACY NOTICE PROTECT ME WHEN USING YOUR WEBSITE?

SCT´s privacy notice also applies to information collected when you use our website. You do not have to register to access most of our website. However, if you provide information via the “contact us” or any of the other interactive features, we may use the data you provide to contact you or to carry out actions based on what you have contacted us about, in accordance with the law and our policies, as set out in this privacy notice.

Third party internet sites that you can link to from our website are not covered by our privacy notice, so we urge you to be careful when you enter any personal information online. SCT accepts no responsibility or liability for these sites. Other companies which advertise or offer their products or services on our website may also allocate cookies to your PC. The types of cookies they use and how they use the information generated by them will be governed by their own privacy policies and not ours.

CHILDREN AND YOUNG PEOPLE

We sometimes need to hold information about you, like your name, address and age. We do this so that we can contact you, or so that we can run activities for you. We will take very good care of your information. Sometimes we will need to ask you before we can hold your information. If you are 13 or over you can choose for yourself. If you are under 13 we will ask your parent or guardian. If you want to know what information we hold about you, you can write to us at this address: Sleat Community Trust, Ardvasar, Sleat, Isle of Skye, IV45 8RS. You can also ask us to delete your information if you want to.

DATA PROTECTION COMPLAINTS

We have a formal, documented process for handling complaints about data use including electronic forms. This can be found in our Data Protection Complaints Procedure 08/2026 which is available on request.

CONTACT US

You can write to us at: Sleat Community Trust, Ardvasar, Sleat, Isle of Skye, IV45 8RS or email office@sleat.org.uk