GDPR Privacy Notice for Future Woodlands Scotland

April 2024

What information do we collect?

We collect personal information (e.g. name, address, email address and phone number) from a range of individuals such as Trustees, associates, general enquirers and grant applicants. We will collect data in the following ways:

• when you provide it to us directly
• when we collect it with your permission through our website
• from publicly available sources

Why we need your personal information

We collect this information to fulfil our legal obligations to administer the charity and help deliver specific activities connected to our charitable objectives (e.g. to award funding).

What we do with your personal information

We process your information in pursuit of our legitimate interests to:

• Provide information and updates.
• Raise awareness of the availability of grant funding.
• Respond to questions, comments, complaints, concerns or allegations.

Other uses of your personal information

We may ask you if we can process your personal information for other purposes. Where we do so, we will provide you with an additional privacy notice explaining how we will use your information for these purposes.

Who we share your personal information with

We share names of Trustees and successful grant applicants on the website but we do not use this for any other purpose. We may be required to share personal information with statutory or regulatory authorities to comply with statutory obligations. We may also share personal information with professional and legal advisors for the purpose of obtaining advice.

Third party suppliers

We may use third party suppliers to provide services. These suppliers may process personal data on our behalf as “processors” and are subject to contractual conditions to only process that personal information under our instructions and protect it.

If we share personal information with external third parties, we only share such information strictly required for the specific purposes and take reasonable steps to ensure recipients shall only process the disclosed personal information in accordance with those purposes.

How we protect your personal information

Personal information is accessed only for the purposes set out above and is password protected.

How long we keep your personal information

We only keep your personal information for as long as necessary. We set out our retention periods in our Retention and Destruction Policy which is reviewed regularly.

You have a right to:

• Change your communication preferences or restrict the processing of your personal data for specific purposes.
• Request that we correct your personal data if you believe it is inaccurate or incomplete.
• Request that we delete your personal information.
• Access the personal data that we hold about you through a “subject access request”.

You can contact us at [email protected]

If you are dissatisfied, you have a right to raise a complaint with the Information Commissioner’s Office at www.ico.org.uk