Skip to main content

Privacy Policy

How we collect, use, and protect your personal data.

Last updated: February 2026

Who We Are

Pancreatitis Scotland is a Scottish Charitable Incorporated Organisation (SCIO) dedicated to raising awareness of pancreatitis across Scotland.

Pancreatitis Scotland is the data controller for the personal data collected through this website.

What Data We Collect

We collect personal data only when you voluntarily provide it. This includes:

  • Contact form submissions: your name, email address, and message
  • Volunteering enquiries: your name, email address, and areas of interest
  • Email correspondence: any information you share when you email us directly

Why We Collect It

We use your personal data to:

  • Respond to your enquiry or message
  • Follow up on volunteering interest
  • Provide information you have requested about pancreatitis or our charity

Legal Basis

We process your data under legitimate interest (to respond to your enquiries and operate our charity) and, where applicable, consent (where you have opted in to hear from us). You can withdraw consent at any time by contacting us.

How We Store Your Data

Contact form submissions are processed by Netlify and stored securely on their servers. We do not store your data in any other database. We retain your data only for as long as necessary to respond to your enquiry, and no longer than 12 months unless you have an ongoing relationship with us.

We do not sell, rent, or share your personal data with any third parties for marketing purposes.

Third-Party Services

Our website uses the following third-party services:

  • Google Fonts: to serve web fonts. Google may collect your IP address. See Google's Privacy Policy.
  • Netlify: our website host and form handler. See Netlify's Privacy Policy.
  • JustGiving: for processing donations. JustGiving has its own privacy policy governing donations.

International Data Transfers

Some of our third-party services may process data outside the UK. Google Fonts is served from Google's global infrastructure, which may involve your IP address being transferred to servers in the United States. Netlify may also process data on servers outside the UK. These providers operate under appropriate safeguards, including UK adequacy decisions and standard contractual clauses, to ensure your data is protected in accordance with UK GDPR.

Automated Decision-Making

We do not use any automated decision-making or profiling based on your personal data.

Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate personal data
  • Erase your personal data (the "right to be forgotten")
  • Restrict processing of your personal data
  • Object to processing of your personal data
  • Data portability — receive your data in a portable format

To exercise any of these rights, email us at info@pancreatitis-scotland.org.uk. We will respond within 30 days.

Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date.