© The Black Watch Castle and Museum
The Black Watch Regimental Trust is a charitable company registered in Scotland | Charity No: SC005848
Privacy
This page provides details of The Black Watch Regimental Trust’s privacy notice in relation to information collected from you.
- What is this all about?
- Who is handling my data?
- How can I contact the BWRT?
- What is the BWRT’s legal basis for processing data?
- What information do we collect?
- What about sensitive personal data?
- How do we use this information?
- Who do we share and disclose information with?
- What marketing do we do?
- How do we build profiles?
- How do we protect young people?
- How do we protect your data?
- Where do we store your data and for how long?
- What are your rights?
- How do I make a complaint?
- What about cookies and links to other websites?
- Who reviews this document and when?
1. What is this all about?
We are required to provide you with this information under the General Data Protection Regulation (GDPR). This policy explains how we handle your personal data (i.e. any information which identifies you, or which can be identified as relating to you personally) and what you can do if you have any concerns.
2. Who is handling my data?
For the purposes of data protection law, the ‘BWRT’ will be used to refer to the following jointly, as the Joint Data Controllers:
- The Black Watch Association
- The Black Watch Shop Limited
3. How can I contact the BWRT?
Write: The Black Watch Regimental Trust, Balhousie Castle, Hay Street, Perth, PH1 5HR
Ring: 01738 638152
4. What is the BWRT’s legal basis for processing data?
When GDPR came into force on 25th May 2018 the rules on processing personal data switched from the Data Protection Act 1998 to the following provisions of the GDPR:
- The processing is necessary for the performance of a contract. Examples of when this applies include: membership, when you purchase something from our online shop or purchase an event ticket we are required to process your personal data to send you these items.
- It is in the legitimate interest of the data controller (the BWRT). You can tell us you would like to opt out at any time. We may need to process personal data for our legitimate interests (such as the management and administration of our charity and the improvement of our services) and that doing so will not interfere with your privacy rights. We use people’s data in ways they would reasonably expect and which have minimal privacy impact. Safeguards have been put in place to ensure we achieve the correct balance between our interests and yours. Examples of when this applies include: when you support us through donations.
- In line with the existing Privacy and Electronic Communications Regulations 2003 we will continue to seek your consent to electronic marketing. Examples of when this applies include: our e-newsletter and our online surveys.
5. What information do we collect?
We collect data you provide to us. This includes information you give when joining or registering, placing an order, or communicating with us. For example:
- personal details (name, address, date of birth, email, telephone etc.) when you join as a member or supporter.
- financial information (payment information such as credit/debit card or Direct Debit details, and your Gift-Aid instruction).
- details of your interests and preferences.
If you are a member of The Black Watch Association (BWA), or a spouse or dependant of a member, your details will be recorded and your relationship to that person will be recorded.
- Your activities and involvement with the BWA and, through it, BWRT will result in personal data being created. This could include details of how you’ve helped us by volunteering or being involved with its campaigns and activities.
- If you decide to donate to us then we will keep records of when and how much you give.
- We conduct research and analysis on the information we hold, which can in turn generate personal data. For example, by analysing your interests and involvement with our work we may be able to build a profile, which helps us decide which of our communications are likely to interest you. Section 10 (How do we build profiles?) contains more information about how we use information for profiling.
- As explained in Section 16 (What about cookies and links or other websites?), we may use third parties to help us conduct research and analysis on personal data (and this can result in new personal data being created).
- We may collect information from social media where you have given us permission to do so, or if you post on one of our social media pages.
- Occasionally, we may collect information about certain supporters (e.g. particularly well known or influential people) from public sources. This could include public databases (such as Companies House), news or other media. We don’t do this to everyone, and it is the exception not the rule.
Balhousie Castle has CCTV and you may be recorded when you visit. CCTV is there to help provide security and to protect both you and the BWRT.
6. What about sensitive personal data?
We do not normally collect or store sensitive personal data (such as information relating to health, beliefs or political affiliation) about members and supporter. However, there are some situations where this may occur (e.g. if you have an accident at one of our events). If this does occur, we’ll take extra care to ensure your privacy rights are protected.
- If an accident or incident occurs on our property, at one of our events, or involving one of our staff (including volunteers) then we’ll keep a record of this (which may include personal data and sensitive personal data[1]).
- If you are a volunteer (whether for specifically BWRT, or if you are helping us for other reasons – for example you work for another organisation which is running an event with us) then we may collect extra information about you (e.g. references, criminal records checks, details of emergency contacts, medical conditions, etc.). This information will be retained for legal reasons, to protect us (including in the event of an insurance or legal claim) and for safeguarding purposes.
7. How do we use this information?
We use information:
- that you have given to us (e.g. your name, address, interests, event bookings, donations, shop purchases, complaints, bank account details, Gift Aid statement) on paper or electronic format).
- provided via cookies on our website as explained in Section 16 (What about cookies and links to other websites?).
- we have collected from third parties as explained in Section 10 (How do we build profiles?).
In order to:
- enter into, or perform, a contract with you (e.g. BWA activities, BWRT online shop sales and BWRT event tickets,).
- comply with a legal duty (e.g. financial information).
- protect your vital interests.
- for our own (or a third party’s) lawful interests, provided your rights don’t override these.
We use personal data primarily to allow us to:
- perform our contract with you.*
- to enable us to comply with legal obligations.**
- pursue legitimate interests of our own or those of third parties***, provided your interests and fundamental rights do not override those interests.
- to provide you with information you have consented to.****
The situations in which we will process your personal information are listed below. We have indicated by asterisks the purpose or purposes for which we will process your personal information, as well as indicating which categories of data are involved.
- Setting up new BWA*
- Communicating on membership matters.*
- Sending you invitations to events by post.*
- Sending you invitations to events by email.****
- Collating names of people attending events.***
- Processing your entry forms for competition events.*
- Sending thank you letters by post.****
- Sending you newsletters by email.****
- Responding to queries emailed to our website.****
- Recording Gift Aid declarations.**
- Recording your interests in volunteering at the BWRT.****
- Sending you appeal information by post.***
- Sending you appeal information by email.****
- Processing your donations.*
- Sending information about raffles by post.***
- Sending you information about raffles by email.****
- Processing your raffle ticket purchases.*
- Complying with health and safety obligations.**
- To conduct data analytics studies to review and better understand membership retention and attrition rates.***
- Sending you information about leaving a legacy by post.***
- Recording and processing donations (e.g. Direct Debits or Gift-Aid instructions).***
- Performing our obligations to the BWA membership.*
- Fulfilling orders for goods or services (whether placed online, over the phone or in person).*
- Recording your choices and preferences (e.g. if you ask not to receive marketing material, we’ll keep a record of this).****
Some of the above grounds for processing will overlap and there may be several grounds which justify our use of your personal information.
We carry out research and analysis on our members donors and volunteers, to determine the success of campaigns and appeals, better understand behaviour and responses, and identify patterns and trends. This helps inform our approach and makes the BWA, and therefore BWRT, a more effective organisation. Understanding our supporters, their interests and what they care about also helps us provide a better experience (e.g. through more relevant communications).
We evaluate, categorise and profile personal data in order to tailor materials, services and communications (including targeted advertising) and prevent unwanted material from filling up your inbox. This also helps us understand our supporters, improve our organisation and carry out research. Further information on profiling can be found in Section 10 (How do we build profiles?).
8. Who do we share and disclose information with?
We may share personal data with subcontractors or suppliers who provide us with services. For example, your name and address will be shared with the delivery company in relation to:
- BWRT shop orders.
- BWRT ‘The Red Hackle’ magazine mailing house.
However, these activities will be carried out under a contract which imposes strict requirements on our supplier to keep your information confidential and secure.
9. What marketing do we do?
Our marketing includes news and information. Examples include:
- our charity.
- our role in educating the public about The Black Watch (Royal Highland Regiment).
- BWRT benefits and offers.
- volunteering opportunities.
- appeals and fundraising (including donations and also competitions, raffles, etc.).
- our events, activities and BWA Branches.
- products, services and offers (our own, and those of third parties which may interest you).
- leaving a legacy.
- taking part in projects (e.g. The Black Watch Register of Memorials).
When you receive a communication, we may collect information about how you respond to or interact with that communication, and this may affect how we communicate with you in future.
The following are normally sent out by post but may also be provided electronically to those that have consented to receive electronic versions. Examples include:
- ’The Red Hackle’ magazine
- Updates about our events such as: Regimental Reunions and Aberfeldy Musters, dinners, workshops and other museum activities.
- Fundraising activity such as: appeals, raffles and legacy mailings.
- BWRT shop offers and new products.
As a charity, we rely on donations and support from others to continue our work. From time to time, we will contact BWA members and supporters with fundraising material and communications. This might be about an appeal, a competition we’re running, or to suggest ways you can raise funds (e.g. a sponsored event or activity, or even buying a product if the BWRT will receive some of the proceeds).
You can decide not to receive communications or change how we contact you at any time. You can either exclude yourself from all marketing or specify removal from any combination of the following BWRT marketing activity:
- BWA members’ news (for instance notification of a member’s death).
- BWA events.
- Museum activities.
- Museum Events open to the public.
If you wish to do so, please contact us by:
- Emailing: enquiries@theblackwatch.co.uk
- Writing to: The Black Watch Regimental Trust, Balhousie Castle, Hay Street, Perth, PH1 5HR
- Telephoning: 01738 638152
10. How do we build profiles?
This section explains how and why we use personal data to build profiles which enable us to understand our BWA members and our supporters, improve our relationship with them, and provide a better membership and supporter experience.
- We analyse our members and supporters to determine common characteristics and preferences. We do this by assessing various types of information including behaviour (e.g. previous responses) or demographic information (e.g. age or location).
- By grouping people together on the basis of common characteristics, we can ensure that group is provided with communications, products, and information which is most important to them. This helps prevent your inbox from filling up, and also means we aren’t wasting resources on contacting people with information which isn’t relevant to them.
- We profile supporters in terms of financial and practical support. For example, we keep track of the amount, frequency and value of each person’s support. This information helps us to ensure communications are relevant and timely.
- If, based on information that has been provided to us (such as geographical location, demographics, or previous donations), it appears an individual might be willing and able to provide more support we may contact them to see if they wish to do so.
On occasion, we may also combine information about particular members and supporters with external information (such as directorships listed on Companies House, or news about an individual which has featured in the media) in order to create a more detailed profile about a particular individual. We collect information on preferences and interests so that we know what material you are most likely to be interested in.
You may opt out of this profiling at any time by contacting the Data Compliance Manager at:
- The Black Watch Regimental Trust, Balhousie Castle, Hay Street, Perth, PH1 5HR
- Telephone: 01738 638152
- Email: enquiries@theblackwatch.co.uk
11. How do we protect young people?
We take great care to protect and respect the rights of individuals in relation to their personal data, especially in the case of children. If your child is under 13 we will require consent from a parent or guardian to process his or her personal data. This means that:
- If your child wants to have his or her name or picture featured in one of our publications, we’ll need you to confirm you’re happy for us to do so.
- We’ll need permission from you as their parent or guardian for them to enter one of our competitions or to share a picture, photo or story with us.
- If we publish your child’s picture, photo or story, we’ll usually include their first name and age with it. We’ll need you to confirm you’re happy for us to do so.
- If they write an article or story for us, we might also include their surname alongside it. We’ll need you to confirm you’re happy for us to do so.
12. How do we protect your data?
We employ a variety of physical and technical measures to keep your data safe and to prevent unauthorised access to, use or disclosure of your personal information.
- Electronic data and databases are stored on secure computer systems and we control who has access to information (using both physical and electronic means). Our staff receive data protection training and we have a set of detailed data protection procedures which personnel are required to follow when handling personal data.
- If you use a credit card to donate, purchase a membership or purchase something online we will pass your credit card details securely to our payment provider. Other payment methods (e.g. Apple Pay) are handled in a similar manner. The BWRT complies with the payment card industry data security standard (PCI-DSS) published by the PCI Security Standards Council.
- CCTV will only be viewed when necessary (e.g. to detect or prevent crime). The BWRT complies with the Information Commissioner’s Office CCTV Code of Practice, and we put up notices so you know where CCTV is in use.
13. Where do we store your data and for how long?
The BWRT’s operations are based in the UK and we store our data within the UK. Some organisations which provide services to us may transfer personal data outside of the EEA, but we’ll only allow them to do so if your data is adequately protected. We check they are registered with Privacy Shield. Examples include:
- Our email distribution provider Mail Chimp.
- Our members survey provider Survey Monkey.
- Sometimes we store details on Google Drive.
- Occasionally we transfer details by Dropbox.
- Our online shop provider.
We will only use and store information for so long as it is required for the purposes it was collected for. How long information will be stored for depends on the information in question and what it is being used for. Examples include:
- Our BWA members’ information is maintained until the member dies.
- Major donor information is archived after 10 years of inactivity.
- Other supporter information is archived after 5 years of inactivity.
- Shop purchase information is archived 7 years after last purchase.
These are reviewed on a rolling annual basis by the Data Compliance Manager.
14. What are your rights?
We want to ensure you remain in control of your personal data. Part of this is making sure you understand your legal rights, which are as follows:
- the right to be informed about how we use your personal data.
- the right to access your personal data.
- the right to obtain a copy of the personal information we hold (this is known as subject access request).
- the right to have your data erased (though this will not apply where it is necessary for us to continue to use the data for a lawful reason).
- the right to have inaccurate data rectified.
- the right to restrict the processing of your personal data.
- the right to object to your data being used for marketing and or profiling.
- where technically feasible, you have the right to the data portability of the personal data you have provided to us which we processed.
To exercise these rights please contact the Data Compliance Manager:
- Write to: The Black Watch Regimental Trust, Balhousie Castle, Hay Street, Perth, PH1 5HR
- Telephone: 01738 638152
- Email: enquiries@theblackwatch.co.uk
15. How do I make a complaint?
If you are considering making a complaint about how your personal data has been handled by The Black Watch Regimental Trust you can access our Data Protection Complaints Policy on our website.
Additionally, you have the right to make a complaint directly to the Information Commissioner’s Office (ico.org.uk) at any time. Their website contains details of how to make a complaint.
For further information about any aspect of how The Black Watch Regimental Trust is processing your personal data, please contact: enquiries@theblackwatch.co.uk .
16. What about cookies and links to other websites?
Our website uses local storage (such as cookies) to provide you with the best possible experience and to allow you to make use of certain functionality (such as being able to shop online). Further information can be found in our Cookies Policy on our website.
Our website contains hyperlinks to many other websites. We are not responsible for the content or functionality of any of those external websites. If an external website requests personal information from you (e.g. in connection with an order for goods or services), the information you provide will not be covered by the BWRT Privacy Policy. When purchasing goods or services from any of the businesses that our site links to, you will be entering into a contract with them (agreeing to their terms and conditions) and not with the BWRT.
17. Policy review
This policy will be reviewed by the BWRT Data Compliance Manager at intervals of no more than two years to ensure it remains up to date and compliant with the law.
This document was last reviewed on 19th April 2024.
