Privacy policy

Effective date: 17 December 2025

East Neuk Centre Trust (“we”, “our” or “us”) is committed to protecting your privacy. This privacy policy explains how we collect, use and protect your personal information when you visit our website.

Website address

Our website address is: https://eastneukcentre.org.uk

Contact details

Lindsey Brown, Chair of Trustees, is the data controller for this website.

You can contact us at:

• Email: info@eastneukcentre.org.uk
• Telephone: +44 (0)1333 311977
• Registered office: East Neuk Centre, Ladywalk, Anstruther KY10 3EX, United Kingdom

1. Purpose of this policy

This privacy policy explains:

• what personal data we collect
• how we use that data
• who has access to it
• your rights under data protection law
• how we use cookies on this website

This policy should be read alongside any other legal information or terms provided on our website.

2. Legal basis for processing data

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We rely on the following legal bases when processing personal data:

• Consent – when you contact us directly by email or phone, you give us permission to use your personal data to respond to your enquiry.
• Legitimate interests – we may process limited personal data to operate and improve our website, communicate with the public, and manage enquiries relating to our venues, activities and community projects. These interests do not override your rights and freedoms.

Our legitimate interests include:

• responding to enquiries about venue hire, activities and community projects
• communicating with people who contact us directly
• monitoring and improving website performance using analytics tools

3. What data we collect

a) Automatically collected data

When you visit our website, we may automatically collect limited technical information, including:

• your IP address
• browser and device type
• pages visited and links clicked
• general location information based on IP address
• basic interaction data, such as scrolling and page engagement

This information is collected using analytics tools such as Microsoft Clarity and helps us understand how the website is used so we can improve it. This data does not normally identify you personally.

b) Information you provide voluntarily

We only collect personal data when you choose to contact us directly.

If you contact us by email or phone, we may collect:

• your name
• your email address or phone number
• any information you include in your message

We use this information solely to respond to your enquiry and to manage venue bookings, activities or other requests you have made.

4. How we use your data

We use personal data only where necessary and for clear, limited purposes.

We may use your data to:

• respond to enquiries you send to us by email or phone
• manage venue bookings, activities and related communications
• understand how visitors use the website
• improve the content, usability and performance of the site

We do not sell, rent or trade your personal data.

We only use personal information for the purposes described in this policy, and we keep it only for as long as necessary.

5. Data sharing and third parties

We only share personal data where it is necessary to operate and maintain our website, or to respond to enquiries.

We may share limited data with the following third-party service providers:

• Krystal Hosting Ltd – Our website hosting provider. Like most hosting companies, they may collect technical data such as IP addresses, server logs and access times for security, performance and maintenance purposes.
• Microsoft Clarity – Used to understand how visitors interact with the website. This tool collects anonymised usage data such as page views, scrolling and clicks. It does not identify you personally.

These providers process data only on our behalf and in line with their own privacy and security obligations.

We do not share personal data with third parties for marketing purposes.

Social sharing links

Our website includes options to share content via:

• Email
• Facebook

These are simple share links. They do not collect personal data unless you choose to click them.

If you use these links, any data you share will be handled in accordance with the privacy policies of the relevant third-party platform.

6. International data transfers

Some technical data collected through our website may be processed outside the UK, including in the United States.

Where this happens, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved for UK use
• Data protection agreements with our service providers

These safeguards are designed to ensure your data is handled securely and in line with UK data protection law.

7. Data retention

We only keep personal data for as long as it is necessary for the purpose it was collected.

• Enquiry emails are kept only for as long as needed to respond and for reasonable record-keeping
• Analytics data is retained for a limited period to help us understand and improve website performance
• Server logs may be retained temporarily for security and maintenance purposes

We regularly review the data we hold and delete information that is no longer required.

8. How we protect your data

We take appropriate technical and organisational measures to protect personal data, including:

• Secure hosting and server environments
• Password-protected systems and restricted access
• Use of trusted third-party providers with appropriate security controls

While we take reasonable steps to protect your data, no website or online system can be completely secure. We cannot guarantee absolute security, but we take data protection seriously and follow good practice.

9. Cookies

Our site uses cookies to improve your experience. Types of cookies used include:

• Functional cookies – To remember your preferences
• Analytical cookies – To help us understand how visitors interact with our site
• Third-party cookies – Used by Microsoft Clarity to analyse session behaviour

You can opt out of non-essential cookies using the cookie consent banner.

See the Cookie Policy (UK) page for more details.

10. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict how your data is processed
• Request a copy of your data in a portable format

To exercise any of these rights, please contact the data controller using the contact details provided at the top of this policy.

11. Under 16s

This website is not intended for children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe that we have collected personal data from a child, please contact us and we will take steps to delete that information promptly.

12. Do Not Track (DNT)

Our website does not respond to Do Not Track (DNT) signals sent by web browsers. We do not track users across third-party websites or over time for targeted advertising purposes.

13. Opting out

You can opt out of certain data collection and communications by:

• Unsubscribing from marketing emails using the “Unsubscribe” link in any email we send
• Managing or declining non-essential cookies using the cookie consent banner on our website

14. Complaints

If you have any concerns about how we handle your personal data, please contact us in the first instance using the details at the top of this policy. We will do our best to resolve any issues promptly.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

• Website: https://ico.org.uk/
• Telephone: +44 (0)303 123 1113
• +44 (0)303 123 1113 Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom

15. Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in the law or how we manage personal data. The effective date at the top of this page will be updated whenever changes are made.

We recommend reviewing this policy occasionally to stay informed about how your information is protected.