Privacy Policy

Glasgow Forest School

Effective Date: 5 June 2026

1. Introduction and Scope

This privacy policy specifically outlines how Glasgow Forest School processes personal data collected through the operation of our website, located at www.glasgowforestschool.co.uk

This policy covers general website functions, contact forms, and mailing list sign-ups.

This policy does NOT cover personal data collected for event bookings, activities, training registrations, or participant safety. That information is covered by our separate GDPR Policy for Participant Data.

2. Data Controller and Contact Information

The data controller for the processing of your personal information relating to the website is Glasgow Forest School.

  • Data Controller: Glasgow Forest School

  • Contact: Sophie Kyle (hello@glasgowforestschool.co.uk)

3. Personal Data Collected via the Website

We collect two main categories of information through our website:

1) Website Usage Data

When you visit or use our website, we automatically collect certain device and usage information. This information does not reveal your specific identity (like your name or contact information) but may include:

  • Your IP address

  • Browser and device characteristics

  • Operating system

  • Language preferences

  • Referring URLs

  • Device name, country, and location

  • Information about how and when you interact with our website services

  • Direct Contact and Mailing List Data

2)  Direct Contact and Mailing List Data

We collect information that you voluntarily provide to us when you subscribe to our email mailing list, submit a general enquiry via a contact form, or otherwise contact us. This includes:

  • Email address (for mailing list)

  • Subscription date and IP address

  • Any contact details or personal information included in a message/enquiry (e.g., name, phone number).

4. How We Use Your Information and Legal Basis

We process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law. The purposes and legal bases for processing website data include:

  • To send you marketing and promotional communications: If you subscribe to our mailing list, the processing is based on your consent.

  • To respond to user enquiries/general contact: To fulfill our legitimate interest in responding to general enquiries.

  • To ensure the security and functionality of the website: To maintain security, prevent crashes, fix bugs, and assist with basic site functions. This processing is based on our legitimate business interests.

  • To comply with legal obligations: To comply with laws, accounting, or other legal requirements.

5. Cookies and Other Tracking Technologies

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather and store your information when you interact with our Services.

  • Functionality: Some technologies are necessary to maintain the security of our Services, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

  • Analytics and Advertising: We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, or to send abandoned shopping cart reminders. This advertising about products and services tailored to your interests may appear on our Services or on other websites.

  • Cookie Notice: Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

6. Data Sharing

We may share your information with our business partners to offer you certain products, services, or promotions. This includes third-party service providers who perform services on our behalf, such as sending emails (e.g., Mailchimp) and website hosting.

7. International Data Transfer

We may transfer, store, and process your information in countries other than your own. If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, please be aware that your information may be transferred to, stored by, and processed by us and our third-party partners in other countries.

We will take all necessary measures to protect your personal information in accordance with this Privacy Notice and applicable law.

8. Data Retention

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

9. Data from Minors

We do not knowingly collect data from or market to children under 18 years of age.

By using the website, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to the minor's use of the website.