Privacy Policy
U (Buildu Scotland CIC)
Last updated: 6 January 2026
1. Who We Are
U (Buildu Scotland CIC) is a Community Interest Company based in Scotland. We are committed to protecting your privacy and handling your personal data with care, transparency, and respect.
​
Data Controller:
U (Buildu Scotland CIC)
Email: enquiries@builduscotland.org.uk
2. What This Policy Covers
This Privacy Policy explains how we collect, use, and protect personal data
when you:
• Visit our website
• Complete a contact or enquiry form
• Register interest in a programme or event
• Sign up to receive updates or communications
This policy applies only to website users.
If you go on to participate in one of our programmes, your data will also be covered by our GDPR & Data Protection Policy (Participants).
3. What Data We Collect
We may collect the following information through our website:
a) Information you provide voluntarily
• Name
• Email address
• Phone number
• Information you submit via forms (e.g. enquiries, expressions of
interest)
b) Technical information
• IP address
• Browser type and version
• Pages visited and time spent on the site
This data helps us understand how our website is used and improve it.
4. How We Use Your Information
We use your personal data to:
• Respond to enquiries or messages
• Process expressions of interest or registrations
• Provide information you request
• Improve our website and services
• Maintain website security
We do not sell your data and only use it for legitimate purposes connected to our work.
5. Lawful Basis for Processing
Under UK GDPR, we process your data using the following lawful bases:
• Legitimate Interests – to respond to enquiries, manage our website,
and deliver information you request
• Consent – where you actively opt in (e.g. ticking a box or submitting a
form)
You can withdraw consent at any time by contacting us.
How our lawful bases apply in practice:
• Responding to enquiries and messages – Legitimate Interests
• Processing expressions of interest or registrations – Legitimate Interests
• Sending updates or communications you have requested – Consent
• Managing and maintaining our website – Legitimate Interests
6. Cookies and Analytics
Our website may use cookies and basic analytics tools to:
• Understand how visitors use the site
• Improve performance and user experience
Cookies do not give us access to your computer or personal information
beyond what you choose to share.
You can control or disable cookies through your browser settings.
7. Third-Party Services
We may use trusted third-party services to support website functionality,
such as:
• Website hosting
• Form or booking tools
• Email communication platforms
• Analytics services
These providers only process data on our instructions and in line with data protection law.
Some of our trusted service providers may store or process personal data
outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as reliance on UK adequacy regulations or standard contractual clauses, to protect your personal data.
8. How We Store and Protect Your Data
We take data protection seriously and use appropriate safeguards, including:
• Secure, password-protected systems
• Restricted access to personal information
• Regular review and deletion of data when no longer needed
9. How Long We Keep Your Data
We keep personal data collected through our website only for as long as necessary for the purpose it was collected.
• Website enquiries and expressions of interest are typically retained for up to 12 months
after the last contact, unless further engagement is required.
• Mailing list or update subscription data is retained until you unsubscribe or withdraw
consent.
• Where an enquiry leads to participation in a programme, relevant data will be transferred and handled in line with our GDPR & Data Protection Policy (Participants).
Data may be retained for longer where required to meet legal, regulatory, or operational obligations.
10. Your Rights
Under UK GDPR, you have the right to:
• Access your personal data
• Request correction of inaccurate information
• Request deletion (where appropriate)
• Object to or restrict processing
• Withdraw consent at any time
• Complain to the Information Commissioner’s Office (ICO)
ICO website: www.ico.org.uk
11. How to Contact Us
If you have questions about this Privacy Policy or how your data is handled, please contact:
Nicola Melvin
Managing Director – U (Buildu Scotland CIC)
enquiries@builduscotland.org.uk
12. Policy Updates
This Privacy Policy may be updated from time to time.
The most recent version will always be published on our website.