Privacy Policy

Lockerbie Old School SCIO

Last updated: 21 October 2026

1. Introduction

Lockerbie Old School SCIO is committed to protecting your personal information and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, book our facilities, attend events or activities, become a member, volunteer, make a payment or contact us.

We handle personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.

2. Who We Are

Lockerbie Old School SCIO is a Scottish Charitable Incorporated Organisation providing community facilities, activities, services and opportunities for people in Lockerbie and the surrounding area.

For data protection purposes, Lockerbie Old School SCIO is responsible for deciding how and why personal information collected through our services is used.

Organisation: Lockerbie Old School SCIO

Scottish Charity Number: SC044998

Address: Dryfe Road, Lockerbie, DG11 2AP

Email: info@lockerbieoldschool.org

If you have any questions about this policy or how we handle your information, please contact us using the details above.

3. Information We Collect

Depending on how you interact with Lockerbie Old School, we may collect:

  • Your name, email address, telephone number and postal address.

  • Information provided when booking rooms, facilities or services.

  • Event registrations, ticket purchases and attendance information.

  • Membership and volunteering information.

  • Payment records and transaction details.

  • Information provided through website forms or enquiries.

  • Newsletter subscriptions and communication preferences.

  • Website usage information collected through cookies and analytics.

  • Relevant accessibility, dietary or health information where required to support participation in activities.

  • Emergency contact information where appropriate.

We aim to collect only the information necessary to provide our services and operate our organisation.

4. How We Use Your Information

We use personal information to:

  • Process room hire bookings, memberships and event registrations.

  • Manage payments, purchases, refunds and receipts.

  • Respond to enquiries and provide customer support.

  • Organise community events, activities, workshops and programmes.

  • Manage volunteers and community participation.

  • Communicate important information about bookings or activities.

  • Send newsletters and promotional information where permitted by law.

  • Improve our website, facilities and services.

  • Meet legal, financial, safeguarding and regulatory responsibilities.

  • Monitor and report on our activities to funders and stakeholders, using anonymised information wherever possible.

We do not sell your personal information to third parties.

5. Our Legal Basis for Using Your Information

Under UK GDPR, we must have a lawful reason for processing personal information.

Depending on the circumstances, we may rely on:

Contract: Where personal information is necessary to process a booking, membership, purchase or other service agreement.

Legal obligation: Where we must retain or process information to meet legal, financial or regulatory responsibilities.

Legitimate interests: Where processing is necessary to operate and improve our community services, respond to enquiries, administer activities and maintain appropriate records, provided these interests do not override your rights.

Consent: Where you have agreed to receive marketing communications or where consent is otherwise required.

Where we collect sensitive information, such as health or accessibility information, we will ensure that an additional lawful condition applies and that appropriate protections are in place.

Where we rely on consent, you can withdraw it at any time.

6. Website, Online Bookings and Payments

Our website uses third-party services to provide information, accept payments and manage bookings.

Squarespace

Our website is hosted and managed using Squarespace.

Squarespace may process technical information, including IP addresses, browser details and website usage information, to operate the website and provide relevant services.

For more information, visit:

https://www.squarespace.com/privacy

Stripe

We use Stripe to process online payments for services such as memberships, room hire, activities and other purchases.

Stripe securely processes payment information in accordance with its own privacy and security policies.

Lockerbie Old School SCIO does not directly store full payment card details on its website.

For more information, visit:

https://stripe.com/gb/privacy

Eventbrite

We use Eventbrite to manage ticket bookings and registrations for selected events and activities.

When booking through Eventbrite, customers may be asked to provide information such as their name, email address, contact details and payment information.

Relevant booking information may be shared with Lockerbie Old School SCIO to allow us to:

  • Manage event registrations and attendance.

  • Send essential event information and updates.

  • Respond to booking enquiries.

  • Support the safe and effective delivery of activities.

  • Maintain appropriate attendance and financial records.

Eventbrite also processes personal information in accordance with its own Privacy Policy.

For more information, visit:

https://www.eventbrite.co.uk/help/en-gb/articles/460838/eventbrite-privacy-policy/

Purchasing a ticket or attending an event does not automatically mean that you will be added to our marketing mailing list.

7. Sharing Your Information

We may share relevant personal information with trusted third parties where necessary to provide our services.

These may include:

  • Squarespace, our website provider.

  • Stripe, our online payment processor.

  • Eventbrite, our event ticketing and registration provider.

  • Organisations or individuals delivering activities on our behalf.

  • Professional advisers, accountants and auditors.

  • Funders and regulatory bodies where reporting is required.

  • Emergency services or relevant safeguarding authorities where necessary.

We only share personal information where there is an appropriate lawful reason to do so.

We aim to ensure that third parties handling personal information on our behalf maintain suitable data protection and security arrangements.

8. Marketing and Newsletters

We may offer newsletters, event updates and information about activities taking place at Lockerbie Old School.

Where required, we will ask for your consent before sending marketing communications.

You can unsubscribe from marketing emails at any time using the unsubscribe link in the email or by contacting us directly.

We may still contact you about an existing booking, event or membership where necessary to provide the service you have requested.

9. Cookies and Website Analytics

Our website may use cookies and similar technologies to:

  • Enable essential website functions.

  • Support bookings and payment processes.

  • Improve website performance.

  • Understand how visitors use our website.

  • Remember relevant website preferences.

Some cookies are essential for the website to function correctly.

Where required, we will ask for your consent before using non-essential cookies, including certain analytics or marketing cookies.

You can manage your cookie preferences through the website's available cookie controls or your browser settings.

10. Children's Personal Information

Lockerbie Old School provides activities and services for children, young people and families.

Where personal information about children is collected, we take additional care to protect their privacy.

Information may be collected for:

  • Activity and event registration.

  • Emergency contact arrangements.

  • Safeguarding and welfare purposes.

  • Accessibility and additional support requirements.

  • Communication with parents or guardians.

Where appropriate or legally required, we will seek consent or authorisation from a parent or guardian.

We will not knowingly use children's personal information for inappropriate marketing purposes.

11. How We Store and Protect Information

We take reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse or disclosure.

Personal information may be stored securely within our administrative systems and approved third-party platforms.

Access is limited to authorised staff, trustees, volunteers and service providers who require the information to carry out their responsibilities.

We retain personal information only for as long as necessary for the purpose for which it was collected, taking account of legal requirements, financial record-keeping, safeguarding obligations and operational needs.

When information is no longer required, it will be securely deleted or anonymised.

12. International Data Transfers

Some of the third-party services we use, including Squarespace, Stripe and Eventbrite, may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take steps to ensure that appropriate safeguards are in place in accordance with applicable data protection legislation.

You can contact us for further information about relevant international transfers and safeguards.

13. Your Data Protection Rights

Under UK data protection law, you may have the right to:

  • Request a copy of the personal information we hold about you.

  • Ask us to correct inaccurate or incomplete information.

  • Request deletion of your information in certain circumstances.

  • Ask us to restrict how your information is used.

  • Object to certain types of processing, including direct marketing.

  • Request the transfer of your information where applicable.

  • Withdraw consent where processing is based on consent.

These rights are subject to certain legal conditions and exceptions.

To exercise your rights, please contact us using the details provided in this policy.

You also have the right to raise a concern with the Information Commissioner's Office (ICO).

Information Commissioner's Office

Website: https://ico.org.uk

14. Links to Other Websites

Our website may contain links to external websites, booking platforms and other organisations.

We are not responsible for the privacy policies or practices of third-party websites.

We recommend reviewing their privacy policies before providing personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, legal requirements or how we process personal information.

Any updates will be published on our website with the date of the latest revision.

16. Contact Us

If you have questions about this Privacy Policy or how Lockerbie Old School SCIO handles your personal information, please contact:

Lockerbie Old School SCIO

Email: operationsmanager@lockerbieoldschool.org

Address: Dryfe Road, Lockerbie, DG11 2AP

We will respond to data protection enquiries in accordance with applicable legal requirements.