Privacy Policy
Clan Logan Charitable Trust Scottish Charitable Incorporated Organisation (SCIO), Charity Number SC054035 Registered with the Office of the Scottish Charity Regulator (OSCR)
Last updated: March 2026
1. Who We Are
Clan Logan Charitable Trust is a Scottish Charitable Incorporated Organisation (SCIO), registered with the Office of the Scottish Charity Regulator (OSCR) under charity number SC054035. Our purpose is to research, preserve, and promote the history and heritage of Clan Logan for the benefit of Logan descendants and history enthusiasts worldwide.
We are the data controller for the personal information collected through this website (https://clanlogantrust.co.uk/).
Contact us about privacy: Email: [email protected]
2. What Information We Collect
Contact form
When you submit our contact form, we collect:
- First name and last name
- Email address
- Mailing address (optional)
- Enquiry type
- Your message
Donations
We accept donations via Stripe and PayPal. When you donate:
- We record the donation amount, date, and a transaction reference
- We do not store your card or bank details – these are handled entirely by Stripe or PayPal on their own secure systems
- Stripe and PayPal act as independent data controllers for the payment information you provide directly to them
Website usage
This website uses only strictly necessary cookies to function (see Section 6). We do not use analytics, advertising, or tracking tools.
3. How We Use Your Information
| Information | Purpose | Legal Basis (UK GDPR) |
|---|---|---|
| Contact form data | Responding to your enquiry or volunteer expression of interest | Legitimate interests |
| Donation transaction records | Processing your donation; financial reporting and governance | Contract; legal obligation |
| Email address | Sending a receipt or acknowledgement of your donation or enquiry | Legitimate interests |
| Gift Aid declaration (if given) | Reclaiming Gift Aid from HMRC on eligible donations | Legal obligation |
We will never use your personal information for marketing or fundraising communications without your explicit consent.
4. Who We Share Your Information With
We do not sell, rent, or trade your personal information. We share data only where necessary to operate this website and process donations:
- Stripe, Inc. – card payment processor. They handle all card payment data independently. See Stripe’s privacy policy: https://stripe.com/gb/privacy
- PayPal (Europe) S.à r.l. et Cie, S.C.A. – PayPal donation processor. They handle all PayPal payment data independently. See PayPal’s privacy policy: https://www.paypal.com/uk/legalhub/privacy-full
- WordPress / Automattic – this website is built on WordPress. Basic technical data (such as IP addresses) may be processed as part of normal website operation
- OSCR (Office of the Scottish Charity Regulator) – we may be required to share information as part of our regulatory obligations as a registered Scottish charity
- HMRC – donation and Gift Aid records may be subject to HMRC audit requirements
We will disclose personal information to any other third party only where required by law or with your prior consent.
5. How Long We Keep Your Information
| Data | Retention Period | Reason |
|---|---|---|
| Contact form enquiries | 2 years from date of enquiry, or until resolved | Reasonable period to follow up |
| Donation transaction records | 7 years | HMRC financial record-keeping requirement |
| Gift Aid declarations | 6 years from the last donation covered by the declaration | HMRC requirement |
When information is no longer needed, we delete or securely destroy it.
6. Cookies
This website uses only strictly necessary cookies. These are small files placed on your device to allow the website to function correctly. They do not track your browsing behaviour or collect personal information for marketing purposes.
| Cookie | Purpose | Duration |
|---|---|---|
| WordPress session cookie | Maintains core website functionality | Session (cleared when browser closes) |
| Stripe cookies | Required for the secure operation of the payment process | Short-term / session |
Because these cookies are strictly necessary, we do not require your consent before setting them under the UK Privacy and Electronic Communications Regulations (PECR). You can disable cookies in your browser settings, though this may affect how parts of the website operate.
7. Your Rights Under UK GDPR
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:
- Right of access – you may request a copy of the personal information we hold about you (a Subject Access Request)
- Right to rectification – you may ask us to correct any inaccurate or incomplete information
- Right to erasure – you may ask us to delete your information, subject to any legal obligations that require us to retain it
- Right to restrict processing – you may ask us to pause how we use your information in certain circumstances
- Right to object – you may object to processing carried out on the basis of legitimate interests
- Right to data portability – you may request your data in a structured, machine-readable format where technically feasible
To exercise any of these rights, please write to us at [email protected]. We will respond within one calendar month of receiving your request. We may need to verify your identity before processing your request.
There is no charge for exercising your rights in most circumstances.
8. Data Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. Our website uses HTTPS encryption. Payment data is handled exclusively by PCI-DSS compliant processors (Stripe and PayPal) and never passes through or is stored on our servers.
9. Third-Party Links
This website may contain links to external websites (for example, OSCR, Scottish heritage organisations, or Substack). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.
10. Complaints
If you are unhappy with how we have handled your personal information, you have the right to lodge a complaint with the UK’s data protection supervisory authority:
Information Commissioner’s Office (ICO) Website: https://ico.org.uk/make-a-complaint/ Telephone: 0303 123 1113 Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would welcome the opportunity to address your concerns directly before you contact the ICO. Please reach out to us first at [email protected].
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in the law, our data practices, or the services we offer. Any updates will be posted on this page with a revised “Last updated” date at the top. We encourage you to review this page periodically.
Clan Logan Charitable Trust is a Scottish Charitable Incorporated Organisation (SCIO), SC054035, registered with the Office of the Scottish Charity Regulator (OSCR). oscr.org.uk