Privacy policy

Birsay Heritage Trust is committed to ensuring that your privacy is protected and that your personal data is handled responsibly and in accordance with applicable data protection legislation, including the UK General Data Protection Regulation.

Birsay Heritage Trust is a Scottish charity (SC027642).

If you have any questions about this policy or how your data is handled, please contact us at:
hello@baronymill.com

This policy may be updated from time to time. Please check this page periodically to ensure you are happy with any changes.

---

What Information We Collect

We may collect the following information when you use this website:

• Name
• Email address
• Postal address
• Telephone number
• Order information (such as products purchased and delivery details)
• Website usage data such as IP address and browsing behaviour (via cookies and analytics tools)

We only collect information that is necessary to provide our services and operate the website effectively.

---

How We Use Your Information

We collect and use your information for the following purposes:

• Processing your membership application
• Communicating with you about enquiries
• Providing customer service and responding to queries
• Maintaining internal records, accounting, and administration
• Improving our website, products, and services

---

Legal Basis for Processing

Under the UK GDPR, we process personal data on the following lawful bases:

Contract
To fulfil orders you place through our website.

Legitimate Interests
To operate and improve our website and services.

Consent
Where you have opted in to receive newsletters or marketing communications.

---

Sharing Your Information

We do not sell or rent your personal information.

However, we may share necessary information with trusted third-party service providers in order to operate the website and fulfil services, including:

• Payment processors
• Delivery and shipping providers
• Website hosting services
• Email marketing services such as Mailchimp
• Website analytics providers

These third parties are required to handle your data securely and only for the purposes necessary to provide their services.

---

Data Retention

We only keep personal data for as long as necessary.

Order information may be retained for up to 7 years for accounting and legal purposes.

Marketing email records are retained until you unsubscribe or request removal.

---

Security

We are committed to ensuring that your information is secure.

Appropriate physical, electronic, and managerial procedures are in place to safeguard the personal data we collect online and to prevent unauthorised access or disclosure.

---

Cookies

Our website uses cookies to improve your experience and analyse website traffic.

Cookies are small files placed on your device that help us understand how visitors use the site.

You can choose to accept or decline cookies through your browser settings.

Further details can be found in our Cookie Policy.

---

Links to Other Websites

Our website may contain links to other websites of interest.

Once you leave our website, we do not have control over those websites and cannot be responsible for the protection and privacy of any information you provide whilst visiting them.

Please review the privacy policies of any external websites you visit.

---

Your Data Protection Rights

Under the UK GDPR you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Withdraw consent for marketing communications

If you wish to exercise any of these rights, please contact us at:

hello@baronymill.com

You also have the right to lodge a complaint with the Information Commissioner’s Office.

---

Contact Us

If you have any questions about this Privacy Policy or how your personal data is handled, please contact:

Birsay Heritage Trust
Barony Mill
Birsay
Orkney
KW17 2LY

Email: hello@baronymill.com