Privacy Policy

This policy explains how the Scottish Plastics & Rubber Association (“SPRA”, “we”, “us”) collects and uses personal information when you visit spra.org.uk, contact us, or join our mailing list. We are committed to handling your information fairly and lawfully, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

SPRA is the data controller for the personal information described in this policy. Our administration is provided by Northern Networking Events Ltd.

SPRA Administration Office, C/O Northern Networking Events Ltd, 238 Main Street, Rutherglen, Glasgow, G73 2HP

Email: info@spra.org.uk

Information we collect

When you use our contact form, we collect your name, email address, your reason for getting in touch, your message, and whether you asked to join our mailing list.

When you join our mailing list, we collect your email address, and your name if you gave it on the contact form.

When you visit the website, our hosting provider automatically processes technical information needed to deliver and protect the site, such as your IP address, browser type, the pages you request and the time of your visit.

Membership applications are made through our separate membership system at members.spra.org.uk, which explains how it handles your information when you apply.

We do not ask for any special category data (such as health information) and ask that you don’t include it in messages to us.

How we use your information

We only use your information for the purposes below, and only where we have a lawful basis to do so:

• To respond to your enquiry. We use the details you send through the contact form to reply to you and deal with your request. Our lawful basis is our legitimate interest in responding to people who contact us.
• To send you news and updates. If you sign up to our mailing list, we send you news about SPRA, our events and the industry. Our lawful basis is your consent, which you can withdraw at any time using the unsubscribe link in any email, or by contacting us.
• To keep the website secure and working. We use technical information to deliver pages, prevent spam and abuse, and fix problems. Our lawful basis is our legitimate interest in running a safe and reliable website.

We do not sell your personal information, and we do not use it for automated decision making or profiling.

Services we use

We use a small number of trusted providers to run the website. They process information on our behalf, under contracts that require them to keep it secure and only use it as we instruct.

• Cloudflare hosts the website and protects it against attacks. It processes technical information such as your IP address when you visit. See the Cloudflare Privacy Policy.
• Cloudflare Turnstile checks that contact and mailing list form submissions come from a person rather than an automated bot. To do this it processes limited information about your browser and device. Turnstile is designed to protect privacy and does not use the information for advertising. See the Turnstile Privacy Policy.
• Mailgun delivers the messages sent through our contact form to our inbox. Your form details pass through Mailgun’s servers in the European Union. See the Mailgun Privacy Policy.
• Mailchimp manages our mailing list and sends our email updates. When you sign up, your email address (and name, if you gave it) is stored in Mailchimp, which is operated by Intuit in the United States. Mailchimp may record whether you open our emails or click links in them, so we can understand what our readers find useful. See the Intuit Privacy Statement.

International transfers

Some of our providers, such as Cloudflare and Mailchimp, may process information outside the UK, including in the United States. Where this happens, the transfer is protected by appropriate safeguards, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum to the European Commission’s Standard Contractual Clauses.

Cookies

This website does not use advertising or analytics cookies, and we do not track you across other websites. Cloudflare may set strictly necessary cookies to protect the site against bots and abuse. These do not identify you personally and are not used for any other purpose. Because they are essential for the site to work securely, they do not require your consent.

How long we keep your information

• Contact form enquiries are kept for as long as we need them to deal with your enquiry and any follow up, and for no longer than two years after our last contact with you.
• Mailing list details are kept until you unsubscribe. After that, we keep only a record that you have unsubscribed, so that we don’t contact you again.
• Technical information processed by our hosting provider is kept for a short period for security and troubleshooting, then deleted.

Your rights

Under data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information;
• ask us to restrict how we use your information;
• object to us using your information where we rely on our legitimate interests;
• ask for your information in a portable format;
• withdraw your consent at any time, where we rely on consent.

To use any of these rights, email info@spra.org.uk. We will respond within one month. There is normally no charge.

Complaints

If you have a concern about how we handle your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Links to other websites

Our website links to other websites, including our membership system, our partners and our social media pages. We are not responsible for how those websites handle your information, so please read their privacy policies.

Changes to this policy

We may update this policy from time to time, for example if we start using a new service. The “Last updated” date on this page shows when it was last changed.