LEGAL

Privacy Policy

How Small Scotland collects, uses and protects your information.

Last updated: May 2026

Small Scotland ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, how we use it, and your rights in relation to it. By using smallscotland.co.uk you agree to this policy.

1. Who we are

Small Scotland is a business discovery and e-commerce platform for Scotland small businesses, operated at smallscotland.co.uk. Our contact email is info@smallscotland.co.uk.

2. What data we collect

When you browse the site — we collect standard server logs including your IP address, browser type and pages visited. This is used for security and performance monitoring only.

When you sign up or sign in — we collect your email address. If you sign up as a business owner we also collect your business name, address, phone number and any other details you provide in your business profile.

When you make a purchase — payment is processed by Stripe. We do not store your card details. We receive your name, email and order details to fulfil your order and send confirmation emails.

When you make a booking — we collect your name, email, phone number and any notes you provide to facilitate the booking with the relevant business.

When you contact us — we collect your name, email and message content.

When you subscribe to our newsletter — we collect your email address.

3. How we use your data

  • To operate the platform and provide services you request
  • To process payments and send order/booking confirmations
  • To send transactional emails (booking confirmations, order receipts)
  • To send our newsletter, if you have subscribed (you can unsubscribe at any time)
  • To improve the platform and fix technical issues
  • To comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising.

4. Who we share data with

We use the following third-party services which may process your data:

  • Supabase — our database provider (EU region). Stores user accounts and business data.
  • Stripe — payment processing. Stripe's privacy policy applies to payment data.
  • Resend — email delivery service. Processes email addresses to deliver transactional emails.
  • Cloudflare — hosting and CDN. May process request data for security purposes.

When you purchase from a business on Small Scotland, your name, email and order details are shared with that business to fulfil your order. We are not responsible for how individual businesses handle your data once received.

5. Cookies

We use minimal cookies necessary to operate the site, including authentication cookies to keep you signed in. We do not use advertising or tracking cookies. You can disable cookies in your browser settings but some features may not work correctly.

6. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict processing of your data
  • Data portability — receive your data in a common format
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at info@smallscotland.co.uk. We will respond within 30 days.

7. Data retention

We retain your account data for as long as your account is active. Order and booking records are retained for 7 years for legal and accounting purposes. You may request deletion of your account and personal data at any time by emailing info@smallscotland.co.uk.

8. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), secure database access controls, and encrypted storage of sensitive credentials. No system is completely secure and we cannot guarantee absolute security.

9. Children

Small Scotland is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a revised date. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or to exercise your rights, contact us at info@smallscotland.co.uk.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.