Privacy Policy
Last updated: April 2026
1. Who We Are
Sea the Change is a registered Scottish charity (SC050664), based at the Cycle Shack, Manse Road, Eyemouth, TD14 5JE.
Our website address is: https://seathechange.org.uk
We are committed to protecting your personal data and handling it responsibly in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
📧 info@seathechange.org.uk 📍 Cycle Shack, Manse Road, Eyemouth, TD14 5JE
2. What Data We Collect and Why
We collect personal data in the following circumstances:
Bookings and enquiries When you make a booking or submit an enquiry through our website, we collect your name, email address, phone number, and any other details required to process your request. This data is used to confirm and manage your booking, send you relevant notifications and reminders, and contact you regarding your enquiry.
Feedback forms When you complete our Experience Feedback form, we collect your name, email address and feedback responses. This data is used to improve our services and may be used anonymously in funding applications and reports.
Volunteer enquiries When you submit a volunteer enquiry, we collect your name, email address, phone number and any other information you choose to provide. This is used to assess your enquiry and get in touch with you about volunteering opportunities.
Kids Bike Library loan requests When you submit a Kids Bike Library loan request, we collect the parent or guardian’s name, address, email address and phone number, along with details about the child’s age and bike size requirement. This data is used solely to process the loan request.
Donations When you make a donation via GiveaLittle, your payment and personal data is processed by GiveaLittle and their payment processors (SumUp or Stripe). If you opt in to Gift Aid, your name, address and declaration will be stored by GiveaLittle and used by Sea the Change to submit a Gift Aid claim to HMRC. Please refer to GiveaLittle’s own Privacy Policy for full details of how they handle your data.
Contact forms When you contact us via a form on our website, we collect your name, email address and any information you include in your message. This is used solely to respond to your enquiry.
Newsletter and marketing If you opt in to receive marketing communications from us, we will use your email address to send you updates about our work, events and services. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly.
Website comments If you leave a comment on our website, we collect the data shown in the comment form, along with your IP address and browser user agent string to help with spam detection.
Cookies Our website uses cookies to improve your experience. See Section 6 for full details.
3. Our Legal Basis for Processing Your Data
We process your personal data on the following legal bases under UK GDPR:
- Contract — to fulfil a booking or loan request you have made with us
- Legitimate interests — to respond to enquiries, improve our services and manage our operations as a charity
- Consent — for marketing communications and optional data uses such as photography consent. You can withdraw your consent at any time
- Legal obligation — where we are required to process data to comply with legal requirements, such as Gift Aid records for HMRC
4. How We Share Your Data
We do not sell your personal data to third parties. We may share your data with the following trusted parties where necessary:
- GiveaLittle — to process donations and Gift Aid declarations
- SumUp — to process payments
- WPForms — to manage form submissions on our website
- Amelia — to manage bookings and send booking notifications
- HMRC — to submit Gift Aid claims where you have provided a declaration
- Cycling Without Age Scotland — where relevant to Trishaw Ride bookings and feedback
All third parties we work with are required to handle your data securely and in accordance with UK GDPR.
5. How Long We Keep Your Data
We retain your personal data only for as long as necessary for the purposes it was collected:
- Booking and enquiry data — retained for 2 years from the date of your last interaction with us
- Feedback form data — retained for 2 years
- Volunteer enquiry data — retained for 2 years, or for the duration of your volunteering relationship with us
- Gift Aid declarations — retained for a minimum of 6 years as required by HMRC
- Donation records — retained for 7 years for financial record-keeping purposes
- Marketing data — retained until you unsubscribe or request deletion
- Website comments — retained indefinitely unless you request deletion
6. Cookies
Our website uses the following types of cookies:
- Essential cookies — required for the website to function correctly, including session management and security. These cannot be disabled.
- Functional cookies — used to remember your preferences and improve your experience, such as remembering form details.
- Analytics cookies — we may use Google Analytics or similar tools to understand how visitors use our website. This data is anonymised and used only to improve the site.
- Third party cookies — embedded content from third parties (such as YouTube videos or Facebook) may set their own cookies. We have no control over these cookies. Please refer to the relevant third party’s privacy policy for details.
You can manage your cookie preferences through your browser settings at any time.
7. Embedded Content From Other Websites
Pages on our website may include embedded content such as videos, images or social media posts. Embedded content from other websites behaves in the same way as if you had visited those websites directly. Those websites may collect data about you, use cookies and monitor your interaction with the embedded content. Please refer to the relevant third party’s privacy policy for details.
8. Your Rights
Under UK GDPR you have the following rights regarding your personal data:
- Right of access — you can request a copy of the personal data we hold about you
- Right to rectification — you can ask us to correct inaccurate or incomplete data
- Right to erasure — you can ask us to delete your personal data, subject to any legal obligations we have to retain it
- Right to restriction — you can ask us to restrict how we process your data in certain circumstances
- Right to data portability — you can request your data in a structured, commonly used format
- Right to object — you can object to us processing your data for direct marketing purposes at any time
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, please contact us at info@seathechange.org.uk. We will respond within 30 days.
9. Data Security
We take the security of your personal data seriously. Our website is hosted on a secure UK server and we use appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure.
10. Children’s Data
Some of our services, such as the Kids Bike Library, involve the collection of data relating to children. In all such cases, data is collected from and processed with the consent of the parent or guardian. We do not knowingly collect personal data directly from children under the age of 16.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date at the top. We encourage you to review this policy periodically.
12. How to Complain
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
🌐 www.ico.org.uk 📞 0303 123 1113
You may also contact the Office of the Scottish Charity Regulator (OSCR) if you have concerns about our charitable activities: