Privacy Policy
Effective Date: January 2026
Website: www.tartansocialacademy.com
Tartan Social Academy (“we”, “our”, “us”) is committed to protecting and respecting your privacy.
This policy explains how we collect, use and protect your personal data when you use our website, purchase our programmes or interact with us.
We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Tartan Social
Barclays Eagle Labs
BECO Building
58 Kingston Street
Kinning Park
Glasgow
G5 8BP
Email: hello@tartansocial.com
We are the data controller responsible for your personal data.
2. What Information We Collect
We may collect and process the following information:
Information you provide directly:
• Full name
• Email address
• Billing address
• Company name
• Payment information (processed securely via third-party payment providers)
• Information submitted via contact forms or programme enrolment forms
Information collected automatically:
• IP address
• Browser type
• Device information
• Website usage data (via cookies and analytics tools)
3. How We Use Your Information
We use your information to:
• Process course enrolments and payments
• Provide access to purchased programmes
• Communicate with you regarding your account
• Deliver newsletters and marketing communications (if you opt in)
• Improve our website and services
• Comply with legal obligations
We will only process your data where we have a lawful basis to do so, including:
• Contractual necessity
• Legal obligation
• Legitimate interest
• Consent (for marketing communications)
4. Payment Processing
We do not store full payment card details. Payments are processed securely through third-party payment providers such as Stripe, PayPal or other authorised processors. These providers operate under their own privacy policies.
5. Marketing Communications
If you opt in to receive marketing communications, we may send you updates about programmes, events and resources.
You can unsubscribe at any time by clicking the unsubscribe link in any email or contacting us directly.
6. Data Sharing
We do not sell your personal data.
We may share your data with trusted third parties where necessary to operate our business, including:
• Payment processors
• Email marketing platforms
• Website hosting providers
• Course hosting platforms
• Analytics providers
All third parties are required to process your data securely and in accordance with data protection laws.
7. International Transfers
Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including legal, accounting or reporting requirements.
9. Your Rights
Under UK GDPR, you have the right to:
• Access your personal data
• Request correction of inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Request data portability
• Withdraw consent (where processing is based on consent)
To exercise any of these rights, contact: hello@tartansocial.com
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
www.ico.org.uk
10. Cookies
We use cookies and similar technologies to enhance user experience and analyse website traffic.
You can manage cookie preferences through your browser settings.
A separate Cookie Policy may apply.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse.
However, no method of transmission over the internet is completely secure.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.
What to include in the Privacy Policy
Generally speaking, a Privacy Policy often addresses these types of issues: the types of information the website is collecting and the manner in which it collects the data; an explanation about why is the website collecting these types of information; what are the website’s practices on sharing the information with third parties; ways in which your visitors and customers can exercise their rights according to the relevant privacy legislation; the specific practices regarding minors’ data collection; and much, much more.
To learn more about this, check out our article “Creating a Privacy Policy”.