Privacy Policy

Last updated: 7 November 2026

Who is responsible for your information?

Scalloway.org.uk is an independent hobby website run by Jim McNabb. Jim is the data controller responsible for the personal information handled through this website.

For questions, corrections or privacy requests, email [email protected]. There is no contact form.

Email enquiries

If you email us, we receive your email address, name where supplied, message and any attachments. We use these to answer enquiries, consider corrections and maintain the website. Our lawful basis is our legitimate interest in responding to visitors and running an accurate, useful site. Where a privacy request requires us to act under data protection law, our lawful basis is compliance with a legal obligation.

The mailbox is hosted by 20i and is not automatically forwarded elsewhere. Routine enquiry correspondence is retained for six months after the enquiry is resolved, then deleted from the active mailbox. Information needed for an unresolved complaint, legal obligation or legal claim may be kept for longer, only for that purpose. Deleted information may remain in provider backups until those copies expire.

Comments and public contributions

Comments are enabled on articles where a comment form is shown. WordPress records the details you submit, including your name, email address, optional website address and comment, together with your IP address and browser information. Your name and email address are required to submit a comment; you do not need an account. Your published name, comment and any website link you supply can be seen by other visitors. Your email address is not displayed publicly by the comment form.

We use this information to publish and moderate discussions, respond where appropriate and protect against spam or abuse. Our lawful basis is our legitimate interest in providing and protecting a relevant public discussion. Please do not include private or sensitive information in a comment. WordPress also supports notifications between linking websites, known as pingbacks and trackbacks.

Published comments and their associated records may be retained for as long as the related discussion remains on the site, rather than being deleted after a fixed period. You can ask us to remove or anonymise your contribution. We will consider the request and any legal need to retain information.

Avatars and Gravatar

WordPress avatar display is enabled. It can send a hashed identifier derived from a commenter’s email address to Gravatar to find a profile picture. Hashing does not make this identifier completely anonymous. A picture may appear beside a published comment. Loading an avatar also connects the visitor’s browser to Gravatar, which receives technical information such as an IP address. Gravatar is operated by Automattic; see Automattic’s privacy policy for its handling of that information.

Hosting, security and technical information

The website and email are hosted by 20i, with the website server located in London. Delivering pages and keeping the service secure involves processing technical information such as IP addresses, requested URLs, access times, browser details and errors. The site also uses 20i’s StackCache service and loads a supporting script from its content delivery network.

Our lawful basis is our legitimate interest in operating, securing and troubleshooting the website. Hosting and email providers process information to supply these services; authorised people maintaining the website may access information where needed for administration or support. We do not sell personal information.

20i’s published privacy policy describes log rotation after 12 weeks and retention of infrastructure backups for 12 months. These are provider-wide statements, not a separate backup schedule configured by this website. Backup copies can therefore outlast deletion from the live site or mailbox. See 20i’s privacy policy and data processing agreement.

Cookies

If you choose the comment form’s option to remember your details, WordPress stores your name, email address and website address in cookies on your device for convenience when you next comment. These optional cookies normally last one year. You can leave the option unticked and still comment, or withdraw your choice by deleting these cookies in your browser.

WordPress also uses cookies for administrators and other signed-in users to support login, security and display preferences. Their duration depends on the cookie and whether the user chooses to remain signed in. You do not need to sign in to read our guides. Browser settings let you inspect, block or delete cookies; blocking login cookies can prevent sign-in.

We do not currently use an audience analytics service, advertising trackers or a newsletter service. This does not mean that no technical information is processed: hosting, comments and the external services described here still involve data handling.

Embedded maps and external websites

The village map page includes an embedded OpenStreetMap map. When the map loads, your browser connects directly to OpenStreetMap and its map delivery providers. They receive information including your IP address, browser details and the map resources requested. OpenStreetMap Foundation handles this information as an independent controller. Its map delivery uses a worldwide content delivery network, so processing is not limited to London. Read its privacy policy and privacy information for map users.

We provide the map in our legitimate interest in helping visitors find their way around Scalloway. Links to accommodation, shops, attractions and other websites take you to services governed by their own privacy notices.

Processing outside the UK

A London website server does not mean that every service processes information only in the UK. 20i states that some service providers operate outside the UK or European Economic Area and that it uses applicable adequacy decisions or contractual safeguards for relevant transfers. External services such as Gravatar and OpenStreetMap may also process information internationally under their own policies, linked above. Contact us if you need further information about the safeguards relevant to information we control.

Your rights

Depending on the circumstances, you can ask to access or correct your personal information, have it erased, restrict its use, or receive it in a portable form where that right applies. You can object to processing based on legitimate interests. Where we rely on consent, you can withdraw it without affecting the lawfulness of earlier processing.

Email [email protected] to exercise these rights. We may need proportionate information to verify your identity. We normally respond within one month; if a lawful extension is needed, we will explain why. We do not use personal information for automated decisions producing legal or similarly significant effects.

You can complain to the UK Information Commissioner’s Office. You are welcome to contact us first, but you do not have to do so before raising a concern with the ICO.

Changes to this policy

We will update this notice when the site’s services or data handling change. The date at the top shows when it was last revised.