Privacy policy

1. Who we are

Scottish Insider is an independent project based in Edinburgh, Scotland. It is the data controller for the information described here. The simplest way to reach us is the contact form; choose “Data access or deletion” if your message is about your data.

2. What we collect now

The game is not live. This website is the pre-registration site, so the data we hold is small and deliberate:

• Pre-registration: your email address, an optional area, when and how you consented, and a source label showing which link, video or QR code brought you here.
• Venue enquiries: business name and type, area, your name, email, optional phone and website, your message, and the source label.
• Contact messages: your name, email, chosen topic and message.
• Security logs: our hosting provider records standard technical information such as IP address, browser type and request time so the site can be kept online and abuse can be investigated.
• One cookie: si_src, which remembers the source label for 30 days so a sign-up can be attributed correctly. It is first-party and holds no identity.

We do not run third-party analytics, advertising pixels or session recording. There is no map in the current build, so we do not collect your location. When the game launches, the location rules will be described here before play begins.

3. Why we use it

• To invite you at launch. We use your pre-registration email for that purpose only, with your consent.
• To answer you. We use venue and contact details to reply to your enquiry, on the basis of our legitimate interest in running the project and your request.
• To keep the site safe. Security logs and basic rate limiting protect the forms from abuse, on the basis of our legitimate interests.
• To meet the law. We keep records where we are legally required to.

We do not use your data for profiling, automated decisions, or personalised advertising.

4. Email

We are not sending marketing emails yet. When we email you about the launch, it will be the email you signed up for, it will say who we are, and it will include a way to unsubscribe. You can also ask us to delete your sign-up at any time using the contact form.

5. Who can see it

Access is limited to the owner of Scottish Insider and, where necessary, service providers who host the site and database on our behalf. They process data only on our instructions. If any provider transfers data outside the UK, we rely on the appropriate safeguards for that transfer.

We never sell your data. Partner venues receive aggregate counts only: how many verified visits or redemptions, never who they were. No partner receives your email address.

6. How long we keep it

• Pre-registration: until the game has launched and the invitation has served its purpose, or 24 months after your last interaction, whichever is sooner. Delete it earlier by asking.
• Venue enquiries and contact messages: up to 24 months after the last reply, so we can keep track of what was agreed.
• Security logs: a short period for security and troubleshooting, then deleted.

Deleting your sign-up is a real deletion from the live database. Minimised backups may take a short period to rotate out, and we do not restore individual records into the live system.

7. Your rights

Under UK data protection law you can ask for a copy of your data, ask us to correct it, ask us to delete it, restrict or object to how we use it, or ask for it in a portable format. Where we rely on consent, you can withdraw it at any time.

Use the contact form and choose “Data access or deletion”. Tell us the email address you used. We may ask for proof that it is yours before acting. If you are not satisfied with our response, you can complain to the Information Commissioner’s Office at ico.org.uk.

8. Children

The pre-registration site is not directed at children under 13, and we do not knowingly collect their data. There are no accounts for children in this phase. If you believe a child has signed up, contact us and we will delete it.

9. Cookies

The only cookie we set is the functional si_src source cookie described above. We do not use analytics or advertising cookies, so there is no cookie banner to dismiss. Your browser may also store preferences locally, which you can clear at any time.

10. Changes

If this policy changes materially, the date at the top changes and we will describe what changed. Before the game launches, a fuller policy covering location, visits and rewards will replace this one.

11. Contact

Questions about this policy: use the contact form and choose “General question” or “Data access or deletion”. The terms of use cover the rest of the website.