Statement
The ASSC respect and wish to protect the privacy of those who visit our site and use our services. The information below explains how we use the information that we collect.
The ASSC is the data controller. This means we decide how your personal data is processed and for what purposes.
Any personal data provided to us will be processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, including the data protection principles and the rights of individuals.
The purpose(s) of securely processing your personal data
We use your personal data for the following purposes:
Data collection through research methods: We may collect information through research questionnaires, consultations and surveys to help inform our policy work, advocacy, service development and research. Participation is voluntary and, where personal data is requested, it will only be collected with your consent or another appropriate lawful basis under the UK GDPR.
The ASSC currently uses SurveyMonkey to conduct surveys. Depending on the purpose of the survey, we may collect personal information such as your name, contact details, opinions, demographic information and, where clearly stated, supporting documents uploaded by respondents (for example, copies of utility bills or other evidence relevant to the research).
Where documents containing personal information are requested, we will only collect information necessary for the stated purpose of the research. We encourage respondents to remove or redact account numbers, payment details and any other information that is not relevant before uploading documents.
Survey responses and any uploaded documents will only be accessed by authorised ASSC staff and, where applicable, trusted research partners acting on our behalf. Information will be used only for the purposes described in the survey and will normally be reported in an anonymised or aggregated form unless you have explicitly agreed otherwise.
Survey data will be retained only for as long as necessary for the purpose for which it was collected, after which it will be securely deleted or anonymised. Please refer to SurveyMonkey’s Privacy Policy for further information about how it processes personal data on our behalf.
You may give us information about yourself by filling in forms on our sites and/or, by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you register to use our site, subscribe to our service, participate in social media functions on our site, and when you report a problem with our site.
We will contact you in the following ways
If you would like to change your contact preferences, please email us administrator@assc.co.uk
What justification is there for holding this information?
We hold this information under the lawful basis for processing of:
Providing us with your personal data
We require certain personal data where it is necessary to administer membership, event attendance, subscriptions or other services you have requested. Participation in surveys and research is voluntary, and you may choose whether or not to provide personal information or supporting documents requested as part of a research project.
How is data stored?
Membership
Your membership data, including your personal information (name, contact details, payment information, and membership preferences), is stored securely in our database. This data is used solely for the purpose of managing your membership and providing related services, such as sending updates about ASSC activities and events.
For payment processing, we use Stripe, a third-party payment provider, to securely handle any membership fees or donations. Stripe processes your payment information in accordance with its own privacy policy, which we encourage you to review. ASSC does not store or have access to your full payment details, such as credit card numbers, as they are handled securely by Stripe.
Mailchimp Membership and Newsletters
When you sign up as a member of the ASSC or subscribe to our newsletter, your details will be added to our Mailchimp mailing list. This allows us to send you updates about ASSC activities, news, partner news and events. From time to time, we will be sharing surveys requesting feedback.
You have the right to opt-out of receiving these communications at any time by following the unsubscribe link provided in each email or by contacting us directly: communications@assc.co.uk
As Mailchimp is a third-party service, we recommend reviewing their privacy policy to understand how they handle your data. You can read it here: Mailchimp Privacy Policy.
Events
Data for ASSC events is stored by a third-party company Eventbrite. If you register for an event, your data will be automatically added to the Eventbrite database for processing in accordance with their Privacy Policy and Terms of service.
You may withdraw your consent at any time by contacting ASSC: communications@assc.co.uk or you can withdraw through Eventbrite.
Donations
When you make a donation to the Association of Scotland’s Self-Caterers (ASSC) through our online donation platform (such as Donorbox), we collect the personal information you provide, such as your name, email address, donation amount, and payment details. This information is used solely for the purpose of processing your donation and communicating with you about your contribution.
Your donation will be processed through a third-party payment processor Stripe in order to complete the transaction, but we will not share it with other third parties unless we are required to do so by law or with your express consent.
How We Use Donation Data:
You can contact us at any time to request that your donation data be updated or removed from our records.
Please see the Advocacy Fund Terms and Conditions here.
The categories of personal data concerned
We process the following categories of your data:
Ordinary personal data may include personal identification details such as your name, postal address, date of birth, email address, telephone number(s), details of your self-catering business, membership information, event registration details and information you choose to provide when completing surveys or participating in research.
Where relevant to a particular research project, this may also include supporting documents voluntarily uploaded by you, such as utility bills or other evidence requested for research purposes. We will only collect information that is necessary for the stated purpose of the research.
Do we share your information?
The ASSC will only share your personal information where it is necessary to deliver our services, administer membership, process payments, deliver events, undertake research, or where required by law. We use trusted third-party service providers, including Stripe, Mailchimp, Eventbrite, SurveyMonkey and Donorbox, who process personal data on our behalf under appropriate contractual arrangements and in accordance with applicable data protection legislation. We do not sell your personal information.
How long do we keep your personal data?
We keep your personal data only for as long as is reasonably necessary for the purpose for which it was collected. Membership and subscription information will normally be retained for the duration of your membership or subscription and for any additional period required to meet legal, regulatory or accounting obligations. Research and survey responses, including any supporting documents provided, will be retained only for as long as required for the relevant research project before being securely deleted or anonymised.
Where survey responses have been anonymised and incorporated into aggregated research findings, it may not be possible to identify or remove an individual’s contribution from those published findings.
Your rights around the information we hold
The UK GDPR provides the following 8 rights for individuals:
Third-Party Services
ASSC integrates with trusted third-party services, including Stripe, Mailchimp, Eventbrite, SurveyMonkey and Donorbox, to provide membership services, communications, event registration, payment processing, fundraising and research. Where these providers process personal data on our behalf, they do so in accordance with their own privacy policies, applicable data protection legislation and appropriate contractual safeguards.
ASSC is not responsible for the data practices of these third-party sites. By using their services through our website, you agree to their terms and conditions.
Please visit https://ico.org.uk/ for further information on this, alternatively contact communications@assc.co.uk
If you think your data has been misused or that we have not kept it secure, please contact communications@assc.co.uk. If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Information Commissioners Office on 0303 123 1113, https://ico.org.uk/make-a-complaint/data-protection-complaints/data-protection-complaints/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England.
Changes to our privacy policy
Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.
This policy was last updated on 9th July 2026