Privacy Policy and Data Protection

As with all shopping websites, we collect personal information from you when you shop online at ScotlandShop.com. Our privacy policy explains how we collect and process this data, why we need it and how it is used and kept secure. We protect our customers against unsolicited mail and will not make your name or details available to any other companies without your permission. At any stage you also have the right to ask us to stop using your personal data for direct marketing purposes. You can opt-out or request that we delete your personal data at any time by emailing us or by using the privacy controls within your account. See below for your rights in regard to personal information and data.

 

The Data We Collect:

Identity and Contact Data

When you use our services and submit any forms (for orders, information requests, Livechat, newsletter sign-ups, competitions, surveys and reviews) we collect and use this information to make your shopping experience as easy and enjoyable as possible. We use this data to process your order, inform you of any delays or problems and if you have asked us to do so to send you special offers and promotions, or information about our products and services. We will also use this data to improve our products and services and grow our business.

Payment and Transactional Data

We will retain records of your orders and delivery details to allow you to keep track of sizes and tartans previously ordered and make reordering quick and easy. Payments made via our website are processed securely by Stripe and Paypal Merchant Services. Full details of their security policy can be found on their websites. We do not store or retain payment details such as credit card numbers. Any account details entered for direct bank payments are not available to us but are retained by our bank Royal Bank of Scotland and their security policy can be found here.

General Correspondence Data

Conversations we have with you by phone, WhatsApp, Livechat and email may be maintained by us so we can better answer your questions and sort out your orders in the future. We may also collect information from conversations with us or about us on other platforms such as reviews and social media. We use this data to enable us to offer you the top notch, personalised customer service you expect from a quality Scottish company.

Technical and Website Usage Data

We will ask you to consent to our use of cookies in accordance with the terms of this policy when you first visit our website and based on this agreement we may process usage data including your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths along with information about the timing, frequency and pattern of your use of our website. This information is sourced via Google Analytics and allows us to ensure our website and service is maintained to the highest standards. Please see our Cookie Policy for further information. We use this data improve and personalise your shopping experience with us, this includes remembering your preferences so you don’t have to keep entering the same information, showing you your favourite tartans or products and allowing you to view previous orders. We will also use this information to help us design new products and services to benefit our customers.

Marketing and Communications

We will use your data to send you transactional information such as order confirmations and updates, and to let you know about services and any changes to our policies and terms. We will also send you newsletters, product and special offers from time to time by post, email or WhatsApp if you have opted in to receive these. You may request that we unsubscribe you at any time by email or by changing your settings in your account. Please include your postal address as well as your full name and email address so we can ensure we have the correct customer. Please note while email unsubscribes are relatively immediate printed mailers are prepared in advance and may take up to 4 weeks to take effect.

CCTV Footage

Under the UK GDPR and the Data (Use and Access) Act 2026, we process CCTV footage based on our Legitimate Interests. The specific purposes for capturing this data are:

  • Preventing, detecting, and prosecuting criminal activity (such as shoplifting, vandalism, and fraud).
  • Ensuring the personal safety of our customers, visitors, and retail staff.
  • Assisting law enforcement and insurance providers with formal incident investigations.

We do not use our CCTV systems for any other hidden purposes, nor do we use them to monitor the daily performance of our staff members.

  • Data Retention Period

    CCTV footage is recorded continuously and is securely stored on either an encrypted local server or on "securely stored in an encrypted cloud environment hosted by Amazon Web Services (AWS)  . Footage is automatically overwritten and permanently deleted after 30 days, unless it is actively required as evidence for an ongoing legal claim, insurance dispute, or police investigation.

     

  • Data Sharing and Third Parties

    Your recorded images will remain strictly confidential and will only be accessed by authorized store management. Footage will only be shared with external third parties under strict legal obligations, including:

    Police and law enforcement agencies for crime detection.

     

  • Data Security

    We implement strict physical and digital security measures to protect your footage. The recording equipment is kept in a locked room, and digital access is restricted via secure, password-protected profiles.

     

  • Your Rights (Subject Access Requests)

    You have the right to request a copy of any CCTV footage in which you are clearly identifiable. To submit a Subject Access Request (SAR), please contact us at the email address listed above.

    To help us locate the correct clip, you must provide the exact date, time, and specific location of your visit, along with a recent photograph to help us verify your identity. We will respond to your request within one calendar month. Please note that we will blur or redact the faces of other individuals to protect their privacy before releasing any footage to you.

 

 

Sharing Your Data

We protect our customers against unsolicited mail and will certainly not sell your name or details to any other companies without your permission. ScotlandShop is a registered data user under the Data Protection Act and we comply with the recent GDPR updates. We will never pass your details on to a third party for marketing purposes

Information We May Share: 

Agents 

Including credit card clearing agencies (Stripe and Paypal Merchant Services in UK, and RBS in the UK) that we use to process the orders you place with us or who assist us in the service we provide to you. In these instances, we provide them with only the information they need to perform their function. 

Delivery agents 

We use Royal Mail, DPD, DHL, Fedex and Parcelforce to deliver our parcels and we will share your delivery information with them so you can receive your parcel. 

Service providers 

Your information may be available to a greater or lesser extent to the following companies who support our business. We will always provide the minimum amount of information or access necessary to allow them to do their jobs, and we lay down strict restrictions on how partners can use and disclose this data wherever possible. 

Service providers include those such as:

  • Our Web Developers - White
  • Our digital marketing agency - The Lane
  • Our data hosts - Amazon Web Services, Livechat and email providers Hubspot 
  • Professional advisers including lawyers, bankers, accountants, auditors and insurers
  • Outside research companies such as Trustpilot whom we may ask to contact you directly for your opinions on our products and services (in which case we provide them with only the information they need to perform their function). 

Change of ownership

In the very unlikely event that our business assets are ever sold to or purchased by another company. (Our data records are part of our business).

 

The Lawful Basis For Processing Your Data

Our privacy policy above confirms how we will collect, use and share your data and we do this to allow us to perform and fulfill our contract with you and comply with our legal obligations as part of our legitimate business interest to provide quality Scottish products and services to you and others. This will be done with your consent and you can change this at any time by updating your account or profile.

 

Your Legal Rights

You can opt out or ask us to stop using your personal data for direct marketing purposes at any time by emailing us or by using the privacy controls within your account. See below for your rights in regard to personal information and data:

  • You can request access to your personal data
  • You can request correction or changes to your personal data
  • You can request at any time that we do not process your personal information for marketing purposes
  • You can also request that we delete all information we hold about you and any previous orders. Please note that this does mean we cannot look back and confirm sizes or tartans from your order history if you wish to order with us again 
  • You may request details of any personal information we hold about you and how we use this information. Data requested deemed as excessive or repeated may be subject to a fee. We will require proof of identity before we can supply any personal data. You can update your profile at any time on our website. You can also review our Cookie Policy which provides a guide to removing data saved in cookies.

 

Changes To Our Privacy Policy 

We will contact you directly if we make an substantial changes to our privacy policy and the way we use your personal data.

 

Cookie Policy

The ScotlandShop website (www.scotlandshop.com) places cookies, which are small data files, on your computer or handheld device. This is standard practice for all websites. A Cookie can be thought of as an Internet user’s identification card and lets the website know when a user has returned to bring up relevant information such as your name, past orders, etc. 

The Different Types Of Cookies We Use:

Essential Cookies 

To allow you to use the basic functions such as browsing our tartan products, placing orders and making payments, accessing your account if you have one and viewing your current and previous orders. 

Performance Cookies  

These allow us to look at usage of our website, how many visitors we have and how you are finding us. We use this information to improve your browsing experience, improve our website and show you the products and information you want to see.

Functionality Cookies  

These allow us to provide extra functionality such as pricing in alternative currencies and retain this information for your next visit. These cookies are not essential to the operation our website but they do really improve your user experience. 

Targeting Cookies  

We also use cookies to track visitors' interest in our products. We may use this information to understand which products and information most appeals to our customers so we can make our offers as relevant as possible.

 

Cookies are essential for helping us deliver a high quality website and online shopping experience for our customers. and some collect information about browsing and buying behaviour. By using and browsing the ScotlandShop website, you consent to cookies being used in accordance with our policy. If you do not consent, you must disable cookies or refrain from using the site. 

 

For more information about cookies, including how we use them and how to disable them, please email us at [email protected] for our full Cookie Policy 

 

Questions?

If you have questions about your personal data or our privacy policy, please contact us at [email protected] . To see all the information we have about you, and to correct any inaccuracies, please write to: The Data Protection Officer, ScotlandShop, Station Road Industrial Estate, Duns, Berwickshire, Scotland, TD11 3EJ