Privacy Policy

 

​1. Overview

AFF Missions SCIO is committed to protecting your privacy and using personal data responsibly, transparently, and lawfully.

This policy explains:

• what data we collect

• how and why we use it

• how cookies are used on our website

• your rights under UK data protection law

We only collect information that is necessary to operate our website, communicate clearly, and meet our legal and governance responsibilities.

​

2. Who We Are

AFF Missions SCIO is a Scottish Charitable Incorporated Organisation (SCIO).

We act as the data controller for any personal information collected through this website.

If you have questions about this policy or how your data is used, you can contact us via the details on our Contact page.

​

3. Information We Collect

We may collect limited personal information when you:

• contact us via a form or email

• sign up for updates or communications

• make a donation or enquiry

• interact with our website analytics (see Cookies section)

This may include:

• name

• email address

• message content

• technical data such as browser type or device (non-identifying)

We do not collect special category data through this website.

​

4. How We Use Your Information

We use personal information only to:

• respond to enquiries

• provide information you have requested

• manage supporter or partner relationships

• meet legal or regulatory obligations

• improve how our website functions

We do not sell data, use it for profiling, or share it for commercial purposes.

​

5. Cookies

Cookies are small text files placed on your device to help websites function effectively.

​

Types of cookies we may use:

Essential cookies
These are required for the website to function properly (for example, page navigation or security).

Analytics cookies
These help us understand how visitors use the site (e.g. which pages are visited most), so we can improve content and accessibility.
These cookies do not identify individuals.

We use cookies in a proportionate and privacy-respecting way, consistent with ICO guidance.

You can control or disable cookies through your browser settings.

​

6. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Legitimate interest – to operate and improve our website responsibly

• Consent – where you choose to contact us or sign up for updates

• Legal obligation – where required for compliance

​

7. Data Storage and Security

We take reasonable steps to ensure personal data is:

• stored securely

• accessed only by authorised persons

• retained only for as long as necessary

We regularly review our data handling practices as part of our governance and accountability approach.

​

8. Sharing Your Information

We do not share personal data with third parties except where:

• required by law

• necessary to operate the website (e.g. secure hosting or analytics providers)

• you have explicitly agreed

Any third parties used are required to meet appropriate data protection standards.

​

9. Your Rights

You have the right to:

• access your personal data

• request correction or deletion

• withdraw consent

• object to certain types of processing

• lodge a complaint with the Information Commissioner’s Office (ICO)

Requests can be made via our Contact page.

​

10. Changes to This Policy

We may update this policy from time to time to reflect changes in law or practice.
The most current version will always be available on this website.

​

11. Contact

If you have questions about this policy or how your data is handled, please contact us via the Contact page.​

​

Last updated 30/12/2025

​