Privacy policy
How the Shore Kirk collects, uses and protects your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Last updated: 13 October 2026.
1. Who we are
The data controller is Kilmun, Strone & Ardentinny: The Shore Kirk (Church of Scotland), Scottish charity SC003410, acting through its Kirk Session, 34 Sandhaven, Sandbank, Dunoon, Argyll PA23 8QN. For any question about your data, email [email protected] with the subject "Data protection", or write to us at the address above.
2. What data we collect
- Identity and contact details: title, name, address, postcode, email address and phone number.
- Date of birth, and where needed proof of age and address, to confirm you are 18 or over.
- Lottery records: your Lottery Numbers, number of Entries, limits, draw history, prizes won and any break or self-exclusion.
- Payment information: payment status and the last digits of your account or card. Full bank and card details are collected and held by our payment provider, not by us.
- Donations and Gift Aid: donation amounts and your Gift Aid declaration.
- Communications: messages you send us, complaints and your marketing preferences.
We do not use cookies to track you. See our cookie policy.
3. Why we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Running the Lottery: entries, draws, tickets, paying prizes | Contract |
| Checking your age and eligibility; keeping lottery records and making returns to Argyll and Bute Council | Legal obligation (Gambling Act 2005) |
| Applying limits, breaks and self-exclusion; protecting players from harm | Legitimate interests, and legal obligation where it applies |
| Preventing fraud and keeping our systems secure | Legitimate interests |
| Claiming Gift Aid on donations | Legal obligation (HMRC requirements) |
| Sending news by email | Consent, which you can withdraw at any time |
| Answering your enquiries and complaints | Legitimate interests |
4. Who we share it with
- Our payment provider, which processes Direct Debits and card payments and helps us confirm your identity and age.
- Our email and IT providers, who store data on our behalf under contract.
- HM Revenue & Customs, for Gift Aid claims.
- Argyll and Bute Council, the police or other authorities, only where the law requires it. Our lottery returns to the Council contain totals, not players' personal data.
We never sell or rent your data, and we never share it with other charities or businesses for their marketing. Where a provider stores data outside the UK, we make sure appropriate safeguards are in place, such as UK adequacy regulations or approved contract clauses.
5. How long we keep it
- Lottery account and draw records: while you play and for 3 years after your account closes.
- Self-exclusion records: for the length of the exclusion plus 1 year, so we can honour it.
- Gift Aid declarations and donation records: 6 years after your last donation, as HMRC requires.
- Contact form messages and complaints: 2 years after the matter is closed.
- Marketing preferences: until you unsubscribe, after which we keep only a note not to contact you.
6. Your rights
You have the right to: be informed; access your data; have it corrected; have it erased (where we do not need to keep it by law); restrict or object to our use of it; data portability; and withdraw consent at any time. To use any of these rights, contact us as in section 1. We will reply within one month and will not charge a fee.
7. Keeping your data safe
Access to lottery records is limited to a small number of trained volunteers. Accounts are password-protected and paper records are kept locked. Our website uses HTTPS.
8. How to complain
If you are unhappy with how we have used your data, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, helpline 0303 123 1113, or write to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
9. Changes to this policy
We will post any changes on this page and update the date above. If a change significantly affects how we use your data, we will tell you directly.