Privacy policy

At Scotland the Bread we are committed to maintaining the trust and confidence of our customers, shareholders, members and website visitors. Here you’ll find information on how we treat data that we keep.

Who we are

Our website address is:

What personal data we collect and why we collect it

Visitors to our Website

When someone visits we use Google Search Console to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This search data is currently retained for 26 months. Visitor information, for example IP addresses, are automatically anonymised. This information is processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

If we do want to collect personally identifiable information through our website, we will make it clear when we are doing so and will explain what we intend to do with it.

Newsletter Sign-up Form

We keep the following data provided by people who sign up to the newsletter: first name, last name and email address. It helps us to send the newsletter to you and personalise the greeting. You can unsubscribe from the newsletter at any time by using the unsubscribe link on the bottom of the newsletter or by emailing our data protection officer Andrew Whitley ( We don’t rent or trade email lists with other organisations and businesses.

We use a third party provider, MailChimp, to deliver our newsletter. We gather statistics about email opening and clicks using industry-standard technologies to help us monitor and improve our e-newsletter. For more information, please see MailChimp’s privacy notice.


We keep the following data provided by customers through the Buy Shares page of the shop: first name, last name, company name, country, street address, town/city, County, postcode, phone number and email address. If shares are bought on behalf of another party we also collect the following data about them: date of birth. This data helps us to keep in touch and fulfil the requirements of the Community Shares Standard.


We keep the following data provided by customers through the Subscribe page: first name, last name, company name, country, street address, town/city, County, postcode, phone number and email address. It helps us to keep in touch with you.


We keep the following data provided by customers through the Donate page: first name, last name, company name, country, street address, town/city, County, postcode, phone number and email address. It helps us to keep in touch with you.


We keep the following data provided by customers through the Shop pages: first name, last name, company name, country, street address, town/city, County, postcode, phone number and email address. These details help us fulfil your orders and help you by remembering your details for subsequent purchases (see also Cookie Policy below). You can amend your account details and delete your account at any time by logging-in to your account or contacting our data protection officer Andrew Whitley (

Security Logs

The IP address of visitors, user ID of logged-in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 14 days.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

This site is scanned for potential malware and vulnerabilities by Sucuri’s SiteCheck. We do not send personal information to Sucuri; however, Sucuri could find personal information posted publicly (such as in comments) during their scan. For more details, please see Sucuri’s privacy policy.

How long we retain your data

For users that register on our website, we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information. Security logs are retained for 14 days.

What rights you have over your data

You have the following rights:

  • the right to ask what personal data we hold about you
  • the right to ask us to update and correct or delete any out-of-date or incorrect personal data that we hold about you
  • the right to opt out of any marketing communications that we may send you

To exercise any of the above rights please contact our data protection officer Andrew Whitley.

How we protect your data

Your data is stored on a secure server at Please see their data security plocy for more details.

Changes to this Privacy Policy

We keep our privacy notice under regular review. This privacy notice was last updated on 18th September 2019.

Cookie Policy

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you open an account and log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

We use a system of classifying the different types of cookies which we use on the Website, or which may be used by third parties through our websites. The classification was developed by the International Chamber of Commerce UK and explains more about which cookies we use, why we use them, and the functionality you will lose if you decide you don’t want to have them on your device.

What is a cookie?

Cookies are text files containing small amounts of information which are downloaded to your personal computer, mobile or other device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognises that cookie. Cookies are useful because they allow a website to recognise a user’s device.

How long are cookies stored for?

Persistent cookies – these cookies remain on a user’s device for the period of time specified in the cookie. They are activated each time that the user visits the website that created that particular cookie.

Session cookies – these cookies allow website operators to link the actions of a user during a browser session. A browser session starts when a user opens the browser window and finishes when they close the browser window. Session cookies are created temporarily. Once you close the browser, all session cookies are deleted.

Cookies do many different jobs, such as letting you navigate between pages efficiently, remembering your preferences, and generally improving the user experience.

You can find more information about cookies at and

Cookies used on the Scotland the Bread website

Strictly necessary cookies

These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.

Analytical/performance cookies

They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.

Functionality cookies

These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

Targeting cookies

These cookies record your visit to our website, the pages you have visited and the links you have followed. Many websites use this information to make advertising more ‘relevant’ to your interests. Scotland the Bread does not accept or use paid advertising on its website and we do not knowingly share information from ‘targeting cookies’ with third parties for this purpose.

Third party cookies

These cookies allow third parties to track the success of their application or customise the application for you. Because of how cookies work we cannot access these cookies, nor can the third parties access the data in cookies used on our site. For example, if you choose to ‘share’ content through Twitter or other social networks you might be sent cookies from these websites. We don’t control the setting of these cookies, so please check those websites for more information about their cookies and how to manage them.