Privacy Policy | fitba.scot

Published March 2026

Introduction
This privacy statement applies to https://fitba.scot. This privacy statement describes how we collect and use the personal information you provide on our website, https://fitba.scot. This privacy statement also describes the choices available to you regarding our use of your personal information and how you can access and update that information. We will likely amend this privacy statement from time to time as website features evolve, so visit this page regularly to keep abreast of the updates. For the purpose of the Data Protection Act 1998, up to and including 24 May 2018, and the EU General Data Protection Regulation 2016/679 thereafter (the Data Protection Legislation), we are the data controller (i.e. the entity responsible for, and that controls the processing of, your personal data collected, stored, processed and shared by Fitba.Scot), in accordance with Article 4(7) UK GDPR. We have data processing agreements in place with all third-party processors, as required under Article 28 UK GDPR.

By visiting https://fitba.scot, you are consenting to the collection, use and disclosure of your information in accordance with this Privacy Policy, as required under Article 13(1)(a)–(g) UK GDPR. If you do not consent to this Privacy Policy, please do not visit https://fitba.scot. If you still have any questions or concerns regarding this Privacy Policy, please email [email protected].

Collection, storage, processing and sharing of your information
When you visit our website, our technology partners may collect and process certain information, such as your IP address, browser, and operating system information for legitimate interests, including website security, function, and performance as permitted under Article 6(1)(f) UK GDPR. See the relevant published privacy policies and data processing agreements in place:
https://www.cloudflare.com/en-gb/privacypolicy and https://www.cloudflare.com/en-gb/terms/
https://hostkoala.com/privacy.html and https://hostkoala.com/dpa.html

Personal data may be transferred to the U.S. by Cloudflare. These transfers are protected under the UK Extension to the EU-U.S. Data Privacy Framework and, where applicable, UK SCCs, in compliance with Chapter V (Articles 44–50) UK GDPR.

Contact Form
The website includes a contact form powered by Ninja Forms and FluentSMTP. When you submit this form, the information you provide, including your name and email address, will be relayed to us via Brevo. On this website Brevo is used only as the mail sender and provides no other function. Hence, Brevo on this website does not store nor process data. We use Zoho Mail to manage your messages. To enhance your privacy, we have implemented Cloudflare Turnstile for spam protection. Before submitting the contact form, you are required to accept the published GDPR compliance checkbox, ensuring your consent for us to process your information as required under Article 6(1)(a) UK GDPR (Consent). See the relevant privacy policies and data processing agreements in place:

1) Brevo: https://www.brevo.com/legal/privacypolicy and https://www.brego.io/legal/dpa

Wpmanageninja advised us by email, “Both Fluent Forms and Fluent SMTP are self-hosted WordPress plugins. This means all data collected through your forms and email logs is stored directly in your own WordPress database on your server. No data is transmitted to or stored on our (WPManageNinja’s) servers. Since we don’t process or store any of your users’ personal data on our end, there’s no data processing relationship between us that would require a DPA.” This website no longer uses Fluent Forms.

Similarly, Ninja Forms does not store nor process data.

2) Zoho Mail: https://www.zoho.com/mail/data-privacy.html

Zoho advised us, “refer to Part II of the Privacy Policy to understand how Zoho processes your data that is input into the Zoho Services. You may further refer to our Security Whitepaper and Compliance page to understand the security measures and compliance upheld by Zoho.”

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, in line with the UK GDPR storage limitation principle.

Contact form submissions: Retained for 1 year from the date of submission, after which they are securely deleted.
Technical data (e.g., IP addresses, logs): Processed by our partners (Cloudflare, HostKoala) for website security and performance. Retained for up to 30 days and not stored by us.
Email correspondence: Retained for 1 year in Zoho Mail for record-keeping and support purposes.

How can you control your personal information?
Fitba.Scot does not directly control the processing of technical data such as IP address, browser, and device information, which is handled by our technology partners for website security and performance. Legally you always have the right to review the personal information kept about you by a website owner under Article 15 UK GDPR. Should you for some reason wish to submit such a request to us, you can request an overview of your personal data by emailing us at [email protected].

Right to be forgotten
We do not directly store your personal data. However, you have the right to request deletion of your information from our partners under Article 17 UK GDPR. We will forward your request to Cloudflare or HostKoala upon verification. To assist in processing your request, please provide the following information:

Your IP address
Approximate date, time, and time zone of your visit

This information is used solely to verify your identity and locate your data with our partners, in accordance with Article 12(6) UK GDPR. Should you for some reason wish to submit such a request to us, you can do so at any time by emailing us at [email protected].

Complaints
You have the right to complain to us about the way we use your information under Article 77 UK GDPR. Please contact us by emailing [email protected] if you would like to communicate to us. If we cannot resolve your complaint, you have the right to complain to the Information Commissioner’s Office, with whom the fee has been paid to register this website. Their contact information can be found at: https://ico.org.uk/global/contact-us/. We hope though that if you have a complaint, you will give us the opportunity first to address your concern.

Contact info for questions related to the processing of your personal data collected by Fitba.Scot
For questions or requests related to fitba.scot personal data, please contact via either:

a) Digital:

Email: [email protected]

b) Paper post:

Data Controller, fitba.scot, Clyde Offices, 2nd Floor, 48 West George Street, Glasgow G2 1BP, Scotland