Skip to content

Privacy Policy

Last updated: 15 September 2026

This policy explains how Rural Projects uses personal information through this website and when you contact us about our event services.

Who we are

Rural Projects is an events business. The website identifies the business as Rural Projects Ltd.

TODO: confirm the full legal name of the data controller, its registered address and any applicable data protection officer contact details before final approval.

For website or privacy enquiries, email enquiries@ruralprojects.co.uk or write to Rural Projects Ltd, PO Box 13601, Linlithgow, EH49 9BL. TODO: confirm that these published contact details are the correct route for privacy requests and that the postal address remains current.

Information we collect

  • Enquiries: your first and last name, email address, optional telephone number and company, enquiry type, message and subsequent correspondence.
  • Technical information: IP address, browser and device information, requested pages, request times, errors and security records generated when the site is used.
  • Preferences: your cookie choices, stored in your browser so that we can respect them.
  • Analytics, if enabled and accepted: information about visits, pages viewed and interactions used to understand website performance. Google Analytics is prepared for this site but requires final production configuration.

Please do not include sensitive personal information in an ordinary enquiry. You can browse without completing the form. Without the required contact fields, we may be unable to respond through that form.

How we use information and our lawful bases

  • Answering enquiries and discussing services: our legitimate interests in communicating with prospective clients and running the business. Where you ask us to take steps towards a contract with you, we may rely on those pre-contractual steps or performance of that contract.
  • Operating and protecting the website: our legitimate interests in providing a reliable service, preventing spam and abuse, and investigating technical problems.
  • Optional website analytics: your consent, which you may withdraw through Cookie preferences.
  • Legal and regulatory requirements: compliance with an applicable legal obligation where one requires us to keep or disclose information.

We do not use your enquiry as permission to send unrelated marketing. This website does not make decisions with legal or similarly significant effects about you solely by automated means. TODO: confirm these processing purposes and lawful bases against the business’s actual practices.

Cookies and analytics

Cookies and similar browser storage support website functions and can help measure usage. Our preferences interface has two categories:

  • Essential: session and form-security features, protection against abuse, and remembering your consent choices. These support the service you request and cannot be switched off in our preference panel.
  • Analytics: optional Google Analytics measurement. The Google Analytics script is not loaded by this implementation until you choose to allow analytics.

You can Accept all, Reject non-essential, or Manage preferences. Reopen Cookie preferences from the footer at any time. Rejecting analytics leaves the website and enquiry form available. Withdrawing analytics consent stops further analytics loading and clears accessible Google Analytics cookies set by this site; it does not undo information already processed lawfully.

Your preference is remembered in this browser for up to 180 days, unless you change it or clear browser storage. Your browser also provides cookie controls. TODO: confirm the production cookie inventory, Google Analytics property and retention settings before activating analytics.

Service providers and sharing

Website hosting, maintenance, email and security providers may handle information needed to provide their services. The enquiry implementation uses Postmark for message delivery and Cloudflare Turnstile for anti-spam checks when configured. Technical data is also exchanged with providers serving the site’s fonts, icons and supporting files, including Google Fonts, Font Awesome and its content-delivery providers.

Google Analytics will receive analytics information only after your analytics choice permits loading. Information may also be shared with professional advisers or authorities where necessary for a legal requirement or to establish, exercise or defend legal claims.

TODO: confirm the hosting company, website support provider, recipient mailbox provider, relevant legal entities, processor agreements and any other production services. During development, enquiries are configured to route to the website developer; confirm the final recipient and authorised access before launch.

Social links and external content

Following a link to Facebook, X, LinkedIn or an event website takes you to a service with its own privacy practices. A normal social link does not itself embed a social feed on this site. If videos, maps or other external embeds are added later, their data use and any necessary consent controls must be reviewed before they are enabled.

International transfers

Some service providers may process information outside the UK. Where a restricted transfer occurs, an appropriate UK transfer mechanism must be in place, such as applicable adequacy arrangements or contractual safeguards supported by the required assessment. Contact us for details of the safeguards relevant to your information.

TODO: confirm actual processing locations and the transfer arrangements for each provider; no particular location or safeguard is assumed by this draft.

How long we keep information

We retain information for the period needed to handle the enquiry or service, meet applicable obligations and resolve relevant disputes. We should then delete or anonymise it, including through appropriate backup and log-retention schedules.

  • Enquiries and correspondence: TODO: confirm retention period and deletion process.
  • Server, security and email delivery logs: TODO: confirm each provider’s retention period.
  • Analytics records: TODO: confirm the configured Google Analytics retention period before activation.
  • Browser consent preferences: up to 180 days.

Security

The website uses HTTPS and form-security measures, including server-side validation and anti-spam verification when configured. Access to enquiry information should be limited to authorised people who need it for their work. No online service can guarantee absolute security. TODO: confirm organisational access, backup and incident-response arrangements.

Your rights and withdrawal of consent

Depending on the circumstances and lawful basis, UK data protection law gives you rights to:

  • access your personal information and receive a copy;
  • correct inaccurate or incomplete information;
  • request deletion or restriction of processing;
  • object to processing based on legitimate interests, and to direct marketing;
  • receive certain information in a portable format; and
  • withdraw consent without affecting processing that was lawful before withdrawal.

Use the contact details above to make a request. We may need proportionate information to verify your identity. We will explain any applicable exception and respond within the time required by law. For analytics consent, use Cookie preferences in the footer.

Complaints

Please contact us if you have a concern about our handling of your information. You also have the right to complain to the UK Information Commissioner’s Office, including without contacting us first. Visit ico.org.uk/make-a-complaint for information about raising a concern.

Updates to this policy

We may update this policy to reflect changes to the website, our services or legal requirements. The date above identifies the latest version. Material changes will be communicated as appropriate.