Legal

Privacy Policy

Last updated 23 September 2026

This policy explains what Paisley.org.uk does with personal data. It describes what the site actually collects rather than every eventuality: if something here does not match your experience of the site, tell us and we will correct it.

Who we are

Paisley.org.uk is a community news and information site for Paisley, Renfrewshire, operated from 14 High Street, Paisley, Renfrewshire PA1 2BS, Scotland. We are the data controller for the information described below. For anything to do with your data, contact brian@paisley.org.uk or call 07957 166339.

What we collect, and why

When you use the contact form. Your name, email address, subject and message. We store the message so we can answer it and keep a record of the conversation.

When you subscribe to the newsletter. Your email address, so we can send the newsletter. Every email has an unsubscribe link and unsubscribing is immediate.

When you enquire about a property. Your name, email, phone number if you give one, and your message. This is passed to the estate agent marketing that property so they can reply to you — that is the whole point of the form.

When you submit an event. Your name and email, so we can verify the listing is genuine and come back to you if a detail is unclear.

When you subscribe to Incident Watch. You sign in with Google, which gives us your name and email address. Payment is handled by Stripe — card details go straight to Stripe and never reach our servers. We store your subscription status so we know what you are entitled to, and your email so we can send the alerts you paid for.

Automatically, as you browse. Standard web analytics (see Cookies below) and, for security, the IP addresses of requests to the admin login and to known vulnerability-scanning paths — used only to rate-limit and block attacks.

We do not buy personal data, we do not sell or rent it, and we do not build advertising profiles about you.

Our lawful basis

Contact, event submissions and property enquiries are handled on the basis of legitimate interests — you contacted us and expect a reply. The newsletter and Incident Watch alert emails are sent with your consent, which you can withdraw at any time. Incident Watch subscriptions are also processed to perform our contract with you. Security logging rests on our legitimate interest in keeping the site available.

Who else processes your data

We use a small number of established suppliers. They act on our instructions and are not permitted to use your data for their own purposes:

  • Resend — sends our email (replies, newsletter, Incident Watch alerts).
  • Stripe — takes and manages Incident Watch subscription payments.
  • Google — sign-in for Incident Watch, and Google Analytics.
  • Cloudflare and our hosting provider — serve the site and filter attacks.
  • Estate agents — receive the property enquiry you asked us to pass on.

We will also disclose information if the law requires it. Some of these suppliers operate outside the UK; where they do, transfers rely on the UK's adequacy regulations or standard contractual clauses.

Cookies and analytics

We use Google Analytics 4 to count visits and see which articles are read. It sets cookies in your browser and records a shortened version of your IP address. We do not use it to identify you personally, and we do not run advertising or retargeting cookies.

Analytics only runs if you allow it. The notice you see on your first visit starts with analytics switched off, and nothing is measured unless you choose "Allow analytics". You can change your mind at any time using the link, which also sits in the footer of every page.

If you sign in to Incident Watch, a session cookie keeps you signed in. Admin users have a login token stored in their own browser. Nothing else is stored on your device.

You can block or delete cookies in your browser settings, or install Google's opt-out add-on. The site works normally without them, apart from staying signed in.

Affiliate and sponsored links

Some links — accommodation, tickets and a few product recommendations — are affiliate links, meaning we may earn a commission if you book or buy. Those are marked, and the partner's own privacy policy applies once you leave our site. Commission never changes what we choose to cover.

How long we keep things

Contact messages and event submissions are kept for two years, then deleted. Newsletter subscriptions are kept until you unsubscribe. Property enquiries are kept for two years so we can evidence the leads we sent an agent. Incident Watch account and billing records are kept for as long as you subscribe and then for six years, because HMRC requires us to keep records of payments. Security logs are kept for 30 days.

Your rights

Under UK GDPR you can ask for a copy of the data we hold about you, ask us to correct it, ask us to delete it, object to how we use it, or ask us to restrict its use. Email brian@paisley.org.uk and we will respond within one month. There is no charge.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can put it right.

Children

The site is written for a general audience and is not aimed at children. We do not knowingly collect data from anyone under 13. If you believe a child has sent us personal information, contact us and we will delete it.

Changes to this policy

If we change how we handle personal data we will update this page and the date at the top. Material changes affecting newsletter or Incident Watch subscribers will be sent by email.

See also our Terms of Service.

We use Google Analytics to count visits and see which stories are read. Nothing is used to identify you, and we run no advertising cookies. Read our privacy policy.