Love ScotlandMessage from Scotland

Privacy Policy

Last updated: 3 October 2026

This Privacy Policy explains how Message from Scotland, operated by Love Scotland ("we", "us", "our"), collects, uses, and protects your personal data when you use our Service at message.lovetovisitscotland.com.

1. Data We Collect

When you send a card through our Service, we collect:

  • Sender information: your name and email address
  • Recipient information: their name and email address
  • Card details: which card was selected, the personal message written, and the subject line
  • Usage data: pages visited, browser type, and general analytics collected via Google Analytics
  • Reminder details: if you set a reminder, the name and date you enter, and the email address we send it to
  • Sign-up details: if you join our list, your email address and first name, and which page you signed up on

2. How We Use Your Data

We use the data we collect to:

  • Deliver the digital greeting card to the recipient
  • Send a delivery confirmation email to the sender
  • Only if you tick the opt-in box or sign up on one of our forms: email you the Scottish Blessings Pack and short notes about card days, card ideas and Love Scotland. You can unsubscribe at any time with one click, and we never add a card recipient to any list unless they sign up themselves
  • Improve our Service and understand how it is used
  • Prevent abuse and enforce our Terms & Conditions

3. Legal Basis for Processing (GDPR)

We process your data based on:

  • Contractual necessity: to deliver the card you requested
  • Legitimate interest: to send delivery confirmations, improve the Service, and keep it secure
  • Consent: where you tick the opt-in box or sign up on one of our forms to receive the Scottish Blessings Pack and notes before card days

4. Data Storage & Security

Card details (names, email addresses and which card was sent) are stored in a database on a server we run, hosted by DigitalOcean. The mailing list you can join, and any reminders you set, are kept on the Love Scotland website's server, also hosted by DigitalOcean. We use encrypted connections (HTTPS) and access controls to protect your data.

5. Third-Party Services

We use the following third-party services to operate:

  • Amazon Web Services (SES) — email delivery
  • DigitalOcean — hosting and data storage
  • Cloudflare — website delivery and security, including the check that tells people from bots on our forms
  • Google Analytics — website usage analytics
  • Substack — newsletter subscription (when you choose to subscribe)

Each of these providers has their own privacy policy governing how they handle data.

6. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We only share data with the third-party service providers listed above as necessary to operate the Service.

7. Data Retention

We retain contact information for as long as it is necessary to provide the Service and for our legitimate business purposes. Card content (personal messages) is encoded in view links and is not stored separately in our database. You may request deletion of your data at any time.

8. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing
  • Withdraw consent at any time (where processing is based on consent)
  • Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at [email protected].

9. Cookies

We use cookies and similar technologies for analytics purposes (Google Analytics). These help us understand how visitors interact with the Service. You can control cookie settings through your browser preferences.

10. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

12. Contact

For any privacy-related questions or requests, please contact us at [email protected].