Message from Scotland

Last updated: 28 March 2026

This Privacy Policy explains how Message from Scotland, operated by Love Scotland ("we", "us", "our"), collects, uses, and protects your personal data when you use our Service at message.lovetovisitscotland.com.

1. Data We Collect

When you send a card through our Service, we collect:

Sender information: your name and email address
Recipient information: their name and email address
Card details: which card was selected, the personal message written, and the subject line
Usage data: pages visited, browser type, and general analytics collected via Google Analytics

2. How We Use Your Data

We use the data we collect to:

Deliver the digital greeting card to the recipient
Send a delivery confirmation email to the sender
Send occasional communications about Message from Scotland and the Love Scotland newsletter
Improve our Service and understand how it is used
Prevent abuse and enforce our Terms & Conditions

3. Legal Basis for Processing (GDPR)

We process your data based on:

Contractual necessity: to deliver the card you requested
Legitimate interest: to send delivery confirmations, improve the Service, and communicate relevant updates about Love Scotland
Consent: where you voluntarily subscribe to our newsletter

4. Data Storage & Security

Your data is stored securely using Google Cloud Platform (Firestore), hosted in the United States (us-central1). We use industry-standard security measures to protect your data, including encrypted connections (HTTPS) and access controls.

5. Third-Party Services

We use the following third-party services to operate:

Resend — email delivery
Google Cloud Platform — hosting and data storage
Google Analytics — website usage analytics
Substack — newsletter subscription (when you choose to subscribe)

Each of these providers has their own privacy policy governing how they handle data.

6. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We only share data with the third-party service providers listed above as necessary to operate the Service.

7. Data Retention

We retain contact information for as long as it is necessary to provide the Service and for our legitimate business purposes. Card content (personal messages) is encoded in view links and is not stored separately in our database. You may request deletion of your data at any time.

8. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict certain processing
Withdraw consent at any time (where processing is based on consent)
Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at hello@lovetovisitscotland.com.

9. Cookies

We use cookies and similar technologies for analytics purposes (Google Analytics). These help us understand how visitors interact with the Service. You can control cookie settings through your browser preferences.

10. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

12. Contact

For any privacy-related questions or requests, please contact us at hello@lovetovisitscotland.com.