Privacy Policy

Underwater Scotland®
Last updated: 24 January 2026

1. Introduction

This Privacy Policy explains how personal data is handled when you visit
https://underwaterscotland.co.uk (“the Website”).

Underwater Scotland is a small, independent project. We collect only minimal personal data and do not track users for marketing or profiling purposes.

This Policy complies with the UK GDPR, EU GDPR, and the UK Privacy and Electronic Communications Regulations (PECR).

2. Data Controller

Underwater Scotland®
Email: contact@underwaterscotland.co.uk

3. Personal Data We Collect

3.1 Data you provide voluntarily

If you contact us using the contact form, we collect:

• Name
• Email address
• Message content

This information is used only to reply to your message.
We do not create user accounts, mailing lists, or profiles.

3.2 Data we do NOT actively collect

Underwater Scotland does not:

• use advertising or marketing analytics
• track user behaviour
• create user profiles
• sell or share personal data

3.3 User reviews and ratings

Some pages of the Website allow visitors to submit ratings and optional comments about listed locations.

When you submit a rating or comment, the following information may be stored:

• your rating value
• the comment text you provide
• the page or location being reviewed
• a randomly generated visitor identifier stored locally in your browser (localStorage)

This visitor identifier is used only to:

• prevent duplicate voting from the same browser
• allow rating updates
• support comment moderation

It does not identify you personally and is not linked to accounts, analytics systems, or advertising services.

Comments may be reviewed before appearing publicly.
We reserve the right to moderate, hide, or remove comments where necessary.

Users are advised not to include personal or sensitive information in comments.

4. Automatically Collected Technical Data (Third Parties)

Although Underwater Scotland does not actively track users, technical data may be collected automatically by third-party services required to operate the Website.

a) Hosting provider — Hostinger

Our hosting provider (Hostinger) automatically processes limited technical data such as:

• IP address
• browser and device type
• operating system
• date and time of access

This data is used for security, performance, and server maintenance.
Hostinger acts as an independent data controller.

b) Google Maps (embedded map)

The Website uses embedded Google Maps to display locations. When the map loads, Google may collect:

• IP address
• device and browser information
• cookies and usage data

Google acts as an independent data controller and processes data according to its own privacy policy:
https://policies.google.com/privacy

c) TikTok (embedded or linked content)

Some pages include TikTok videos or links. When you interact with TikTok content, TikTok may collect:

• IP address
• device and browser information
• cookies and interaction data

TikTok acts as an independent data controller.
Privacy policy:
https://www.tiktok.com/legal/page/row/privacy-policy/

d) Weather data — UK Met Office

The Website displays weather information and a general weather score for map locations.

Weather data is retrieved from the UK Met Office based on the geographic coordinates of listed locations only.

• no personal data is used
• no user GPS or precise location is collected
• no tracking or marketing cookies are involved

Weather data is retrieved server-side.

The Met Office may process limited technical data in accordance with its own privacy policy.

e) Optional location feature (browser geolocation)

The Website may allow users to optionally use their device location to find places near them.

If this feature is used:

• the browser will request permission before accessing location data
• the location is used only temporarily within the user's browser
• the Website does not store, record, or track the user's GPS location

Location data is used only to calculate and display nearby places on the map.

Users can refuse or revoke location access at any time through their browser or device settings.

5. How We Use Data

We use data only to:

• respond to messages sent via the contact form
• operate and secure the Website
• display maps, locations, weather information
• display user-submitted ratings and comments

We do not use data for advertising or marketing.

6. Legal Basis for Processing

Under UK GDPR and EU GDPR, processing is based on:

• Article 6(1)(b) — responding to enquiries
• Article 6(1)(f) — legitimate interests (website operation, security, maps, weather, ratings and comments functionality)
• Article 6(1)(a) — consent for non-essential cookies and embedded third-party content

User-submitted ratings and comments are processed under legitimate interest as part of providing community location feedback features.

7. Data Retention

• Contact form messages: up to 12 months
• Ratings and comments: retained while relevant to the Website content
• Server logs: according to Hostinger’s retention rules (typically 30–90 days)
• Data processed by Google, TikTok, or the Met Office: according to their own policies

Users may request removal of their submitted comments at any time.

8. Cookies and Local Storage

The Website uses cookies and local storage in accordance with UK and EU law.

• strictly necessary cookies are used for basic functionality
• third-party cookies (Google Maps, TikTok) are loaded only after consent
• local storage is used to store a randomly generated visitor identifier for ratings functionality

This identifier:

• does not personally identify users
• is not used for tracking or analytics
• is stored only within the user's browser

A cookie banner allows users to accept or reject non-essential cookies and manage preferences at any time.

Weather data from the Met Office does not use cookies.

For details, see our Cookie Policy.

9. Your Rights

Under UK GDPR and EU GDPR, you have rights in relation to your personal data.

Please note that Underwater Scotland processes very limited personal data, mainly when you contact us directly or submit a comment.

Where applicable, you may request to:

• access the personal data we hold about you (if any)
• correct inaccurate data
• request deletion
• restrict or object to processing
• withdraw consent at any time

In most cases, these rights apply only if you have contacted us or submitted a comment.

To exercise your rights, contact:
contact@underwaterscotland.co.uk

10. Data Security

We use reasonable technical and organisational measures, including:

• HTTPS encryption
• secure hosting
• limited access to data
• moderation controls for public comments

11. Third-Party Links

The Website contains links and embedded content from third parties. We are not responsible for their privacy practices.

12. Changes to This Policy

This Privacy Policy may be updated occasionally.
The date at the top shows the latest revision.

13. Contact

For any privacy-related questions, contact:
contact@underwaterscotland.co.uk