Privacy Policy.

Cairnova Commerce Ltd ("Cairnova", "we", "us", "our") is the data controller responsible for your personal data. We are a Scottish outdoor brand incorporated in Scotland.

Registered address: Clyde Offices, 2nd Floor, 48 West George Street, Glasgow G2 1BP.

For any data protection queries contact us at team@cairnova.co.uk. We aim to respond within 5 working days.

We collect personal data in the following circumstances:

We use personal data only for the purposes for which it was collected. Specifically:

We will never use your data for purposes incompatible with those stated above without obtaining your explicit consent first.

Under UK GDPR, we rely on the following lawful bases for processing your personal data:

We send the Weekend Mountain Briefing to subscribers who have explicitly opted in via our signup forms. We use Mailchimp as our email service provider. Your email address is stored on Mailchimp's platform subject to their Privacy Policy.

You can unsubscribe from our newsletter at any time by clicking the unsubscribe link in any email we send, or by emailing team@cairnova.co.uk. We will process your unsubscribe request within 10 working days.

We do not send unsolicited marketing emails. We will only contact you by email for marketing purposes if you have given us explicit permission to do so.

When you submit a form on cairnova.co.uk — whether a contact form, community submission, club listing or event submission — your data is stored securely in a Google Sheet accessible only to the Cairnova team. Event submissions are also stored directly in our website's own database, as described in Clause 6.11.

Files uploaded through our community submission form are stored in a private Google Drive folder accessible only to the Cairnova team. We do not share uploaded files with third parties.

By submitting a form you consent to us storing and using your data for the purpose for which the form was created. You may request deletion of your submission at any time by contacting team@cairnova.co.uk.

Personal data collected in community submissions. When you submit a photograph, video or other visual asset through our Adventure Gallery submission form, we collect the following personal data: your name, email address, Instagram handle (optional), location of the image, caption text, and the uploaded image or video file itself. This data is processed on the legal basis of consent — you are actively submitting your content for consideration and publication.

Standard publication consent. By ticking the single consent checkbox on our submission form — which links to our Terms and Conditions — and submitting your content, you consent to Cairnova storing your name, credit details and content for the purpose of featuring your work as a genuine community feature: in the Cairnova Adventure Gallery, the Weekend Mountain Briefing email newsletter, and as an organic post on Cairnova's social media channels. Your name and Instagram handle (if provided) will be displayed as your credit wherever your content is published under this consent. This does not cover use of your imagery within paid advertising or promotional campaigns, which is addressed in Clause 6.6.

Extended asset and promotional use consent. The same consent given under Clause 6.5 also permits Cairnova to use your imagery more broadly — including as background photography or section imagery on cairnova.co.uk, and within paid advertising or marketing campaigns run by Cairnova on any platform, including paid campaigns on social media. There is no separate tick-box for this use; it is covered by the single consent checkbox described in Clause 6.5. Credit is always guaranteed for use within the Adventure Gallery. For any other use under this clause, including website assets and paid advertising, credit is not guaranteed, though we will provide it wherever reasonably practicable. You may withdraw this consent at any time by contacting team@cairnova.co.uk.

Third parties in your imagery, including children. If your submitted photograph or video contains identifiable individuals other than yourself, by submitting the content you confirm that those individuals — or, where the individual is under 18, their parent or guardian — have given consent to be photographed and for the image to be shared publicly. A child cannot themselves provide legally valid consent for this purpose. Cairnova accepts no liability for submissions made without appropriate consent from individuals pictured, or from a parent or guardian on behalf of a pictured minor.

Requests from individuals pictured. If you are an individual — or the parent or guardian of a minor — who appears in a photograph or video published on our website without having provided the consent described in Clause 6.7, you may request its removal at any time by contacting team@cairnova.co.uk. We will remove the content promptly, normally within 5 working days, without requiring more from you than is reasonably necessary to identify the correct image and verify the request. This right exists independently of any consent given by the person who submitted the image, and does not require you to have been the submitter yourself.

Withdrawal of consent and data deletion. You may withdraw your submission consent at any time by emailing team@cairnova.co.uk. On receipt of a valid withdrawal request, we will remove your content from active use on our website and cease including it in future newsletter editions within 30 days. Content that has already appeared in sent newsletter editions or published social media posts cannot be retrospectively removed from those records, but will not be used again after withdrawal. Your personal contact data (name and email) will be deleted from our submission records within 30 days of a deletion request unless we are required to retain it for legal or compliance purposes.

Retention of community submission data. Accepted and published submissions are retained indefinitely for as long as consent remains in place. Unpublished or declined submissions are deleted from our Google Drive and Google Sheets records within 6 months of submission. Contact data associated with a submission (name and email) is retained for the same period as the content itself, unless you request earlier deletion.

Event submissions. When you submit an event — whether through our events calendar page or the "List an event or experience" option on our contact page — the event details you provide are stored directly in our website's own database, hosted with Hostinger, rather than in Google Sheets. Every event submission is reviewed by the Cairnova team before it appears publicly. Published event details (event name, date, location, description, category, organiser or business name, and price where applicable) are displayed publicly on our events calendar and on that event's own page. Your personal contact details — the name and email address you provide as the submitter — are used only for our internal moderation and communication with you, and are never displayed publicly.

Supplementing event listings with publicly available information. By submitting an event, you consent to Cairnova supplementing your submission with information about the event or its organising body that is already publicly available — for example, from the organiser's own website or public social media pages — where reasonably necessary to keep a listing accurate, complete or up to date. This is covered by our Terms and Conditions, Clause 5.5, which you agree to at the point of submission.

Removal of event listings. Published events are automatically removed from public display shortly after their event date has passed. You may also request removal or correction of an event listing at any time, whether or not you were the original submitter, by contacting team@cairnova.co.uk.

If we contact you directly — via email, social media or any other channel — for the purposes of partnership, press, supplier or collaboration enquiries, we process your contact details on the basis of legitimate interests.

We only retain contact details for business outreach purposes for as long as the communication remains relevant. If you ask us to stop contacting you, we will do so immediately and remove your details from our records.

We do not purchase or acquire contact lists. Any business contact data we hold has been obtained through direct communication, publicly available professional information or legitimate referral.

We do not sell your personal data to any third party under any circumstances.

We share data only with the following trusted service providers, strictly for the purposes described in this policy:

All third-party providers are required to process your data only on our instructions and in accordance with applicable data protection law.

We may disclose your data if required to do so by law or by a court, regulatory authority or law enforcement agency.

We retain personal data only for as long as necessary for the purpose for which it was collected:

Cairnova's website and services are intended for use by adults. Our services are not directed at children, and we do not knowingly collect personal data from anyone under the age of 13.

If you are under 13, please do not submit any personal information to us — including through our newsletter signup, contact forms, or community submission form — without the involvement of a parent or guardian.

If we become aware that we have inadvertently collected personal data from a child under 13 without appropriate parental or guardian consent, we will take steps to delete that data promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at team@cairnova.co.uk and we will investigate and remove it.

See Clauses 6.7 and 6.8 for how we handle photographs or videos that depict a child, including where that child was not themselves the person who submitted the content to us.

Under UK GDPR you have the following rights in relation to your personal data:

To exercise any of these rights, contact us at team@cairnova.co.uk. We will respond within one calendar month in accordance with UK GDPR requirements.

Our website uses cookies to ensure basic functionality and to understand how visitors use the site. We do not use advertising or tracking cookies.

We use anonymised analytics to understand page traffic and improve our services. No personally identifiable data is collected through analytics.

You can disable cookies in your browser settings at any time. Some features of our website may not function correctly if cookies are disabled.

Event "like" feature. When you like an event on our events calendar, your browser generates and stores a random, anonymous identifier using local browser storage. This identifier is used only to remember which events you've liked and to keep the like count accurate — it is not linked to your name, email address or any other personal data, and no account or login is required to use it. You can clear this identifier at any time by clearing your browser's site data for cairnova.co.uk, though doing so will reset which events you've liked from that browser.

Individual event pages include an embedded Google Maps view of the event location. Loading this embed may allow Google to set its own cookies in accordance with Google's Privacy Policy, independent of Cairnova.

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated effective date. Where changes are significant, we will notify newsletter subscribers by email.

Your continued use of our website following any update constitutes acceptance of the revised policy.

For any questions about this Privacy Policy or how we handle your data, contact us using the details below. If you are unhappy with our response you have the right to complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.