Privacy Policy

Staying in contact with you is really important to us so we can keep you up to date with our Science Festival and what we’re up to the rest of the year too. To comply with the new EU General Data Protection Regulation (GDPR) coming into effect 25 May 2018, we need to ensure we’re only sending you information you want and that you are still keen to hear from us.

You can unsubscribe from our communications at any time.

The Midlothian Science Festival will not pass on your personal data to any third parties.


Who is collecting your personal data?

Midlothian Science Festival obtains personal data from you when you sign up for our e-newsletter, sign up to become “a friend of the festival” and when you book tickets for our events.


What personal data is collected?

Personal information may include but is not limited to your name, gender, date of birth, postal address, email address and a contact phone number. We only collect the personal information that is necessary to meet our business needs and to provide you with the services you have requested. We collect personal data from you where there is a valid lawful basis and legitimate interest for doing so.

We do not knowingly collect “special category” data. This is a special type of sensitive data to which more stringent processing conditions apply.


How is your personal data used?

We rely on your consent for our marketing communications. If you wish to hear from us about our Festival and have given us permission to contact you, we will send you information on our work by email. We may provide you with information on our fundraising work as a charity, including requests for support and we may also send you surveys for market research purposes. If you have booked tickets for events we may also contact you to notify you in case of cancellation, postponement or relocation of any events/shows/workshops.

We will only contact you if we have received your permission and you can opt out of receiving communications at any time by contacting or by clicking the unsubscribe button at the end of each email communication.

We use a plugin by a company called MailPoet to process our eNewsletter deliveries to our subscribers and Eventbrite for booking tickets to events during the festival. All of our data processors have their own data security processes and protocols in place, in compliance with the Data Protection Act 1998 and GDPR.


GDPR Statement

The General Data Protection Regulation (GDPR) replaces the current Data Protection Act and becomes effective from 25.5.18. It includes a number of rights for individuals, including:

  • The right to be informed about how we collect and process data
  • The right to request to see full details of the personal information held
  • The right to ask us to stop processing your personal information and delete data
  • The right to withdraw consent at any time
  • The right to correct personal data if you feel it is inaccurate or incomplete