Privacy Policy
Last updated: 28 September 2026
Cabadaich Còmhla (“Speak Together”) is a community directory for Scottish Gaelic speakers and learners. This policy explains what personal data we collect, why we collect it, and what rights you have over it. We are committed to handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The data controller for Cabadaich Còmhla is:
Struan McDonough
Email: hallo@cabadaichcomhla.com
If you have any questions about how we handle your data, please contact us at the address above.
2. What data we collect and why
We collect the following personal data when you create or maintain a profile:
| Data | Why we collect it | Legal basis |
|---|---|---|
| Email address | To create and secure your account, and to send you account-related notices | Contract (UK GDPR Article 6(1)(b)) |
| Password (stored as a secure hash - we never see your password in plain text) | To authenticate you when you log in | Contract |
| Full name (English and/or Gaelic) | To identify you in the public directory | Contract |
| Profile photo | To help other Gaelic speakers recognise you | Contract |
| Gaelic level (CEFR) | To help people find an appropriate conversation partner | Contract |
| Island (Mull or Iona) | To help people find speakers near them | Contract |
| Conversation readiness status | To let people know whether you welcome being approached | Contract |
| “About me” text (optional) | To help others understand who you are | Consent |
| “Why I’m learning Gaelic” text (optional) | To help others understand your background | Consent |
| “Where you might find me” text (optional) | To help speakers locate one another in everyday life | Consent |
| Event details you publish (title, description, date and time, venue or online details, cover photo) | To list and run the events you organise | Contract |
| Your RSVPs and event follows (“going” and “following”) | To show attendance, build your “My events” list, and let organisers plan | Contract |
| Email notification preferences (which emails you want, and for which islands) | To honour your email choices and never send emails you have turned off | Consent |
| Unsubscribe token | So links in emails can change your settings securely without asking you to log in again | Legitimate interests |
| Email delivery record (which notification emails were sent to you, and when) | To show you your recent emails in the Notification centre and to avoid sending the same email twice | Legitimate interests |
We also collect limited technical data when you use the site:
| Data | Why we collect it | Legal basis |
|---|---|---|
| IP address and browser information | For security, fraud prevention, and debugging | Legitimate interests |
| Login timestamps | To detect unusual account activity | Legitimate interests |
We do not use your data for advertising, profiling, or automated decision-making. We do not sell your data to any third party.
3. Public visibility of your profile and events
By creating a profile, you are choosing to make your name, photo, Gaelic level, conversation readiness status, island, and any optional profile text publicly visible to anyone who visits the Cabadaich Còmhla directory - including people who do not have an account. Please only include information in your profile that you are comfortable sharing publicly.
Events you publish are also publicly visible, including the event title, description, date and time, and the venue or online details you provide. Please do not include a personal address in an event listing unless you are happy for it to be public. The number of people going is shown publicly, but individual attendees’ names are not shown to others.
Your email address and password are never shown publicly.
4. Who we share your data with
We share your data with the following third-party services that help us operate the site:
- Hosting and database provider - to store the website, account data, event listings, and uploaded photos. Lovable Cloud
- Email service (account emails) - to send sign-up confirmation, password resets, and account moderation emails. Lovable
- Email service (event notification emails) - to send the event emails you have asked for, such as new events near you and updates to events you follow, from events@cabadaichcomhla.com. Sender (sender.net)
Event notification emails are only sent when you have chosen to receive them, and every notification email includes links to change your settings or stop these emails entirely. Your notification preferences are checked at the moment each email is sent, so turning a setting off takes effect immediately.
These providers process data only on our instructions and are bound by data processing agreements. We do not share your data with any other third parties.
We may disclose your data if required to do so by law or in response to a valid legal request from a UK authority.
5. How long we keep your data
| Data | Retention period |
|---|---|
| Your profile and account data | Until you delete your account |
| Optional profile fields you remove | Deleted immediately upon removal |
| Moderation reports involving your profile | Up to 12 months after resolution, then deleted |
| Email delivery records | Up to 12 months, then deleted |
| Server logs (IP addresses, timestamps) | Up to 90 days, then automatically deleted |
When you delete your account, all of your personal data - including your profile, photo, and any moderation reports about you - is permanently removed from our active systems within 30 days. Backups are purged within 90 days.
6. Cookies
We use only the cookies and local storage necessary to operate the site:
- Session cookie / token - keeps you logged in during your visit
- Language preference - remembers whether you prefer the English or Gàidhlig interface
We do not use advertising cookies, tracking cookies, or any third-party analytics that identify you personally.
7. Age restriction
Cabadaich Còmhla is for people aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe a user is under 16, please report their profile using the “Report this profile” link, and we will investigate and remove the account if confirmed.
8. Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access - you can request a copy of the data we hold about you
- Right to rectification - you can correct inaccurate information (most profile data can be edited directly in your account)
- Right to erasure - you can delete your account and all associated data at any time from your account settings
- Right to restriction - you can ask us to pause processing of your data in certain circumstances
- Right to data portability - you can request your profile data in a machine-readable format
- Right to object - you can object to processing based on legitimate interests
To exercise any of these rights, contact us at hallo@cabadaichcomhla.com. We will respond within one calendar month.
9. Making a complaint
If you are unhappy with how we have handled your data, you have the right to make a complaint to the UK’s data protection regulator:
Information Commissioner’s Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
We would appreciate the opportunity to address any concerns directly before you contact the ICO, so please reach out to us first if possible.
10. Changes to this policy
We will post any updates to this policy on this page with a revised “Last updated” date. We will notify registered users by email if we make any significant changes.