Southside Data Centre – Privacy Notice

This privacy notice tells you what to expect us to do with your personal information.

Contact details

Data Controller: Sunlaws Development Company Limited

Address: Roxburghe Estates, Kelso, Roxburghshire, TD5 7RL, Scotland

Email: info@southsidedc.com

What information we collect, use, and why

We collect or use the following information for service updates or marketing purposes:

Names and contact details
Addresses
Location data
Purchase or viewing history
IP addresses
Website and app user journey information

We collect or use the following personal information for dealing with queries, complaints or claims:

Names and contact details
Address
Customer or client accounts and records
Correspondence

Cookie Policy

Our website uses cookies and similar technologies to improve your experience, understand how people use the site, and support advertising and analytics. We use a cookie consent management banner to manage consent and give you control over which cookies you accept.

How we use cookies

To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies allows us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent may adversely affect certain features and functions.

You can change or withdraw your consent at any time using the cookie banner on our website.

Types of cookies we use

Functional (Always Active)

These cookies are necessary for the website to function properly. They enable core features such as page navigation, secure form submissions, and loading content. Without these cookies, the website cannot operate correctly.

Statistics

These cookies help us understand how visitors interact with the website by collecting anonymous information. This includes aggregated analytics data such as page views, time on site, and user journeys. Without additional information from third parties, this data cannot usually be used to identify you.

Marketing

These cookies are used to create user profiles, deliver relevant advertising, and track users across websites. They support tools such as Google Ads and remarketing features. These cookies are only used with your consent.

Third‑party cookies

We use third‑party services that may set cookies, including:

Google Analytics
Google Ads
Google Search Console
Embedded or linked content that may load external scripts

These services may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place (see “Sharing information outside the UK”).

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
Your right to erasure – You have the right to ask us to delete your personal information.
Your right to restriction of processing – You have the right to ask us to limit how we use your personal information.
Your right to object to processing – You have the right to object to the processing of your personal data.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
Your right to withdraw consent – When we use consent as our lawful basis, you have the right to withdraw your consent at any time.

If you make a request, we must respond without undue delay and within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

For service updates or marketing purposes

Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. You can withdraw your consent at any time.

Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.

Our legitimate interests are: We use personal information to send essential updates to people who have contacted us about the Southside Data Centre proposal. This includes acknowledging messages, providing clarifications, or sharing factual updates about the consultation process. This helps ensure people receive accurate information and can stay informed if they have asked to be kept updated. The impact on individuals is low because we only use their information for the purpose they provided it for, we do not send marketing, and people can ask us to stop receiving updates at any time. We have assessed that these benefits outweigh any minimal risks to individuals.

For dealing with queries, complaints or claims

Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our legitimate interests are: We use personal information so we can respond to queries, feedback or concerns about the proposed Southside Data Centre development. People contact us because they want information, clarification or a way to share their views, and we need to use their details to provide a meaningful response. This benefits individuals by ensuring their questions are answered and their feedback is properly considered as part of the consultation process. The impact on people is low because we only use their information for this purpose, we do not use it for marketing, and we keep the information secure. We have assessed that using personal information in this way is necessary for running an effective consultation and is a reasonable expectation of anyone who chooses to contact us. The benefits to individuals and to the consultation process outweigh any minimal risks.

Where we get personal information from

Directly from you

How long we keep information

We keep personal information only for as long as it is needed for the purposes described in this privacy notice.

Retention schedule:

Enquiry and feedback information: kept for 12 months after the end of the consultation period, then securely deleted.
Website analytics and advertising data: retained according to Google’s standard retention settings (typically 14 months) and then automatically deleted or anonymised.
Contact form records stored in secure cloud spreadsheets: kept for 12 months after the end of the consultation period, then securely deleted.
Server logs and security logs: kept for up to 12 months for security and troubleshooting purposes.

For more information on how long we store your personal information or the criteria we use to determine this, please contact us using the details provided above.

Who we share information with

Data processors

Website hosting provider (web infrastructure provider, EU/US) They host our website and store information submitted through our online forms so we can receive and respond to enquiries.

Cloud email service provider (technology sector, EU/US) They process and transmit emails we receive from the website contact form so we can respond to queries and feedback.

Analytics and advertising technology provider (technology sector, EU/US) They process website usage and advertising performance data to help us understand how people use the website and how they found it. Non‑essential cookies are only used with consent.

Online form and email delivery tools (technology sector, EU/US) They collect form submissions on our website and securely pass them to our email system so we can review and respond to feedback.

Cloud data storage provider (technology sector, EU/US) They store copies of contact form submissions so we can track and manage enquiries during the consultation process.

Sharing information outside the UK

Where necessary, we will transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.

Organisation name: Cloud service providers Category of recipient: Technology and cloud infrastructure providers Country the personal information is sent to: European Union and United States How the transfer complies with UK data protection law: The UK-US Data Bridge and/or the Addendum to the EU Standard Contractual Clauses (SCCs)

Where necessary, our data processors may share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place.

Organisation name: Cloud service providers used by our data processors Category of recipient: Technology and cloud infrastructure providers Country the personal information is sent to: European Union and United States How the transfer complies with UK data protection law: The UK-US Data Bridge and/or the Addendum to the EU Standard Contractual Clauses (SCCs)

How to complain

If you have any concerns about our use of your personal information, you can make a data protection complaint to us:

Email: info@southsidedc.com

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF

Helpline: 0303 123 1113 Website: https://www.ico.org.uk/make-a-complaint