Privacy Policy
This privacy notice tells you what to expect when Dundee Historic Environment Trust collects personal information. It applies to information about:
- Visitors to our website
- Event attendees
- People and organisations who apply for a grant
- Project participants
Who we are
We are Dundee Historic Environment Trust, an independent charitable organisation set up to promote and encourage the conservation, protection and improvement of Dundee’s historic environment.
Registered in Scotland No.268877, Scottish charity No. SC036165.
How to contact us
Please contact us if you have any questions about our privacy notice or any information that we hold about you.
Email: info@dhet.org
By post or in person: Dundee Historic Environment Trust, 29 Exchange Street, Dundee DD1 3DJ
By telephone: 01382 902244
What information we collect, use, and why
We collect or use the following information to provide services and respond to enquiries:
Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth, and gender.
Contact Data includes billing address, delivery address, email address, and telephone numbers.
Technical Data includes your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our websites.
Usage Data includes information about how you use our websites.
Images and Photographic Data when we take photographs of events and activities, and of grant aided buildings and repair work. Explicit consent is required from parents or guardians where images of children are taken at events.
Property data may include information about work, home and living conditions.
Financial data may include information about income and financial needs for funding, payment details for grant recipients (including card or bank information for transfers and direct debits).
How your personal data is collected
Direct interactions. You may give us your personal data by filling in forms or by corresponding with us by post, phone, email or in person. This includes personal data you provide when you fill in forms on our websites.
Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, and other similar technologies.
Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources, for example Dundee City Council, other charities or organisations we are working in partnership with, or your professional advisor when applying for grants.
Purposes for which we will use your personal data
We collect data for the legitimate interests of fulfilling our aims as a charity. These are:
- Enhance the quality, appearance and condition of Dundee’s built historic environment.
- Support the promotion of Dundee’s historic built environment as an attractive place to live, work, visit and invest in.
- Bring disused/underused buildings back into economic use, either as business premises or as affordable accommodation.
- Promote timely repairs and encourage continuing maintenance.
- Encourage the use and improved availability of traditional craft- based building skills and appropriate traditional and/or energy efficient materials.
- Stimulate the understanding and appreciation of the historic built environment.
In order to fulfil our aims we must collect data from people or organisations who contact us with enquiries and people or organisations who apply for grants. When you fill in an enquiry or application form we will ask you to agree to our privacy policy. If you attend an event run by us or in partnership with us, we may collect your contact details to allow us to update you about the event or ask your opinion about the event after it takes place.
In order to administer and protect our website and other software we collect data and use data analytics. This allows us to meet our aims as a charity by promoting our grants programme and other activities through our website.
Grant applicants and project participants
We collect information about you in order to assess your grant application or to provide you with information about a project. Any personal information that is provided in the application or during project activity is used solely for the purpose of assessing the grant application and the ongoing administration and management of projects.
We may also publish information about projects on our website and social media but this will not include your personal information.
Data sharing and security
The information you provide will be held securely by us, whether the information is in electronic or physical format. We may have to share your personal data with third-party service providers to fulfil our contractual obligations to you. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
How long we will retain your data
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Please see the table below to find out how long we retain your data in different circumstances.
Type of data | Retention period |
Unsuccessful grant applications | 24 months after decision |
Grant records for successful applications – personal information | Until the end of the maintenance and clawback period as recorded in the grant conditions or contract |
Grant records for successful applications – excluding personal information, e.g. photos and descriptions of grant aided work, impact evaluation | Permanent |
Event attendee contact details* | Immediately after any post event evaluation is collected |
Contact details of an enquirer | 12 months after last contact |
*If event attendees are children or vulnerable adults we will not collect personal information. This will be held by relevant partner organisations such as schools who have appropriate processes in place.
Data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website. Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website.
Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.
Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.
Your right to erasure – You have the right to ask us to delete your personal information. Read more about the right to erasure.
Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.
Your right to object to processing – You have the right to object to the processing of your personal data. Read more about the right to object to processing.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.
Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact details at the top of this privacy notice
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Last updated
This privacy policy will be reviewed regularly, at least once a year. It was last updated on 03 June 2026.