Privacy policy
The general section of the privacy policy applies to the use of all personal information gathered by us. Please read this section carefully. There are then specific specific section(s) that will or will not apply to you depending on how you interact with us. Please read the relevant sections that apply to you.
- General section: For anyone that interacts with RZSS
- Website users: If you visit our website
- Visitors: If you visit Edinburgh Zoo or Highland Wildlife Park
- Memberships: If you register as a member or buy a membership as a gift for someone else
- Adoptions: If you adopt an animal or buy an adoption as a gift for someone else
- Customers: If you purchase our products
- Supporters: When you sign up to receive marketing communications from us
- Competition applicants: If you sign-up to one of our competitions or prize draw
- Donations: When you make a donation to us
- Recruitment applications: When you apply for a job vacancy with RZSS
1. General section
- Who we are
The Royal Zoological Society of Scotland (RZSS) is dedicated to environmental education and the conservation of threatened species. Widely respected as one of the foremost zoological centres in Europe, our mission is to connect people with nature and safeguard threatened species. RZSS achieves this mission through a variety of programmes in conservation, education and research all directed towards a better understanding of zoology and the environment. Animal welfare is our highest priority and RZSS is constantly finding new and effective ways of providing the animals in its care with appropriate, stimulating and naturalistic habitats.
RZSS owns and operates Edinburgh Zoo and Highland Wildlife Park.
Ark is a wholly owned trading subsidiary of RZSS. Ark operates our retail and catering facilities at Edinburgh Zoo and Highland Wildlife Park. All the proceeds from Ark are donated to RZSS.
When we collect and use your personal information, RZSS is the controller and processor of data. Any decisions regarding the processing of personal data collected by Ark, through its catering and retail activities, are made by RZSS. Ark is therefore a data processor and not a data controller.
- Purpose of this privacy policy
RZSS takes your privacy very seriously and is committed to protecting your personal information. This privacy policy sets out the way in which personal information you provide to us is used and kept secure by RZSS.
It applies whenever we collect your personal data (including when you use our websites or other digital platforms), so please read it carefully.
- How to contact us
If you have any queries regarding this privacy policy or how we use your personal information, please contact us at:
Address: Data Protection, Royal Zoological Society of Scotland, Edinburgh Zoo, 134 Corstorphine Road, Edinburgh, EH12 6TS
Email: data@rzss.org.uk
If you are not satisfied with the response you receive from us or how we handle your personal information, then you may wish to contact the Information Commissioner’s Office via ico.org.uk.
- Definitions
“Ark” means Ark Enterprises Limited, a company incorporated in Scotland (Registered Charity Number SC121528) with registered offices at Edinburgh Zoo, 134 Corstorphine Road, Edinburgh, EH12 6TS
“Edinburgh Zoo” means the visitor attraction known as “Edinburgh Zoo” located at 134 Corstorphine Road, Edinburgh, EH12 6TS
“Highland Wildlife Park” means the visitor attraction known as “Highland Wildlife Park” located at Kincraig, Kingussie, Inverness-shire, PH21 1NL
“RZSS” means the Royal Zoological Society of Scotland, a charity registered in Scotland (Registered Charity Number SC121528) with registered offices at Edinburgh Zoo, 134 Corstorphine Road, Edinburgh, EH12 6TS
"We” or “us" or “our” means RZSS and Ark
"Website" means the whole or any part of the website controlled or operated by RZSS and Ark and located at rzss.org.uk, edinburghzoo.org.uk, shop.rzss.org.uk, archive.rzss.org.uk and/or highlandwildlifepark.org.uk or any subsequent URL which may replace either URL
“Product” or “Products” means goods and services provided by RZSS, including but not limited to entry tickets, RZSS membership, RZSS adoptions, keeper experiences, event tickets, merchandise and charitable donations
"VRM" means the Vehicle Registration Mark (commonly known as the registration number plate)
"ANPR" means Automatic Number Plate Recognition.
- What is personal information
Personal information is anything which enables us to identify you in some way such as a name, email address, or an online identifier such as an IP address.
You may be asked to provide personal information through our digital channels such as the Website or via our leaflets and paper forms or by phone call.
Special category data means personal information revealing your racial or ethnic origin; political opinions; religious or philosophical beliefs; or trade union membership; genetic data; biometric data; data related to your health or data concerning your sex life or sexual orientation; and criminal convictions or involvement in criminal proceedings.
- Updating your personal information
Please contact us soon as possible after there is any change to your personal details, including your contact details.
- How do we keep your personal data safe
We take the security of your personal information seriously. When you submit sensitive information to us, we use industry standard Secure Sockets Layer (SSL) encryption technology to guard your information. In addition, we have security procedures in place to protect our paper-based systems and computerised databases from loss and misuse, and only allow access to them when it is necessary to do so, and then under strict guidelines as to what use may be made of the personal information contained within them.
Where we issue you with a password, for access to certain areas of our digital platforms, you are responsible for keeping your password secure and confidential. Please do not share or disclose your password to any other person. If you think that your password to our systems has been compromised, please contact us immediately.
We cannot guarantee the security of your home computer or the internet, and any online communications (for example information provided by email or our website) are at the user’s own risk.
- Third party links
Please note that our Website and other digital platforms may contain links to third party websites/digital platforms which are provided for your convenience.
We are only responsible for the privacy practices and security of our own digital platforms.
We recommend that you check the privacy and security policies and procedures of each and every other website/digital platform that you visit.
- Your rights to your personal information
You have certain rights under the data protection legislation. You can exercise your rights by contacting us.
Your rights include:
- the right to access the personal information held about the you by making a subject access request in accordance with the data protection legislation. We may charge a reasonable fee when a request is manifestly unfounded or excessive
- the right to have your personal information rectified if it is inaccurate or incomplete
- the right to request to have your personal information deleted in certain specific circumstances as set out in the data protection legislation
- the right to request to restrict the processing of your personal information in certain specific circumstances as set out in the data protection legislation
- the right to ask us not to process your personal data for marketing purposes or for purposes based on our legitimate interests (in certain circumstances as set out in the data protection legislation)
- the right to ask us to not undergo automated decision making
- where you have provided consent, to request to withdraw such consent at any time
There are some exemptions to the above rights that are permitted under the data protection legislation. If you have any queries as to what these are then please get in touch.
Please note that if you choose to exercise your rights to have personal data restricted or deleted, then we may not be able to provide you with a full service.
Further details about your rights can be found on the ICO’s website at ico.org.uk.
We will need you to provide identification in order to comply with your request to exercise your rights. Once we have received your information request, and your identification, we will respond within the required timescales unless a permitted exemption applies.
- Do we share your personal information?
We will not sell, trade or lease your personal information to others.
We contract with third party service providers and suppliers to deliver certain services. We have or will have data processing agreements in place with each of these providers so that they process your personal data in accordance with this privacy policy. For example, we may use a third party to process your personal details if we need to send your data to a mailing house in order to fulfil a postal mailing to you, this could include sending you a letter about your membership. Additionally, RZSS may from time to time need to use the services of an Internet Service Provider.
We may make use of the non-personal information we have collected from you to enable us to identify and target advertisements to a particular target audience. Data such as postcodes (without other identifiers) may be shared partner agencies or marketing consultants to help aggregate information about our users and customers. We may also make use of aggregated and statistical information with third parties involved in maintaining or developing our Websites. Aggregated information is always anonymous.
Occasionally we work with partner organisations and in some circumstances, we may need to share your details with a third party for processing. For example, if we run an event in partnership with another organisation and they need your details in order to fulfil your tickets or experience.
We may also need to disclose your personal data if required to do so by law for example for crime prevention or detection.
The following third parties may also have access to your personal information:
- any other person who is authorised to act on your behalf
- regulators, government departments, law enforcement authorities, tax authorities and insurance companies;
any relevant dispute resolution body or the courts - persons or businesses in connection with any sale, merger, acquisition, disposal, reorganisation or similar change in our business
- General retention period
We will not hold your personal information for any longer than is necessary, unless we are required to keep your personal data longer to comply with the law and any regulatory requirements.
If you have declared gift aid, HMRC require us to store your name and address for seven years.
We will destroy your credit or debit card details as soon as we have processed your payment. If you make a payment via our website then your payment is processed by Opayo/Elavon and we do not retain this information on our servers.
Depending on how we interact with you we may hold your data for different periods.
If you have purchased a membership or adoption, for yourself or as a gift for another party, we will hold your membership information and/or that of the gift recipient throughout the duration of membership and/or adoption, and for a period of seven (7) years after your last point of contact. This retention period allows us to correspond with you in case you would like to re-join during this period, or if there are any other updates, news or offers which we think may be of interest to you.
If you have visited either of our parks, or have purchased any item as a customer at either of our parks, we will hold your contact information for a period of seven (7) years after your last point of contact. This is so that we can send you information and marketing materials related to goods, services and activities which we feel may be relevant to you.
Please note that the section above refers to general retention only and specific retention conditions may apply depending on how you interact with RZSS. Please refer to the Specific Section(s) below for further details.
- If you are under 16
When an individual purchases a Product or opts to join our mailing list we will ask for confirmation that they are aged 16 and over. On some occasions we may collect and manage data of under 16s. We will only retain relevant personal data of children who are to receive information relating to requested materials, such as animal adoptions or memberships, or are participating in our discovery and learning courses.
We will not write to children on our database for any purpose other than relating to their animal adoption, membership or associated purchase. We will not write to children regarding payment processes or dues.
- Surveys and feedback forms
We may ask you to fill in questionnaires or surveys via one of our digital channels or by post. The data collected by such questionnaires or surveys will only be used by us to:
- to carry out market research so that we can improve the products and services we offer
- to personalise and improve your experience
Our primary survey tool is Microsoft Forms, the data collected by Microsoft Forms is stored on servers in the European Union under our contract with Microsoft (Microsoft Ireland Operations Ltd).
We may occasionally use SurveyMonkey, a third-party service provided by SurveyMonkey Inc. and SurveyMonkey Europe UC, to conduct surveys and gather other information pertaining to the activities of RZSS (for example event and educational booking information, visitor surveys, staff surveys and so on).
SurveyMonkey Europe UC has entered into contractual terms to include standard contractual clauses with SurveyMonkey Inc. for the transfer of data to SurveyMonkey Inc. as part of delivery of service. SurveyMonkey Inc. is located in the United States and accordingly, data (to include Respondent data) will be transferred to the United States. SurveyMonkey Inc. participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield. SurveyMonkey is committed to subjecting all personal information and data received from European Union (EU) member countries and Switzerland, in reliance on the Privacy Shield Framework, to the Framework’s applicable Principles.
Under the terms of the EU-U.S. Privacy Shield Framework, RZSS has determined that adequate measures are in place for international transfers of data gathered through our use of the SurveyMonkey platform, as required by the GDPR and Data Protection Act 2018. The use of SurveyMonkey is subject to the legal terms and conditions and privacy policy available on their website.
- Changes to this privacy policy
We aim to meet high standards and so our policies and procedures are constantly under review. From time to time we may change this privacy policy.
We will notify you if we intend to make a substantive change to the way in which we use your personal information that is not currently set out in this privacy policy.
2. Website users
- Websites and digital platforms
When you interact with our digital platforms, we do not automatically capture or store personal data from our visitors, but we may automatically capture other information about your visit. This is to help us better understand how visitors use our digital platforms to enable us to create better content and more relevant communications:
- how you have reached our digital platform and the internet protocol (IP) address you have used
- your browser type, versions and plug-ins, and your operating system
- your journey through our digital platform, including which links you click on and any searches you made, how long you stayed on a page, and other page interaction information
- which videos you have watched and for how long
- what content you like or share
- which adverts you saw and responded to
- which pop up or push messages you might have seen and responded to
- your subscription status
- demographic information such as geographical location and gender if available
- information collected in any forms you complete
We may also analyse which marketing activity led to your taking specific action on our digital platforms (e.g. downloading the app).
We partner with Microsoft Clarity to capture how you use and interact with our website through behavioural metrics, heatmaps, and session replay to improve our products and services. Website usage data is captured using first and third-party cookies, placed by Microsoft, and other tracking technologies to determine online activity. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement at privacy.microsoft.com/en-GB/privacystatement.
- Cookies
In common with many other website operators, we use standard technology called 'cookies' on our website. Cookies are small pieces of information that are stored by your browser on your computer's hard drive and they are used to record how you navigate this website on each visit.
For further, more detailed information on how we use cookies, please refer to our Cookie Policy.
- Queries and complaints
If you contact us using any of the email addresses, phone numbers or postal addresses provided on the Website to submit a query or a complaint to us we will use the contact details you provide to respond to your query or complaint.
3. Visitors
Information we collect about you and why we collect it.
We may collect your contact details, including your name, postal address, email address and telephone number.
Why we collect it: If you visit Highland Wildlife Park by foot we may take a note of your name and telephone number to make sure you safely leave the park before we lock-up.
Legal basis: Our and your legitimate interests of keeping you safe.
Why we collect it: When you decide to provide Gift Aid we are required to collect and obtain your name and address.
Legal basis: This is a legal requirement placed on us.
Why we collect it: We would like to send you information and marketing materials related to goods, services and activities which we feel may be relevant to you.
Legal basis: We will only send you these types of communications with your explicit consent.
Details of a first aid accident or another incident you or your group are involved in.
Why we collect it: If this occurs, we will talk you through the process of why we are collecting this data and what happens to it.
Legal basis: If this occurs, we will talk you through the process of why we are collecting this data and what happens to it.
CCTV footage
Why we collect it: Please note that for your safety and security, CCTV is in operation in public areas of our premises and this footage is stored temporarily. Some of our cameras are also streamed as live webcams on our website. The focus of our live publicly available webcams are always our animals however at times our visitors may appear in the distance on screen. Signs are placed in areas where our live webcams may stream public areas.
Legal basis: Our and your legitimate interests, of keeping you and our animals safe. There are CCTV signs visible at Highland Wildlife Park and Edinburgh Zoo.
VRM (registration number)
Why we collect it: In order to provide you with car parking services at Edinburgh Zoo, our car park system is equipped with ANPR cameras which capture your VRM. We use ANPR and your VRM to facilitate car park charging, your vehicles entry and exit to the car park, and for your safety and security.
Legal basis: Our legitimate interests of providing car park charging and facilities to our visitors.
Why we collect it: Our CCTV cameras at Edinburgh Zoo will also capture your VRM if you choose to use our car park. We use CCTV and your VRM to maintain security, investigate incidents occurring in the car park, and dealing with any complaints or enquiries that may be made.
Legal basis: Our and your legitimate interests of keeping you safe.
Why we collect it: We may if requested provide your VRM and/or CCTV footage to law enforcement agencies for the purposes of their investigations.
Legal basis: This is a legal requirement placed on us.
4. Memberships
Information we collect about you as a registered RZSS member and why we collect it:
We may collect your contact details, including your name, postal address, email address and telephone number.
Why we collect it: To contact you in relation to your membership or your membership application.
Legal basis: On the basis of our legitimate interests or as may be necessary for the performance of the membership terms and conditions we have with you. We may not be able to continue your membership or to provide you with all of the services you would usually be entitled to under a membership if you do not provide this information.
Why we collect it: When you decide to provide Gift Aid we are required to collect and obtain your name and address.
Legal basis: This is a legal requirement placed on us.
Why we collect it: To post your membership welcome information to you.
Legal basis: On the basis of your legitimate interests (to ensure that you receive the benefits you have purchased) and as is required by us for the performance of the membership terms and conditions we have with you.
Why we collect it: We would like to send you newsletters and information about goods, services and activities related to your membership.
Legal basis: We may send you non-electronic forms of communication (post and live calls), based on our legitimate interest, and we will only send you digital communications (email and text) with your explicit consent.
Why we collect it: So we can send you our exclusive members magazine
Legal basis: We will post you our members magazine based on our legitimate interests (so you know what we are up to and to allow you to make the most of your membership), and we will only email you our digital members magazine with your explicit consent. You will always have the option to opt out of receiving our members magazine at any time.
Why we collect it: So we can post renewal letters to you when your current membership is due to end.
Legal basis: On the basis of our legitimate interests in that we want to continue to offer you membership opportunities.
Your date of birth
Why we collect it: To ensure that the membership type you have purchased is correct for you.
Legal basis: As is required by the membership terms and conditions we have with you to sign you up as a member.
Your photograph
Why we collect it: So we can link your membership card and number to you when you visit us.
Legal basis: Our legitimate interests of ensuring that only members benefit from membership.
Details of whether you have a disability
Why we collect it: Because you are entitled to have a carer join you for free when you visit us if you have a disability.
Legal basis: When we ask for this information we are requesting information in relation to your health.
We will only process this information with your prior consent.Student membership
Why we collect it: We will ask for sight of your student card when you visit us but we do not keep copies.
Legal basis: As is required by the membership terms and conditions we have with you to sign you up as a member.
Your membership card collects information about your visits and purchases
Why we collect it: We may also look to understand what advertising and information is relevant to you by analysing your visitor history and spending data as available via your membership card.
Legal basis: With your prior consent only.
Your bank account details or credit card details
Why we collect it: To allow us to set up your Direct Debit or to process your payment. We do not receive your credit card details when you pay via our Website. Any card information which you provide to us in writing or over the phone will be securely destroyed.
Legal basis: As is required by the membership terms and conditions we have with you to sign you up as a member. We may not be able to continue your membership or to provide you with all of the services you would usually be entitled to under a membership if you do not provide this information.
Specific retention periods for members
Please refer to the General Retention Periods section at the top of this document for further details on membership retention.
Information we collect about you if you purchase membership as a gift or receive one from someone else and why we collect it:
We may collect your contact details, including your name, postal address, email address and telephone number.
Why we collect it: To contact you in relation to the membership application you are purchasing for someone else/receiving
Legal basis: On the basis of our legitimate interests or as may be necessary for the performance of the membership terms and conditions we have with you. We may not be able to continue the membership or to provide all of the services a member would usually be entitled to under a membership if you do not provide this information.
Why we collect it: When you decide to provide Gift Aid we are required to collect and obtain your name and address.
Legal basis: This is a legal requirement placed on us.
Why we collect it: We would like to send you newsletters and information about our goods, services and activities.
Legal basis: We may send you non-electronic forms of communication (post and live calls), based on our legitimate interest, and we will only send you digital communications (email and text) with your explicit consent.
Your bank account details or credit card details
Why we collect it: To allow us to set up your direct debit or to process your payment.
Legal basis: As is required by the membership terms and conditions we have with you. We may not be able to continue the membership or to provide all of the services usually provided by us under a membership if you do not provide this information.
Specific retention periods if you buy a membership as a gift for someone else
Please refer to the General Retention Periods section at the top of this document for further details on membership retention.
5. Adoptions
Information we collect if you adopt an animal for yourself and why we collect it:
Your contact details, including your name, postal address, email address and telephone number.
Why we collect it: If you purchase the adoption for yourself, to contact you in relation to the adoption or the adoption application.
Legal basis: On the basis of our legitimate interests or as may be necessary for the performance of the adoption terms and conditions we have with you. We may not be able to continue your adoption or to provide you with all of the services you would usually be entitled to under an Adoption if you do not provide this information.
Why we collect it: When you decide to provide Gift Aid we are required to collect and obtain your name and address.
Legal basis: This is a legal requirement placed on us.
Why we collect it: To apply your name to your certificate.
Legal basis: As is necessary for the performance of the adoption terms and conditions we have with you in ensuring that you receive your adopter benefits.
Why we collect it: To post your adoption pack to you.
Legal basis: As is necessary for the performance of the adoption terms and conditions we have with you in ensuring that you receive your adopter benefits.
Why we collect it: We would like to send you newsletters and information about goods, services and activities related to your adoption.
Legal basis: We may send you non-electronic forms of communication (post and live calls), based on our legitimate interest, and we will only send you digital communications (email and text) with your explicit consent.
Your bank account details or credit card details
Why we collect it: To allow us to set up your direct debit or to process your payment. We do not receive your credit card details when you pay via our Website. Any card information which you provide to us in writing or over the phone will be securely destroyed.
Legal basis: As is required by the adoption terms and conditions we have with you to sign you up as an adopter. We may not be able to continue your adoption or to provide you with all of the services you would usually be entitled to if you do not provide this information.
Specific retention periods for adopters
Please refer to the General Retention Periods section at the top of this document for further details on how we will retain our adopters information.
Information we collect about you if you purchase adoption as a gift or receive one from someone else and why we collect it:
Your contact details, including your name, postal address, email address and telephone number.
Why we collect it: To contact you in relation to the Adoption you are purchasing for someone else/receiving
Legal basis: On the basis of our legitimate interests or as may be necessary for the performance of the adoption terms and conditions we have with you. We may not be able to continue the Adoption or to provide all of the services an Adopter would usually be entitled to under an Adoption if you do not provide this information.
Why we collect it: When you decide to provide Gift Aid we are required to collect and obtain your name and address.
Legal basis: This is a legal requirement placed on us.
Why we collect it: We would like to send you newsletters and information about our goods, services and activities.
Legal basis: We may send you non-electronic forms of communication (post and live calls), based on our legitimate interest, and we will only send you digital communications (email and text) with your explicit consent.
Your bank account details or credit card details
Why we collect it: To allow us to set up your direct debit or to process your payment. We do not receive your credit card details when you pay via our Website. Any card information which you provide to us in writing or over the phone will be securely destroyed.
Legal basis: As is required by the adoption terms and conditions we have with you to sign you.
We may not be able to continue the Adoption or to provide all of the services an Adopter would usually be entitled to under an Adoption if you do not provide this information.
Specific retention periods if you purchase an adoption as a gift for someone else
Please refer to the General Retention Periods section at the top of this document for further details on how we will retain our adopters information and the information of those who purchase them.
6. Customers
Information we collect about you and why we collect it.
We may collect your contact details, including your name, postal address, email address and telephone number.
Why we collect it: When you decide to provide Gift Aid we are required to collect and obtain your name and address.
Legal basis: This is a legal requirement placed on us.
Why we collect it: To administer and provide Products and services you request or have expressed an interest in and/or to communicate with you in the Products or services you have purchases or expressed an interest in change or become unavailable.
Legal basis: As is required for the contract we have with you (contract for sale of Products or services).If you do not provide the details then we likely cannot provide the Products to you.
Why we collect it: We would like to send you newsletters and information about our goods, services and activities.
Legal basis: We may send you non-electronic forms of communication (post and live calls), based on our legitimate interest, and we will only send you digital communications (email and text) with your explicit consent.
Your bank account details
Why we collect it: To allow us to set up your direct debit, if applicable, or to process your payment. We do not receive your credit card details when you pay via our website. Any card information which you provide to us in writing or over the phone will be securely destroyed.
Legal basis: As is required by the terms and conditions we have with you.
We may also record details of any disability or health needs you may have at the time of booking an event or service which will take place at either Edinburgh Zoo, Highland Wildlife Park or any of our other premises.
Why we collect it: To help to ensure your comfort and safety.
Legal basis: With your consent.
Please note that from time to time we use third party providers such as Eventbrite to sell our event tickets.
Specific retention periods for customers
Please refer to the General Retention Periods section at the top of this document for further details on how we will retain our customers information.
7. Supporters
We want our supporters to be the first to know about the latest news from across RZSS.
- How do we communicate our updates?
We often communicate through post and email. We may also contact you via live telephone calls or text message (SMS).
We also indirectly communicate to our supporters via our Websites and social media channels (this is not direct marketing or direct fundraising as it is not specifically aimed at you).
- On what legal basis are we relying?
We may send you non-electronic forms of communication (post and live calls), based on our legitimate interest, and we will only send you digital communications (email and text) with your explicit consent.
You will always have the option to opt out of any of our marketing communications at any time.
In addition to our regular newsletter updates subscribers may have the option at times to share some of their interests in order to receive additional updates with content specific to their interests.
Please note, if you don’t choose to receive this information, we will be unable to keep you informed of new products, events or special offers that may interest you and our ability to inform you of ticketing opportunities may be affected. This does not affect communications that are directly related to a Product that you may have purchased from us and or those that we are lawfully obliged to provide.
- What might out communications cover?
We communicate through the above channels:
- to share news updates about the animal collection, campaigns, services and facilities at Edinburgh Zoo
- to share news updates about the animal collection, campaigns, services and facilities at Highland Wildlife Park
- to share updates about RZSS conservation and research projects
- to promote RZSS events
- to promote RZSS private hire and function based services such as weddings and birthday packages
- to communicate with current and prospective members
- to communicate with current and prospective animal adopters
- to promote RZSS education services and activity
- to promote RZSS products, competitions and promotions, including but not limited to membership, adoption, retail products, tours and experiences
- to send customers important information directly relating to an RZSS product purchase (tickets, membership, adoption, events, retail etc). This includes automated messaging
- to send RZSS members updates and renewal marketing
- to send RZSS adopters updates and renewal marketing
- to send subscribers birthday related messaging
- to raise awareness of RZSS employment vacancies and volunteering opportunities
- to promote RZSS fundraising campaigns for new and existing exhibits at Edinburgh Zoo and Highland Wildlife Park
- to promote RZSS fundraising campaigns aimed at supporting our conservation and education projects, including donations and legacies
- to gather and request feedback on RZSS products and events.
- to use e-mail analytical data to understand more about subscriber interests, behaviour and conversion rates. This data may also be used to better understand specific groups within our subscriber base by interest, demographic and/or geographic criteria
- to occasionally include messaging from partner organizations, sponsors and related attractions, for the purpose of promoting a common cause or reciprocal marketing
As a registered conservation charity, we rely on donations and support from others to achieve our mission. From time to time, we may contact members and supporters with fundraising material and communications. This might be about an appeal, a competition we’re running, or to suggest ways you can raise funds.
- Research and profiling
We may use profiling and screening techniques to ensure that the communications we send are relevant to you. This allows us to provide an improved experience for our supporters.
When building a profile of our supporters we may analyse geographic and demographic information, as well as your online behaviour and purchase history, to better understand your interests so we can contact you with relevant messages. An example of this would be looking at your location so we can share information about relevant events or products in your area.
We may profile supporters in terms of financial and practical support. For example, we may keep track of the amount, frequency and value of each person’s support with RZSS venues, products or services. This information helps us to ensure communications are relevant and timely.
We may also participate in Facebook's ‘Custom Audience’ service from time to time. This service enables RZSS to display to you personalised advertisements when you visit Facebook’s social media platforms. It works by converting your email address to a unique number that Facebook uses to match to unique numbers that Facebook generates from email addresses of its users. Where we use Facebook Custom Audiences, we will only include you if you have consented to receive marketing from us. If you have given us your consent, you can change your mind at any time by unsubscribing via the links in the footer of our e-mail updates, by contacting us or by adjusting your preferences in the preference centre.
- Third parties who may access your information
We may use third parties (known as affiliate marketers) to carry out fundraising on our behalf. For example, we may use an affiliate to call supporters (who have agreed to be contacted by phone) about a campaign or appeal.
Specific retention periods for supporters
For individuals that are only supporters (and are not for example, also donors or members or adopters) we will destroy most of your personal information if you opt–out from receiving our updates but we may retain some very basic information for the purposes of our suppression list to make sure that we do not contact you again.
8. Competition applicants
Information we collect about you and why we collect it.
We may collect your contact details, including your name, postal address, email address and telephone number.
Why we collect it: To contact you if win.
Legal basis: On the basis of your legitimate interests (in that you want to find out if you are a winner!).
Specific retention periods for competition applicants
We will destroy your personal data after the prize draw or the end of the competition unless you have expressly chosen to opt-in to our mailing list.
9. Donations
Information we collect about you and why we collect it.
We may collect your contact details, including your name, postal address, email address and telephone number.
Why we collect it: When you decide to provide Gift Aid we are required to collect and obtain your name and address.
Legal basis: This is a legal requirement placed on us.
Why we collect it: We would like to send you newsletters and information about our goods, services and activities.
Legal basis: We may send you non-electronic forms of communication (post and live calls), based on our legitimate interest, and we will only send you digital communications (email and text) with your explicit consent.
Your bank account details
Why we collect it: To allow us to set up your direct debit, if applicable, or to process your payment.
We do not receive your credit card details when you pay via our Website. Any credit card information which you provide to us in writing or over the phone will be securely destroyed.Legal basis: As is required by the terms and conditions we have with you.
Specific retention periods for competition applicants
Please refer to the General Retention Periods section at the top of this document for further details on how we will retain our donors information.
10. Recruitment applications
RZSS is committed to respecting the privacy of anyone expressing an interest in working with us. As part of our recruitment process, we collect and process personal data relating to job applicants. We are committed to being transparent about how we collect and use that data in order to meet our GDPR obligations.
Information we collect about you and why we collect it.
Your name, address and contact details, including email address and telephone number
Why we collect it: To contact you in relation to the job you are applying for, e.g. invite you to interview.
Legal basis: Our and your legitimate interest
Details of your qualifications, skills, experience and employment history
Why we collect it: To check if you have met the essential criteria, e.g. necessary qualifications for role (if applicable).
Legal basis: Our legitimate interest
Information about your current level of remuneration, including benefit entitlements
Why we collect it: This is helpful to gauge candidate expectations and used to benchmark against organisations.
Legal basis: Our and your legitimate interest
Diversity monitoring information such as sex, age, religion, race and disability
Why we collect it: For equal opportunities monitoring purposes and to ensure we make reasonable adjustments during the recruitment process (if applicable).
Legal basis: On the basis of your and our legitimate interest
Information about your entitlement to work in the UK
Why we collect it: To verify that you are eligible to work in the UK.
Legal basis: This is a legal requirement
Information about criminal convictions
Why we collect it: To ascertain if a disclosed offense is related to the job for which you are applying, working with children or animal welfare convictions.
Legal basis: This is a legal requirement
The information you provide as part of the recruitment process will be shared with the HR Team, shortlisting managers, and those individuals who have been identified to form part of an interview panel. Where we wish to disclose information about you to other third parties, we will not do so without receiving your consent beforehand, e.g. this may be to obtain reference checks.
Specific retention periods for vacancy applicants
Speculative applications (e.g. vacancy enquiries or non-specific applications) – will be will be held within the HR records for a period of 6 months before being deleted or destroyed.
Unsuccessful applications (e.g. not short-listed after initial application or unsuccessful after interview) – will be held within the HR records for a period of 6 months once the campaign has closed before being deleted or destroyed. This information is mainly used for providing candidate feedback, monitoring and statutory reporting purposes and should we need to contact a reserve candidate, if agreed in advance, in the event of a withdrawal or a similar position were to become vacant within a 6-month period.
Successful applications – once a successful candidate has taken up employment with RZSS, they should refer to the HR Privacy Policy. Once employment with RZSS has ended, we will retain your information in accordance with the requirements of our retention schedule and then delete it.
Policy version v.25032024
