Groups Districts Pricing Guides Sign in Get started

Privacy

Privacy Policy

How Scout Pages handles personal information and protects your data.

Last updated on 18 January 2026

1. Introduction

Drill Software Limited ("we", "us", or "our") operates Scout Pages. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

For the purposes of data protection law, the data controller is:

Drill Software Limited
Email: [email protected]

3. Information We Collect

3.1 Account Information

When you create an account, we collect:

  • Email address
  • Password (encrypted)
  • Scout group name and details

3.2 Website Content

When you create a website through Scout Pages, we store the content you provide, including:

  • Group information and descriptions
  • Section details (Squirrels, Beavers, Cubs, Scouts)
  • Meeting times and locations
  • Links to external resources
  • Images and media you upload

3.3 Analytics Data

We collect privacy-friendly analytics about visitors to your Scout Pages website:

  • Page views and visit counts
  • Referral sources
  • Browser type and device category
  • Approximate location (country level only)

Important: We do not use tracking cookies, do not collect IP addresses, and do not track individuals across websites.

3.4 Payment Information

Payment processing is handled by our payment provider, Dodo Payments. We do not store your full credit card details.

4. How We Use Your Information

We use your personal information to:

  • Provide and maintain the Scout Pages service
  • Process your payments and subscriptions
  • Send you service-related communications
  • Respond to your support requests
  • Improve and develop our service
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

Legal Basis for Processing

We process your data based on:

  • Contract performance: To provide the service you've subscribed to
  • Legitimate interests: To improve our service and prevent fraud
  • Legal obligation: To comply with tax and accounting requirements
  • Consent: For marketing communications (where applicable)

5. Data Sharing and Disclosure

We may share your information with:

5.1 Service Providers

  • Dodo Payments: Payment processing
  • Turso: Database hosting
  • Cloudflare: Content delivery and security
  • Resend: Email delivery

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion:

  • Account data is deleted within 30 days
  • Website content is deleted within 30 days
  • Analytics data is automatically deleted after 90 days
  • Billing records are retained for 7 years (legal requirement)

7. Your Rights

Under UK data protection law, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a structured format
  • Object: Object to certain types of processing
  • Withdraw consent: Where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data properly.

8. Data Security

We protect your data using:

  • SSL/TLS encryption for all data in transit
  • Encrypted passwords using industry-standard hashing
  • Secure database hosting with access controls
  • Regular security updates and monitoring
  • Limited employee access to personal data

While we implement strong security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. Cookies

Scout Pages uses minimal cookies:

  • Session cookie: Essential for login functionality (deleted when you close your browser)

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Visitors to Scout Pages websites are not tracked.

10. Children's Privacy

Scout Pages is designed for use by adults (18+) to create websites for Scout groups. We do not knowingly collect personal information from children under 18.

If you publish information about young people on your Scout Pages website, you are responsible for ensuring you have appropriate consent and comply with your Scout group's safeguarding policies.

11. International Data Transfers

Your data is primarily stored and processed in the United Kingdom. Some of our service providers may process data outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses
  • Adequacy decisions
  • Certification schemes

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on the Service.

Your continued use of Scout Pages after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Drill Software Limited
Email: [email protected]

For data protection concerns, you can also contact the ICO:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk