Welcome to Really Real Resources (“we,” “our,” or “us”). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website, purchase our educational learning packs, apply to our photographer network, make a donation, or interact with our services.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For the purposes of applicable data protection laws, Really Real Resources is the Data Controller responsible for your personal data.
Full Legal Name: Really Real Resources
We are a Scottish charity (OSCR Reg. SC053073)
Email Address: dave@reallyrealresources.com
Postal Address: Southerton Dalginross, Comrie, Crieff, Perthshire, Scotland, PH6 2EG
Depending on how you interact with our site, we may collect and process the following categories of personal data:
• Identity & Contact Data: Name, job title, school/organisation name, email address, phone number, and delivery/billing address (e.g., when ordering learning packs, signing up for newsletters, or requesting budget approval flyers).
• Financial & Transaction Data: Payment details and transaction history when purchasing packs, licensing photography, or making a donation. (Note: All payments are processed securely via third-party payment providers; we do not store full credit card details).
• Photographer & Creator Data: Portfolios, contact information, bio details, licensing agreements, and payment/banking details for royalty or project payouts.
• Technical & Usage Data: IP address, browser type, operating system, time zone, and details of how you navigate our site (collected via essential and analytical cookies).
We only share personal information where necessary for the operation of our services, to meet legal requirements, or for another lawful purpose explained in this policy.
Our service providers may include payment processors, website hosting providers, IT support services, email delivery platforms, and delivery partners.
Where organisations process personal information on our behalf, we take appropriate steps to ensure that suitable data protection arrangements are in place.
We do not sell personal information to third parties.
| Purpose / Activity | Type of Data | Legal Ground for Processing |
| Processing orders for learning packs or stock licenses | Identity, Contact, Financial, Transaction | Performance of a Contract |
| Processing single or recurring donations | Identity, Contact, Financial | Performance of a Contract / Legal Obligation |
| Sending newsletters, updates, and free sample packs | Identity, Contact | Consent (you can unsubscribe anytime) |
| Onboarding photographers & reviewing portfolio submissions | Identity, Contact, Portfolio details | Contractual / Legitimate Interests |
| Handling teacher, parent, or partner inquiries | Identity, Contact, User messages | Legitimate Interests (responding to your requests) |
| Improving our website, security, and user experience | Technical, Usage | Legitimate Interests |
Our Legitimate Interests
Where we rely on legitimate interests to process personal information, these interests include responding to enquiries, developing and distributing educational resources, maintaining relationships with schools and professional contributors, improving our services, and keeping our website secure.
Before relying on legitimate interests, we consider whether the processing is necessary and whether our interests are outweighed by the rights and freedoms of the individuals concerned.
We do not sell, rent, or trade your personal data to third parties. However, we may share your data with trusted third-party service providers who assist us in operating our platform, including:
• Payment Processors: To handle secure order checkout and donations.
• Website Hosting & IT Infrastructure: Cloud servers, storage providers, and database management platforms.
• Email Marketing & Delivery Providers: To send order confirmations, sample packs, and newsletters.
• Fulfilment & Shipping Partners: To deliver physical learning packs and visual resources.
• Legal & Regulatory Authorities: If required to do so by UK law or to protect our legal rights.
Some of the third-party services we use may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we take steps to ensure that transfers comply with applicable UK data protection legislation.
Depending on the destination and service provider, this may involve UK adequacy regulations or appropriate safeguards, such as a UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
You can contact us using the details in Section 2 to request further information about relevant international transfers and the safeguards that apply.
Data Security
We take appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse, alteration or disclosure.
Access to personal information is restricted to those who require it for legitimate operational purposes.
How Long We Keep Your Information
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory requirements.
Our standard retention periods are:
Customer and transaction records: Six years from the end of the relevant financial year.
Donation and financial records: Six years from the end of the relevant financial year, or longer where required by applicable Gift Aid rules.
Unsuccessful photographer applications: Six months after the application decision, unless a longer period has been agreed or is otherwise justified.
Photographer agreements and licensing records: For the duration of the agreement and for as long as necessary to establish and manage ongoing usage rights, with relevant financial records retained for at least six years from the end of the relevant financial year.
Newsletter subscriptions: Until you unsubscribe or withdraw your consent, subject to retaining limited information where necessary to respect your communication preferences.
Website analytics information: In accordance with the retention settings of the relevant analytics services, as described in our Cookie Policy.
We may retain information for longer where necessary to comply with legal obligations, resolve disputes or establish, exercise or defend legal claims.
When personal information is no longer required, we securely delete or anonymise it.
Under UK data protection law, you have a number of rights in relation to your personal information. These rights apply in different circumstances, depending on how and why we process your information.
You can contact us to exercise your rights using the details in Section 2. We will respond in accordance with applicable data protection law.
Your right to object to direct marketing
You have the right to object at any time to the use of your personal information for direct marketing. If you object, we will stop using your information for that purpose.
You can also unsubscribe from marketing emails using the unsubscribe link provided in those communications.
Under UK data protection laws, you have the right to:
• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of any inaccurate or incomplete data.
• Erasure: Request that we delete your personal data (the “right to be forgotten”).
• Restrict or Object to Processing: Object to direct marketing or request restrictions on how we process your data.
• Data Portability: Request a transfer of your data to another party.
• Withdraw Consent: Withdraw your consent at any time where processing is based on consent.
• To exercise any of these rights, please contact us at dave@reallyrealresources.com
Our website uses cookies and similar technologies to support essential website functions, understand how visitors use our website, and improve the services we provide.
Some cookies are necessary for the website to function. Other cookies may require your consent or be subject to specific legal exemptions.
Where required, we provide visitors with information and appropriate choices about the use of cookies.
For further information about the cookies used on our website, their purposes, and how to manage your preferences, please read our Cookie Policy.
Our website may include links to third-party websites, plug-ins, or applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
If you have any concerns about our use of your personal information, you can make a complaint to us directly at dave@reallyrealresources.com
You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues:
Website: www.ico.org.uk
Helpline: 0303 123 1113
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any updates will be posted on this page with a revised “Last Updated” date.