Privacy Policy
Privacy Policy
1. Important information and who we are:
This privacy policy gives you information about how Scottish Futures Trust Limited collects and uses your personal data through your use of this website.
Controller:
Scottish Futures Trust Limited is the controller and responsible for your personal data(collectively referred to as “SFT”, "we", "us" or" our" in this privacy policy).
2. The types of personal data we collect about you:
Personal data means any information about an individual from which that person can be identified.
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
· Identity Data includes first name, last name, any previous names, username or similar identifier, and title.
· Contact Data includes address, email address and telephone numbers.
· Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website.
· Profile Data includes purchases or orders made by you, your interests, preferences, feedback and survey responses.
· Usage Data includes information about how you interact with and use our website, products and services.
· Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
We also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals' Usage Data to calculate the percentage of users accessing a specific website feature in order to analyse general trends in how users are interacting with our website to help improve the website and our service offering.
3. How is your personal data collected?
We use different methods to collect data from and about you including through:
Your interactions with us
You may give us your personal data by filling in online forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
· subscribe to our service or publications;
· request marketing to be sent to you;
· enter a competition, promotion or survey; or
· give us feedback or contact us.
Automated technologies or interactions
As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. Please see our cookie policy for further details.
4. How we use your personal data
Legal basis:
The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:
Consent:
We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter.
Public task:
We rely on this lawful basis where the processing of personal data is necessary for the proper performance of our public function.
5. Purposes for which we will use your personal data
This Privacy Policy explains how we collect and use personal information about you. In general terms, we collect and use personal information to:
· administer, manage and develop our business;
· provide you with information about us and our work and other information, which may be of interest to you (including requested reference emails);
· verify your identity;
· contact you by email;
· maintain our records;
· to notify you about changes to our Privacy Notice;
· register for participating in programmes and toolkits operated by us; and
· to manage newsletter subscriptions.
6. Subscribing
You can subscribe on the website to receive information from us, including briefings, blogs and press releases. You can unsubscribe at any time by contacting us direct at:
enquiries@se-rda.org.uk
7. International transfers
We do not transfer your personal data outside the UK.
8. Data security
Our Website is hosted on servers in the European Economic Area. We employ appropriate security measures to help protect your personal information and guard against access by unauthorised persons. Information storage is on secure computers in a locked and certified information centre and the information is encrypted wherever possible. We undergo periodic reviews of our security policies and procedures to ensure that our systems are secure and protected. However, as the transmission of information via the Internet is not completely secure we cannot guarantee the security of your information transmitted to our website.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
9. Data retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there isa prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and other applicable legal and regulatory requirements.
10. Your legal rights
You have a number of rights under data protection laws in relation to your personal data.
Subject to applicable limitations, you have the right to:
· Receive certain information about our processing;
· Request access to the personal data that we hold about you (often known as a data subject access request);
· Request transfer, correction, deletion, of your personal data;
· Object to or request restriction of processing;
· Object to decisions based solely on automated processing, including profiling;
· Be notified of a personal data breach;
· Complain to the Information Commissioner’s Office; or
· Withdraw your consent to processing (if we process your personal data on the basis of your consent).
If you wish to exercise any of the rights set out above, please contact us (see Contact details (paragraph 11).
What we may need from you:
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Time limit to respond:
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
11. Contact details
Should you have any questions regarding the use of your data or this policy, please contact us by the following methods:
· In writing: Data Protection Officer, Scottish Futures Trust Limited, Thistle House, 4th Floor, 91 Haymarket Terrace, Edinburgh, EH12 5HE.
· By email: mailbox@scottishfuturestrust.org.uk
12. Complaints
We seek to resolve all complaints about how we handle personal information directly. Our complaints procedure can be accessed here. You can also lodge a complaint with the Information Commissioner’s Office, using the contact details provided below:
Online:https://ico.org.uk/global/contact-us/contact-us-public/
By phone: 0303 123 1113
By post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow,SK9 5AF
13. Changes to the privacy policy and your duty to inform us of changes
We may make changes to this Privacy Notice. This Privacy Notice was last updated in April 2025.
