Privacy

On 25th May 2018, the General Data Protection Regulation came into effect.  It brought in changes to the way organisations like us handle your personal data.   

It gives you more control over how your personal data is used.  It also gives you a number of rights in relation to your personal data.   

And it affects every business and organisation that handles data, from your gym to your local café to us. 

This video explains how we handle your data, your rights under GDPR and how we keep your data safe.   

We need a lawful basis to collect your data.  Our lawful basis might be to deal with a complaint, to monitor information about complaints, to provide training or to send you our publications if you ask us to.   

We take your confidentiality seriously.   

We take steps to make sure your data is secure.   

But sometimes, we need to share the information you’ve given us with other organisations, like the Law Society of Scotland. 

But we won’t share it any more widely than we need to.   

We’ll treat sensitive data with extra care.  Special data includes information about health, sexual orientation, race, religion and political views.   

We’ll only collect data we need.  We’ll have to ask for some information like your name, your contact details and information about your complaint.   

But we promise not ask for information we don’t need.  Like what you had for dinner last night.   

You have rights under GDPR.  You have the right to be informed about the data we hold on you, the right to access that data free of charge and without delay, the right to have wrong information about you corrected and the right to have your personal data erased if we no longer need it.   

We’ll always keep your data secure.  Our files are securely stored, we have strong cybersecurity systems and we use telephone ID checks to ensure we’re speaking to you.   

So what happens if we don’t follow the data rules?  

Depending on what’s happened and how serious it could be, we might investigate what went wrong, speak to the people involved, tell the Information Commissioner’s Office what happened and let you know what we’ve done.  Then, we’ll take action to make things safer in the future.