Scottish Design ( “Scottish Design”, “we”, “us”, “our”) is committed to safeguarding any personal information shared with us. We take privacy seriously and we will only ever collect and use personal information where it is necessary, fair and lawful to do so in line with the privacy and data protection laws applicable to our business operations.
When you visit any of our websites, you will be able to access the most up to date Privacy Notice for that respective part of Scottish Design, by following the link at the foot of the website.
Our Privacy Notices include important information to explain;
If you have any questions or concerns about how we collect and use personal information, please contact;
4. 38. West Gorgie Place
Scottish Design is committed to protecting your personal information.
Who we are
Scottish Design are providers of graphic design and other design services.
How to contact us
4/38 West Gorgie Place Edinburgh EH14 1BF
Information we collect and use
Information about you that we collect and use includes:
Where we collect and use sensitive personal information, this information will only be collected and used where it's needed to provide the product or service you have requested or to comply with our legal obligations, and where we have also obtained your explicit consent to process such information.
Where we collect your information
We may collect your personal information directly from you, from a variety of sources, including:
We may also collect personal information on you
Why we collect and use your information
We take your privacy seriously and we will only ever collect and use information which is personal to you where it is necessary, fair and lawful to do so. We will collect and use your information only if we are able to satisfy one of the lawful processing conditions set out in the data protection laws.
This will be the case where:
Where the processing is in our legitimate interests or those of a third party, we will always conduct an assessment to ensure that this use of your personal information is not excessive or unnecessary or otherwise more intrusive than it needs to be.
We sometimes use systems to make automated decisions based on personal information we have - or are allowed to collect and use from others – about you. These automated decisions can affect the products, services or features we offer you now or in the future. We use automated decisions in the following ways:
When designing and enhancing our online services to help meet your requirements for ongoing guidance and support.
If you do not wish us to collect and use your personal information in these ways, it may mean that we will be unable to provide you with our products or services.
Who we may share your information with
We may share your information with third parties for the reasons outlined in 'Why we collect and use your information'
We may share your information with:
Whenever we share your personal information, we will do so in line with our obligations to keep your information safe and secure.
Where your information is processed
The majority of your information is processed in the UK.
However, some of your information may be processed by us or the third parties we work with in the European Economic Area (EEA).
Where your information is being processed outside of the UK, we take additional steps to ensure that your information is protected to at least an equivalent level as would be applied by UK data privacy laws e.g. we will put in place legal agreements with our third party suppliers and do regular checks to ensure they meet these obligations.
How we protect your information
We take information and system security very seriously and we strive to comply with our obligations at all times. Any personal information which is collected, recorded or used in any way, whether on paper, online or any other media, will have appropriate safeguards applied in line with our data protection obligations.
Your information is protected by controls designed to minimise loss or damage through accident, negligence or deliberate actions. Our employees also protect sensitive or confidential information when storing or transmitting information electronically and must undertake annual training on this.
Our security controls are aligned to industry standards and good practice; providing a control environment that effectively manages risks to the confidentiality, integrity and availability of your information.
How long we keep your information
To provide your product and meet our legal and regulatory obligations, we keep your personal information and copies of records we create (e.g. calls with us) while you are a customer of ours.
Even when you no longer have a relationship with us, we are required to keep information for different legal and regulatory reasons. The length of time will vary and we regularly review our retention periods to make sure they comply with all laws and regulations.
You have a number of rights under Data protection laws which may be exercised in certain circumstances.
Right to be informed about how and why we are processing your personal information
Right of access to personal information relating to you
You have the right of access to your personal information. If you wish to receive a copy of the personal information we hold on you, you may make a data subject access request (DSAR).
Right to request rectification of inaccurate or incomplete personal information
If your personal information is inaccurate or incomplete, you can request that it is corrected.
Right to request erasure of your personal information
You can ask for your information to be deleted or removed if there is not a compelling reason for us to continue to have it.
Right to restrict processing of your personal information
You can ask that we block or suppress the processing of your personal information for certain reasons. This means that we are still permitted to keep your information - but only to ensure we don't use it in the future for those reasons you have restricted.
Right to object to processing of your personal information
You can object to Scottish Design processing your personal information where: it's based on our legitimate interests (including profiling); for direct marketing (including profiling); and if we were using it for scientific/historical research and statistics.
Right to not be subject to automated decision making including profiling
You have the right to ask Scottish Design to:
More information can be found on your rights here https://ico.org.uk/for-the-public/
If you want to talk to us about any of the individual rights, please contact us email@example.com
How to make a complaint
While we hope that we can resolve any complaints for you, you do have the option to complain to the ICO (whether or not you have exhausted our complaints procedure). Their contact details are as follows:
Postal address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF