You appear to be using an unsupported browser, and it may not be able to display this site properly. You may wish to upgrade your browser.


What type of information we collect

We collect and process the following information when you visit

  • any feedback you share with us
  • your cookies using Google Analytics
  • your IP address

We also use Google Analytics to collect information about:

  • which type of browser and device you used
  • the pages you visit on
  • how long you spend on each page
  • how you got to the site
  • what you click on while you’re visiting the site

Google Analytics data is only collected from users who have consented to share this data. Any information we get about you from Google Analytics will be anonymised before we see it. This means we will not hold any personally identifiable information about you, such as your name or address.

Additionally, we use Plausible Analytics on this site to collect some anonymous usage data for statistical purposes. This is to track overall trends in our website traffic, not to track individual visitors. All the data is in aggregate only. No personal data is collected to Plausible. Data collected includes referral sources, top pages, visit duration, information from the devices (device type, operating system, country and browser) used during the visit. Read more in the Plausible Analytics data policy.

Why we collect this information

We use the information you share with us:

  • to improve our services
  • give you access to government services
  • to identify security threats

Our legal basis for processing this data is ‘legitimate interests’. That’s because:

  • it’s in the legitimate interests of our users to make improvements to our website
  • we need to maintain the security of

We only collect information about you using Google Analytics if you consent to it.

If you do not consent to it, you can let us know by emailing

What we do with this information

We may share your anonymised information with other agencies or public bodies in the Scottish Government. But this will not include personally identifiable information.

We’ll only share your data with a third party if we’re required to do so by law. For example by court order or to prevent fraud.

We will not:

  • sell or give your data to third parties
  • share your data with third parties for marketing purposes

How long we keep your information

We will delete any feedback you share with us after 3 years. We keep anonymised analytics for 38 months.

How we store this information

All personal information is stored in the European Economic Area (EEA). Data collected by Google Analytics data may be processed outside the EEA.

We’re committed to doing everything we can to keep your data safe. We perform regular security tests to make sure our systems and processes are secure.

Your data protection rights

You have the right to:

How to complain

If you’re unhappy with how we’ve used your data, you can complain to the Information Commissioner’s Office (ICO):



Information Commissioner's Office
Wycliffe House
Water Lane


0303 123 1113
Find out about call charges

Changes to this policy

We may change this privacy policy. In that case, the ‘last updated’ date at the top of this page will also change.

Feedback, help or support

If you need any help or want to give any feedback you can email us at:

Back to top