Privacy & Cookies
Policy

Entrepreneurial Scotland (ES) is committed to upholding your privacy as a user of this or any other ES website, microsite or platform. We adhere to the "General Data Protection Regulation (EU) 2016/679” meaning the EU Data Protection Directive 95/46/EC, the EU Privacy & Electronic Communications Directive 2002/58/EC, all national implementing legislation and any successor or other legislation relating to data protection and privacy in the United Kingdom from time to time including the Data Protection Act 2018;

The personal data about you that we collect, process or use (‘Data’) is held securely and treated in accordance with this Policy. Whenever you give us Data, you are consenting to its collection and use as explained in this Policy, including our use of ‘cookies’.


At Entrepreneurial Scotland, we’re committed to protecting and respecting your privacy.

This Policy explains when and why we collect personal information about you, how we use it, the conditions under which we may disclose it to others and how we keep it secure.

We may change this Policy from time to time so please check this page occasionally to ensure that you’re happy with any changes. By using our website, you’re agreeing to be bound by this Policy. If you have any questions regarding this Policy and our privacy practices, please email us at Privacy@EntrepreneurialScotland.com or by writing to us at Entrepreneurial Scotland, Strathclyde Business School, 199 Cathedral Street, Glasgow, G4 0QU. Alternatively, you can telephone +44 (0)141 444 7159.


Who are we?

Entrepreneurial Scotland is a private limited company (Company Number SC478348) wholly owned by Entrepreneurial Scotland (Group) Limited. Entrepreneurial Scotland (Group) Limited is a private company limited by guarantee (Company Number SC478348). The Entrepreneurial Scotland Foundation is a registered charity limited by guarantee (Company Number SC332951, Registered Charity Number SC038858).


How do we collect information from you?

We obtain information about you when you use our website or interact with one of our development programmes, for example, when you contact us to apply for membership or a development programme, apply for a Saltire Scholarship, ask for information about any of our products and services or to donate.


What type of information is collected from you?

We collect different information about you depending on how you interact with us, this is set out below:


Members

When you sign up as a member, you provide us with your name, address, date of birth, email address, job title and information about your organisation. As your membership progresses, we collect other information such as which events you have attended, information you share with us directly and information that is in the public domain. We also hold information about your data preferences.


Development Programmes (Saltire Scholars / Fellows & Leaders)

If you are applying for or have completed one of our development programmes; you provide us with personal data such as your name, address, date of birth, email address, job title or university course and information required to process your application. As your relationship with us progresses, we collect other information such as which events you have attended, the skills & experience you have shared with us and any other information relevant to the programme you have applied for or completed. We also hold information about your data preferences.


Purchase data

If you donate online or purchase a product from us, your card information is not held by us, it is collected by our third-party payment processors, Stripe, who specialise in the secure online capture and processing of credit/debit card transactions.


Events / Masterclasses

When you attend one of our events or masterclasses, we share the attendee list with our speakers and other event attendees. These lists show your name and company name. Your data is held on a secure CRM system called Salesforce, only ES staff have access to that data and its usage is governed through our data protection processes.


Photo and Video

When you attend an ES event, partner event, masterclass or development programme; you should be aware that images may be captured using film photography, digital photography, video or other mediums. We reserve the right to use the images captured in any brochures, booklets, videos, websites or other media and publicity material produced by us. By taking part in our events, masterclasses or development programmes you accept that you may be photographed, filmed, or otherwise captured in image form. If you do not wish to appear in any of our publications, please email us at: Privacy@entrepreneurialscotland.com, alternatively, speak to one of our staff at the event.


How is your data used?

We use your data to communicate with you through several different channels, including email, phone, post and where you have followed us – social media.

We may use your data to:

Information gathered through our surveys will be researched and compiled on an aggregated basis and results may be published on EntrepreneurialScotland.com or elsewhere. Such results will not identify any personal data unless you have expressly granted us permission. The information helps us formulate our policy positions and to monitor or improve our products and services.


Who has access to your information?

All staff in Entrepreneurial Scotland can access your data via Salesforce. We will not:


Third Party Service Providers working on our behalf:

We may pass your information to our third-party service providers, agents, subcontractors and other associated organisations for the purposes of completing tasks and providing services, products or facilities to you on our behalf (for example to process donations and send you mailings). However, when we use third party service providers, we disclose the minimal personal information that is necessary to deliver the service. Our partners have no right to contact you unless for the express purpose of providing a service. We also vet all our partners to ensure they have adequate data privacy policies in place. The only exception to this is if we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.

Third Party Product Providers we work in association with:

We work closely with various third-party product providers to bring you a range of quality and reliable products and services. When you enquire about or purchase one or more of these products, the relevant third-party product provider will use your details to provide you with information and carry out their obligations arising from any contracts you have entered with them. In some cases, they will be acting as a data controller of your information and therefore we advise you to read their Privacy Policy. These third-party product providers will share your information with us which we will use in accordance with this Privacy Policy.

The partners we work with can be found on our website: https://www.entrepreneurialscotland.com/corporate-partner-hub

Other marketing communications may invite you to participate in surveys or prize events sponsored by third parties. These third parties will have been specially selected by us and third-party Promotions will not result in your Data coming into the third party's possession unless you give separate consent to this occurring, for example if you participate in a survey or prize draw or subsequently place an order with the third party. In that event please check notices supplied by that third party for information as to how they will make use of your Data.

When you are using our secure online donation pages, your donation is processed by a third-party payment processor, who specialises in the secure online capture and processing of credit/debit card transactions. If you have any questions regarding secure transactions, please contact us.

We may transfer your personal information to a third party if we are under a duty to disclose or share your personal data to comply with any legal obligation or to enforce or apply our terms of use or to protect the rights or property. However, we will take steps with the aim of ensuring that your privacy rights continue to be protected.

If you subscribe to our Members Directory, please exercise caution when you are submitting personal data about yourself or others, to the Members Directory, as it will be available to all our other members.


Your choices

You have a choice about whether you wish to receive marketing from us. If you do not want to receive marketing communications from us about the vital work, we do and our exciting products and services, then you can “opt out“ by emailing Privacy@entrepreneurialscotland.com. Please note that this may also mean that you do not receive relevant offers.

You can change your marketing preferences at any time by contacting us by email: Privacy@entrepreneurialscotland.com


How you can access and update your information

The accuracy of your information is important to us. If at any time you want to verify, update or amend any Data we hold about you or if you become aware of possible errors or inaccuracies in that Data, please email Privacy@entrepreneurialscotland.com

You also have the right to ask for a copy of the information that we hold about you by emailing Privacy@entrepreneurialscotland.com.


Security precautions in place to protect the loss, misuse or alteration of your information

When you give us personal information, we take steps to ensure that it’s treated securely. Any sensitive information (such as credit or debit card details) is encrypted and sent using a Secure Socket Layer (SSL) connection, ensuring details cannot be intercepted and read. When you are on a secure page, a lock icon will appear on the bottom of web browsers such as Microsoft Internet Explorer.

Non-sensitive details (your email address etc.) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our systems. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. Please don’t share your password with anyone.


Profiling

We may analyse your personal information to create a profile of your interests and preferences so that we can contact you with information relevant to you. We may make use of additional information about you when it is available from external sources to help us do this effectively.


How we use cookies

Like many other websites, our website uses cookies. 'Cookies' are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that website to recognise you when you visit. They collect statistical data about your browsing actions and patterns and do not identify you as an individual. For example, we use cookies to add in. This helps us to improve our website and deliver a better more personalised service.


What types of cookies are there?

Broadly, there are 4 types of cookie:


Other third-party cookies

A cookie is classed as being first party if it is set by the site being visited. However, a third-party cookie is issued by a different server to that of the domain being visited. It could be used to trigger a banner advert based on the visitor’s viewing habits or for analytical purposes. For example, when visiting a page with content embedded from YouTube, Google or Facebook. These service providers may set their own cookies on your web browser. Such anonymous cookies may be set by that third party to track the success of their application or to customise their application to you


How to Manage Cookies

Most browsers allow you to turn off cookies. To do this, look at the 'help' menu on your browser or visit http://www.allaboutcookies.org/ to find out how to configure these settings on several major browsers. Switching off cookies may restrict your use of our website and/or delay or affect the way in which it operates.

You can find information about how you can specifically opt out of Google's use of cookies by visiting Google's Ads Settings.


Links to other websites

Our website may contain links to other websites run by other organisations. This policy applies only to our website‚ so we encourage you to read the privacy statements on the other websites you visit. We are not responsible for the privacy policies and practices of other sites even if you access them using links from our website.

In addition, if you linked to our website from a third-party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third-party site and recommend that you check the policy of that third-party site.


Where Are you sending my Data?

As part of the services offered to you through this website, the information which you provide to us may be transferred to countries outside the European Union (“EU”). By way of example, this may happen if any of our servers are from time to time located in a country outside of the EU. These countries may not have similar data protection laws to the UK. By submitting your personal data, you’re agreeing to this transfer, storing or processing. If we transfer your information outside of the EU in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy.

If you use our services while you are outside the EU, your information may be transferred outside the EU to provide you with those services.


How Long Do We Keep Your Data?

We regularly review our retention periods for personal information. We are legally required to hold some types of information to fulfil our statutory obligations (for example the collection of Gift Aid). We will hold your personal information on our systems for as long as is necessary for the relevant activity, or if it is set out in any relevant contract you hold with us. If you have asked that we do not contact you, we will remove you from all communications. We keep this Policy under regular review. This Policy was last updated in December 2019.