Your personal data

This privacy notice explains how What Works Scotland will process the personal data you share with us. By collecting this information What Works Scotland is acting as a data controller.

Why we need it and the legal basis for processing your data

To send you information (specifically our newsletter) and to enable you to attend our events, we collect your basic personal data such as name, email address, (sometimes a phone number) and the organisation for which you work (if applicable). We will only collect the data we need in order to provide and oversee this service to you.

When we collect this data we shall ask for your consent for What Works Scotland to use it for the purpose indicated.

What we do with your data

The data we collect will be processed by staff at the University of Glasgow and the University of Edinburgh.

We also use online services which store data outside the European Economic Area; all of these comply with the requirements of the EU-US Privacy Shield Framework.

Your data will be retained by what Works Scotland until the end of December 2019 when it will be securely deleted from the University of Glasgow and the University of Edinburgh systems and will be removed from the online systems listed above when the What Works Scotland accounts with these systems are closed.

What are your rights?

You can request access to the information we process about you at any time. If at any point you believe that the information we process relating to you is incorrect, you can request to see this information and may in some instances request to have it restricted, corrected or, erased. You may also have the right to object to the processing of data and the right to data portability.

If you wish to exercise any of these rights, please contact


If you wish to raise a complaint on how we have handled your personal data, you can contact the University  of Glasgow Data Protection Officer who will investigate the matter. The Data Protection Officer can be contacted at

If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you can complain to the Information Commissioner’s Office.


Cookies are small text files passed to your computer by the web server via your browser, and may be used to collect information to help identify you and prepare customised pages for you. Cookies may remain on your computer either for the duration of the session or indefinitely. You can configure most standard web browsers to refuse cookies.

What Works Scotland uses Google Analytics to produce anonymised statistics on website usage to help us to improve our site and the experience of our users. Google Analytics uses cookies in this process.

Information on cookies can be obtained from