Public health reform is a partnership between Scottish Government and the Convention of Scottish Local Authorities (COSLA). The website is hosted by NHS Health Scotland on behalf of the Public Health Reform team, Scottish Government.

We fully respect your right to privacy when using our services. Here you will find details of our privacy practices and what we do to maintain your right to privacy

What information do we collect about you?

We collect information about you and your organisation when you access any of our services online, by phone or in writing. We only collect the information we ask from you, that you give us and consent to it being processed for the purpose of delivering public health reform.

How will we use the information we collect?

We process your information for the purpose of providing you with services related to public health reform. This includes

  • dealing with your enquiries and feedback on our website content
  • sending you email updates that you have opted-in to receive.

We may disclose the information to a third party where we have a legal obligation to do so. The Public Health Reform team will not share with, or sell your personal information to, any other organisation.

How do we look after your information?

The information we collect about you will be stored securely within Scottish Government systems.

The website is hosted by NHS Health Scotland on behalf of the Public Health Reform team. It is hosted on a secure server by a third party in the UK/EU, and is maintained by the Public Health Reform team and NHS Health Scotland staff.

The principles of the General Data Protection Regulation (GDPR) require us to make sure your data is accurate, kept up to date and that we keep it for no longer than is necessary.

To meet these requirements:

  • ​we will update your data or remove it from our systems at your request
  • we will hold your information for 5 years.

Website log files

Using our website will generate log files of your activity. These files do not capture personal information but do capture the user's IP address. We store these log files on a secure server.

We use Google Analytics to analyse these files regularly to monitor website usage and evaluate the effectiveness of our website. We do occasionally allow trusted partners and suppliers access to our Google Analytics. This information is not personally identifiable. For more information go to our Cookies page. 

We make no attempt to identify individual users of this website, unless we suspect that unauthorised access to our systems is being attempted. We reserve the right to attempt to identify and track any individual who is reasonably suspected of trying to gain unauthorised access to computer systems or resources operating as part of NHS Health Scotland web services. As a condition of using this site, all users give permission for NHS Health Scotland to use its access logs to attempt to track users who are reasonably suspected of gaining, or attempting to gain, unauthorised access.

Your rights

Under the General Data Protection Regulation (effective from 25 May 2018), there are a number of new rights relating to Data Protection.

You have the following rights:

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure
  • The right to restrict processing
  • The right to data portability
  • The right to object
  • Rights in relation to automated decision making and profiling

You can find more information about these rights on the Information Commissioner’s website

Access to your information, changes and complaints

To request a copy of the information that we hold about you, correct any information that is inaccurate, unsubscribe from our services or withdraw your consent, you can email publichealthreform@gov.scot

For enquiries about the Scottish Ministers (the Data Controller) data protection practices, you can write to us at:

The Scottish Government

Saughton House

Broomhouse Drive

Edinburgh

EH11 3XD

Should you wish to make a complaint about Scottish Government's collection or use of data, you can contact the Information Commissioner’s Office. The office is the UK’s independent authority, set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.