Privacy notice

Collecting and sharing your data

Collecting and sharing your data

Personal information we collect

We may collect, use, store and share different kinds of personal information about you. To help you identify these, they have been grouped together as follows:

Group data Personal information includes
Identity data Name, signature, date of birth, job role/title, job description, photographs, passport details, contracts of employment, CVs, service agreements/consultancy/secondee contracts and social media profile.
Contact data Email address, phone number, address, billing address, Skype, WhatsApp, social media contacts.
Claims data Personal information that is evidence for claiming expenditure. For example: timesheets, salary information, payroll number, details of training received, payslips.
Due diligence data Information about past and present business interests, memberships,
affiliations, appointments, associations and other relationships which are
relevant to, or associated with, you.
Financial data Bank account, payment card details, credit reference, credit history, PAYE, national insurance number
Transaction data Details of payments to and from you; details of services and products you may have received from us
Technical data Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website
Profile data Username and password, your preferences, feedback and survey responses
Usage data Information about how you use our website, products and services
Marketing data Your preferences in receiving marketing from us, our CRM Partners and selected third parties. You can learn more about this on our Who we will share your information with page.
Special category data Race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data; information about criminal convictions and offences.

There is also other information that we collect, use, store and share that is not personal information, including the following areas.

Aggregated data

Aggregated data, such as statistical or demographic data for any purpose. Aggregated data may be derived from your personal information but is not considered personal information in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your personal information so that it can directly or indirectly identify you, we treat the combined data as personal information, which will be used in accordance with this privacy notice.

Anonymised data

Anonymised data is the process of turning personal information into a form which does not identify individuals and where identification is not likely to take place.

Company data

Company data is any information relating to a company, such as the company’s address, financial information, business plans (although these may contain elements of personal information), methodologies, project briefs etc.

How we collect personal information

We collect personal information using different types of methods and sources. We have grouped these together in the following ways.

Direct interactions

We collect personal information directly from you. For example, when you use our website, apply for our products and services for you or on behalf of your company or employer, create and account on our website or MyBusinessID account space, request marketing to be sent to you, complete a survey or provide feedback, or you are a GlobalScot, non-executive director of one of our portfolio companies or a panel member involved in evaluating applications.

Employer or company

We collect personal information from your employer or a company you work with. For example, if your personal information is included as part of the application for funding or support, or in a bid to supply services to us; or as evidence in support of a claim for grant funding.

Public sector partners

We would have your personal information if you or your company has engaged with our public sector partners and as part of the public sector partner’s and our public functions, they have shared your personal information with us. You can find out more about our public sector partners on the Who we will share your information with tab.

Customer relationship management (CRM) partners

We would have your personal information where any of our partners to the CRM partnership have input your details to the shared customer relationship management system. You can read more about the CRM Partnership.

Third party sources/publicly available sources

We may receive personal information about you from various third party sources. This may include where we have subscribed to a database, or have been provided with information from an interested third party, such as an investor. It may also come from a publicly available source (e.g. Companies House) or is available through social media (e.g. LinkedIn). 

Databases and services we use

Scottish Enterprise subscribes to the following databases and services:

  • Beauhurst
  • Bureau Van Dijk - FAME, Orbis & Mint
  • Costar
  • Delta-ee
  • Econsultancy
  • Equifax
  • Euromonitor Passport
  • ExportSavvy
  • fDI Benchmarks and Markets
  • FPAL (First Point Access Limited)
  • Frost & Sullivan
  • GlobalData Pharma & Energy
  • IBIS World
  • IBISWorld International & UK
  • IGD Retail Analysis
  • Informa - Scrip Intelligence, Datamonitor Healthcare and Medtrack
  • International Trade Portal - Bank of Scotland
  • Kompass
  • Kroll
  • Lexis Nexis News
  • LinkedIn Premium
  • Marketline
  • MEED
  • Mintel - UK
  • MyBusinessID
  • Newsbase
  • Pitchbook


Any supplier we have procured to deliver a service on our behalf. Such suppliers will be under contractual obligations to process your personal information in compliance with data protection laws.

Who we will share your information with

Scottish Enterprise (SE) will share your personal information with our CRM Partners, as part of the overall CRM Partnership collaboration. We may also share your personal information with our Public Sector Partners and our suppliers to enable them to do any of these things for or in collaboration with SE, or where we are required to do so to meet our legal obligations to the Scottish Government and/or the European Commission.

Where required to do so by law, we may also share your information with law enforcement agencies.

Where we share your personal information with our Public Sector Partners, this will be done in accordance with the data sharing arrangements that we have with them. Personal information will be shared with the CRM Partnership and our Public Sector Partners on the basis that either:

  • We have jointly determined the purpose and means of processing (joint controllers)
  • We process the same personal information but for different purposes (controllers in common)

Our public sector partners

  • Accounts Commission
  • Audit Scotland
  • Department for Business Energy and Industrial Strategy (BEIS)
  • Biotechnical and Biological Sciences Research Council
  • British Council
  • Business Gateway
  • Chambers of commerce
  • Creative Scotland
  • Department for International Trade (DIT)
  • European Commission
  • European Court of Auditors
  • European Investment Fund
  • Highlands and Islands Enterprise (HIE)
  • Innovate UK
  • Interface
  • Scottish Co Investment Fund Partners
  • Scottish Funding Council
  • Scottish Futures Trust
  • Scottish Government
  • Skills Development Agency (SDS)
  • Scottish Environmental Protection Agency (SEPA)
  • Universities Scotland
  • Visit Britain
  • VisitScotland
  • Zero Waste Scotland