Page Loading

How we use your information

We collect and use personal information about you in order to provide our public services. In general terms, our organisation collects, uses, stores and shares personal information about you to:

  • Deliver its services and meet its legal responsibilities
  • Verify your identity, where this is required
  • Contact you by post, email, telephone and/or social media
  • Understand the needs of your company and how they may be met
  • Join with our public sector partners to deliver comprehensive services for you and your company
  • Use as supporting evidence when making claims for funding and support
  • Provide you with marketing you have asked for, and to sign you up for events
  • Maintain our records
  • Process financial transactions
  • Carry out background checks and due diligence where appropriate
  • Prevent and detect crime, fraud or corruption
  • Manage access to and security of our spaces and facilities
  • Transfer or sell parts of our business to other public sector bodies or third parties

Further details can be found in the specific sections for each service which follow and can be accessed through these links:

Personal data is also processed in our recruitment process. You can find out more about this in our specific recruitment privacy notice.

Lawful grounds

Data protection law also says that we must have a legal ground in order to process your personal information. These are known as lawful grounds. There are six lawful grounds, but we will generally only use four of these, as set out below.

Descriptions of lawful grounds

Lawful ground

What it means

Consent You have given your consent to the processing of personal information for the specified purpose.


Where you are in a contractual relationship, and we need to process personal information to allow us to perform the contract, or where you intend to enter into a contractual relationship with us.
Legal obligation Where we need to process personal information to comply with a legal obligation placed on us.
Performance of task carried out in the public interest or in the exercise of our official authority Where we process your personal information to meet a task that is in the public interest (e.g. using CCTV as a method of crime prevention) or where it is processed in the exercise of our official authority. Our official authority is granted under the Enterprise and New Towns (Scotland) Act 1990.