The Disclosure (Scotland) Act 2020 grace period ended on July 1st 2025. Important information for employers

DATA PROTECTION NOTICE

Scottish Disclosures

Policy Statement

Updated 13th Aug 2026



Your Personal Data - What is it?

Personal data encompasses any information that can identify an individual. This includes details such as names, addresses, email addresses, phone numbers, and other data you provide through our website.


Who are we?

Scottish Disclosures (Scot Disclosures LTD) is a registered umbrella body for administering Disclosure Scotland checks.


How do we process your personal data?

We process your personal data for specific purposes, including application processing, identity verification, payment processing, customer support, marketing, and newsletter subscription. These activities involve collecting, storing, and using your personal data as outlined in this notice.


What is the legal basis for processing your personal data?

We rely on different legal bases depending on why we are processing your personal data:

How long do we keep your personal data?

We will only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.


Your rights and your personal data

You have the following rights with respect to your personal data:


Further processing

We will not use your personal data for any purpose other than those outlined in this notice without obtaining your explicit consent.

Third Party Service Providers

We use the following third-party service providers to deliver our services:


Data Location

Data is securely stored in the United Kingdom. Specifically:

Some data is processed in the European Union:

Some data is processed in the United States by the following providers. These international transfers are protected by appropriate safeguards, such as Standard Contractual Clauses and the UK International Data Transfer Addendum, which are set out in each provider's published data processing terms.

Additionally, whenever your data are in transit between you and us, it is encrypted using SSL/TLS encryption and sent using HTTPS. Files which are uploaded to us are stored and are encrypted at rest using AES-256 encryption.


Sharing personal data

To provide our disclosure service, we submit application details to Disclosure Scotland, the government body responsible for carrying out disclosure checks, and we keep the requesting organisation updated on the progress of your application. We do not receive, process, or store the disclosure certificate or any criminal record information. This is issued by Disclosure Scotland directly to you and, where applicable, the requesting organisation. You can read Disclosure Scotland's privacy information here: https://www.disclosure.gov.scot/privacy-policy

Other than as described in this notice, we will not share your personal data with third parties without your consent, and we will ensure suitable data protection measures are in place for any such sharing.


Website Analytics

Scottish Disclosures uses Simple Analytics for website analytics. Simple Analytics collects and processes anonymous metrics and provides us with information to help us understand how visitors use our website and where our traffic comes from. Simple Analytics allows us to improve our website and create a better experience for our visitors. We do not track or profile visitors and we do not serve personalised advertising. We do not share this data with anyone. Simple Analytics is a privacy-friendly tool and does not collect your personal data. You can learn more about the way Simple Analytics processes data from its website.

With your consent, we also use PostHog for website analytics. PostHog helps us understand how visitors interact with our website, such as which pages are viewed and how features are used, so we can make improvements. Unlike Simple Analytics, PostHog uses cookies and a randomly generated identifier stored in your browser, which may constitute personal data. We only load PostHog and begin collecting this data if you accept analytics cookies via our cookie banner. If you decline, or if your browser sends a "Do Not Track" or "Global Privacy Control" signal, PostHog is not loaded and no analytics data is collected. This data is processed on PostHog's EU-hosted infrastructure within the European Union. We do not sell this data. You can withdraw or change your consent at any time using the "Cookie Settings" link in the website footer. You can learn more from PostHog's privacy policy.


Cookies

Cookies are small text files stored on your device when you visit a website. We use a small number of cookies, described below. Under the Privacy and Electronic Communications Regulations (PECR), we only set non-essential cookies (such as analytics cookies) with your consent.

Cookie Purpose Type Duration
analytics_consent Remembers whether you have accepted or declined analytics cookies Strictly necessary (set without consent) 6 months
PostHog cookies (e.g. ph_*_posthog) Analytics: distinguishes visitors and sessions so we can understand how the website is used. Set by PostHog and only if you accept analytics cookies Analytics (consent required) Up to 1 year

Our website analytics tool Simple Analytics does not use cookies. You can accept or decline analytics cookies at any time using the "Cookie Settings" link in the website footer, or by adjusting your browser's Do Not Track or Global Privacy Control settings.


Contact Details

For inquiries, concerns, or requests relating to your personal data, please contact us at: info@scottish-disclosures.co.uk. Please complete the subject line with "Personal Data Inquiry/Request".


Changes to this notice

We may periodically update this data notice to reflect changes in our practices or due to legal requirements. We recommend reviewing this notice periodically for the latest information.