Privacy notice

Personal information we collect

The privacy notice will give you information on how the Prepare for Brexit website and self-assessment tool collects, uses, shares and looks after your personal information. Personal information, or personal data, means any information about an individual from which that person can be identified. Anything we do with your personal information (from the point at which we collect it until we delete it from our systems) is called processing.

The Prepare for Brexit website is delivered in partnership with Scottish Enterprise, Highlands & Islands Enterprise, Scottish Development International, Business Gateway and Skills Development Scotland, and governed, by Scottish Enterprise. Its purpose is to serve as guidance for companies to prepare for changes expected as a result of UK’s exit from the EU. It is not a direct business development resource and is advisory only.

The privacy notice applies when you visit our website, provide any personal information through this website. The privacy notice will also tell you about your privacy rights and how the law protects you.

The type of data gathered

The website may collect, use, store and share different kinds of personal information.

To help you identify these, they have been grouped as follows:

Identity data: forename, surname

Contact data: email address, phone number

Technical data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website

Usage data: Information about how you use our website, products and services

Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal information but is not considered personal information in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing on partner sites. However, if we combine or connect Aggregated Data with your personal information so that it can directly or indirectly identify you, we treat the combined data as personal information, which will be used in accordance with this privacy notice.

Anonymised Data is the process of turning personal information into a form which does not identify individuals and where identification is not likely to take place.

Your email address

Scottish Enterprise (SE) collects and uses personal information about you in order to provide its public services.

How we collect this personal information 

This personal information will be collected directly from you when you use the website.

Employer or company

We collect personal information from your employer or a company you work with. For example, if your personal information is included as part of the application for funding or support, or in a bid to supply services to us; or as evidence in support of a claim for grant funding.

Access our full privacy notice on the Scottish Enterprise website

How we use your personal information 

The Prepare for Brexit website collects and uses personal information about you in order to provide its public services.

Lawful grounds

The lawful grounds for the use of your data is contractual – we need to process personal information to perform the contract i.e. answer your enquiry.

Performance of a task carried out in the public interest or in the exercise of our official authority. Our official authority is granted under the Enterprise and New Towns (Sotland) Act 1990.

The personal information collected will be used to email the report of your results from the Prepare for Brexit self-assessment tool, if requested, and to answer any queries submitted by you to the PrepareforBrexit website.

Personal information will be shared with the delivery partners identified above.

Access more information on how we use your personal information and how we work with delivery partners

Contact our data protection officer

The delivery partners identified above have appointed Scottish Enterprise (SE) as the data controller for the website. SE has appointed a data protection officer - for us, this is our Data Protection and Information Governance Officer (DPIGO) - who is responsible for overseeing questions in relation to this privacy notice.

If you have any questions about the privacy notice, including any requests to exercise your legal rights in respect of your personal information, please contact the DPIGO using the details below.

Claire Thompson
Data Protection and Information Governance Officer
Atrium Court
50 Waterloo Street
Glasgow G2 6HQ


Call 0300 013 3385 - calls charged at local rates
Call 0141 846 0200 - from mobile phones or if outside Scotland
Minicom 0800 023 2071 - if you are deaf or hard of hearing (BT helpline 0800 731 1888)

Your rights

Access to your information

You have the right to request a copy of the personal information about you that is held by the delivery partners in relation to the website.

Correcting your information

SE wants to make sure that your personal information is accurate, complete and up to date and you may ask SE to correct any personal information about you that you believe does not meet these standards.

Deletion of your information

You have the right to ask SE to delete personal information about you where:

You consider that SE no longer requires the information for the purposes for which it was obtained

SE is using that information with your consent and you have withdrawn your consent – see Withdrawing consent to using your information below

You have validly objected to SE's use of your personal information – see Objecting to how we may use your information below

SE's use of your personal information is contrary to law or SE's other legal obligations.

Objecting to how we may use your information

You have the right at any time to require SE to stop using your personal information for direct marketing purposes.

In addition, where SE uses your personal information to perform tasks carried out in the public interest or in exercising official authority vested in it then, if you ask it to, SE will stop using that personal information unless there are overriding legitimate grounds to continue.

Restricting how we may use your information

In some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we are checking the accuracy of personal information about you that we hold or assessing the validity of any objection you have made to SE's use of your information.

The right might also apply where SE no longer has a basis for using your personal information but you don't want SE to delete the data. Where this right to validly exercised, SE may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.

Automated processing

If SE uses your personal information on an automated basis to make decisions which significantly affect you, you have the right to ask that the decision be reviewed by an individual within SE to whom you may make representations and contest the decision.

This right only applies where SE uses your information with your consent or as part of a contractual relationship with you.

Withdrawing consent using your information

Where SE uses your personal information with your consent you may withdraw that consent at any time and SE will stop using your personal information for the purpose(s) for which consent was given.

Scottish Enterprise privacy notice