Privacy Statement

Privacy notice and data protection

This privacy notice explains your rights under the Data Protection Act 2018 (DPA) and General Data Protection Regulation (GDPR). It describes the type of information we may hold on you, how it may be processed and who we might share it with.

Personal data (which we will call 'data' throughout the rest of this notice) means any information about an individual from which that person can be identified.

Social Security Scotland is registered with the Information Commissioner (registration number Z4857137) under Scottish Ministers, to handle your data.

Our Contact details:

General Enquiries
PO Box 10301

1. Social Security Scotland

Social Security Scotland processes lots of data to do our job. We manage your personal data to deliver a number of social security benefits outlined in the Social Security (Scotland) Act 2018. We are committed to protecting and respecting your privacy.

To find out more information about social security benefits visit us at, where you will also find a privacy notice with details of how we manage client information in relation to benefits

2. As a visitor to our website:

When online, we provide Links to other parts of Scottish Government, including the Scottish Government website the website and Work for Scotland website. Each of these areas will include important information about how any personal data you provide will be used. Please ensure you read this information.

We’ll only use your personal information when we are required to by law. We’ll use your personal information where:

  • It is needed to perform a task carried out in the public interest
  • We need to comply with a legal requirement
  • It is necessary for the purposes of the prevention, investigation, detection or prosecution of criminal offences

3. Contact us

We provide a General Enquiries contact form through which we collect a name and email address. We ask that the General Enquiries form is not used to convey additional personal information.

We will use the information you provide to respond to your enquiry. In order to do this we will pass your request, including your personal data to colleagues within Social Security Scotland or other Scottish Government departments.

In some cases, we will share data with third parties when needed to fulfil our services, for example we use the services to help manage this website. We require third parties to respect the security of your data and to treat it in line with the law.

We will keep your data only for as long as it’s needed. The length of time may vary across the organisation, depending on the reason for collecting or holding the data. For example the information you provide on this website under ‘Contact us’ will be kept for 7 days only after it has been passed to our colleagues best placed to respond to your enquiry. Thereafter, the information will be kept in line with legal and business requirements, for example if your enquiry relates to a benefit, it will be kept for a duration of the benefit plus 6 years, in line with the requirement of the Public Sector Finance Manual .

In some cases, such as where fraud, error, or debt are involved, your data may be held for a longer period.

4. Analytics

When someone visits we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns.

We collect information about:

  • the pages you visit and how long you spend on each page
  • how you got to Social Security Scotland's website
  • what you click on while you're visiting Social Security Scotland's website

Any information we get is received in a way that we can't identify anyone by it. For example, we never receive your name or address.

We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

You can opt out of Google Analytics.

5. Your data will not be sent outside the EU

All your data will be processed within the EU. We always make sure that there will be checks in place to safeguard your data.

6. Your Rights

Under certain circumstances, you have the right to:

  • know what data we hold about you (known as a subject access request). This allows you to check that your data is being processed lawfully
  • request your information be corrected or updated for accuracy
  • request your data be deleted. This allows you to ask us to delete or remove your data when there is no good reason for us continuing to process your data. However, this does not apply where we are legally obliged to process your data or for the performance of a task carried out in the public interest
  • ask us to stop processing your data, unless we can show a legal reason to continue
  • request the restriction of processing of your data in certain circumstances. This allows you to ask us to suspend the processing of personal information about you, for example if you want to correct the accuracy of your personal data and you are verifying the accuracy of the data
  • ask us to share your information with other organisations in certain circumstances, like when you have given your consent for us to process your data

Please note that we do not have to comply with your requests in cases of the prevention, detection, investigation or prosecution of criminal offences.

7. How to contact us about your data

You have a right to access your data. You can ask us to see the data we hold about you.

Please contact our Data Protection Officer to ask about this, any of your other rights, or for any other questions or comments you may have. You can either ask for your information face to face, over the phone, or contact us by.

Online at

Write to us:

Data Protection Officer
PO Box 10298

You can contact the Information Commissioner if you are concerned about how we process your data. If you are going to do this, we would ask you to let us have the chance to put things right first, by getting in contact with our Data Protection Officer and letting them know your concerns.

To lodge a complaint with the independent Information Commissioner (ICO), you can contact: You can contact the Information Commissioner:

Alternatively, you can write to:

The Information Commissioner
Wycliffe House
Water Lane