Privacy and Cookies

Our websites:

Privacy and Cookies

AAC Scotland is created and maintained by CALL Scotland who are committed to compliance with the EU General Data Protection Regulation (GDPR). This Policy explains when and why we collect personal information about people who visit our website, how we use it, the conditions under which we may disclose it to others and how we keep it secure.

We may change this Policy from time to time so please check this page occasionally to ensure that you're happy with any changes. By using our website, you're agreeing to be bound by this Policy.

Any questions regarding this Policy and our privacy practices should be sent by email to gdpr@callscotland.org.uk or by writing to CALL Scotland, University of Edinburgh, Paterson's Land, Holyrood Road, Edinburgh EH8 8AQ. Alternatively, you can telephone 0131 651 6236.

Topics covered on this page:

Who are we?

AAC Scotland is created and maintained by CALL Scotland. CALL Scotland help children and young people across Scotland to overcome disability and barriers to learning created by their environment, and to fulfil their potential.

CALL Scotland is based within the University of Edinburgh. The registered address is: CALL Scotland, University of Edinburgh, Paterson's Land, Holyrood Road, Edinburgh EH8 8AQ.

How do we collect information from you?

We obtain information about you when you use our website. For example, if you register to receive one of our monthly newsletters, we will store your email address. Or, when you contact us about products and services, we will store your information so we are able to answer your query.

What information do we collect?

The personal information we collect about you might include your name, address, email address, IP address, and information regarding what pages are accessed and when.

All information is stored within the European Economic Area (EEA) on our servers at the University of Edinburgh.

We may use your information to:

Who has access to your information?

How long will your data be stored?

How you can access and update your information

The accuracy of your information is important to us so if you believe any of the information we hold is inaccurate or out of date, please email us at gdpr@callscotland.org.uk or by writing to CALL Scotland, University of Edinburgh, Paterson's Land, Holyrood Road, Edinburgh EH8 8AQ. Alternatively, you can telephone 0131 651 6236.

You also have the right to ask for a copy of the information CALL Scotland holds about you.

We may charge £10 for information requests to cover our costs in providing you with details.

How you can request the erasure of your information

If you would like your personal data removed from our systems, please email us at gdpr@callscotland.org.uk or by writing to CALL Scotland, University of Edinburgh, Paterson's Land, Holyrood Road, Edinburgh EH8 8AQ. Alternatively, you can telephone 0131 651 6236.

Security in place to protect the loss, misuse or alteration of your information

All personal information is treated securely. Any sensitive information (such as credit or debit card details) is encrypted and protected with 128 Bit encryption on SSL.

All other personal information such as your name or email address is stored on our web databases using Blowfish hashing (with a salt). We use Blowfish's slow key changing which is actually a benefit: the password-hashing method used in OpenBSD uses an algorithm derived from Blowfish that makes use of the slow key schedule; the idea is that the extra computational effort required gives protection against dictionary attacks.

Servers are monitored to try and detect a data breach and we only hold onto data as long as we need it. So, for example, in some cases an email or an IP address which is required to secure our forms would be deleted after 60 seconds and not held indefinitely.

Some personal information such as contact details are also stored on internal databases which aren't accessed from the web.

Use of 'cookies'

This website uses cookies, mainly through the use of Google Analytics. 'Cookies' are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that website to recognise you when you visit. They collect statistical data about your browsing actions and patterns and do not identify you as an individual. For example, Google Analytics will store which country you are from. This helps us to identify where our audience is located and help us improve our website content.

With regards to personal information and the use of Google Analytics, Google don't store any personal information. It is against their terms of service to do so. The collection of IP addresses is also anonymised and we don’t show any personal information in ‘long URLs’ which could potentially be viewed by Google staff.

It is possible to switch off cookies by setting your browser preferences. For more information on how to switch off cookies on your computer, visit wikiHow.

Links to other websites

Our website contains links to other websites run by other organisations. This privacy policy applies only to our website. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.

Website 'recording'

Our website may record mouse clicks, mouse movements and page scrolling. The information collected does not include any sensitive personal data. The data collected is for internal use only. The information is used to improve our website usability and let us know which parts of a webpage are most used.

16 years of age or under

If you're aged 16 or under, please get your parent or guardian's permission before you provide us with personal information.

Review of this Policy

This Policy was last updated in August 2018.