Privacy Policy

Data Protection and Privacy Statement:

Please read this Privacy Notice. It relates to how we hold and process your information (data) and your rights. We recommend that you retain this Privacy Notice for future reference.

CHAI is a “data controller” in terms of the Data Protection Act 2018. This means that we are responsible for deciding how we hold and use personal data about you. We are required under data protection legislation to notify you of the information contained in this privacy notice. We have a duty to keep your data secure and maintain your confidentiality and we will do so.

We will process your data, including certain special category data (being data relating to race, ethnic origin, physical or mental health or condition) on the lawful basis that we have your explicit consent to do so. We will only process and use your data for the purpose of carrying out the advice, information, representation or support services we have agreed to provide for you and not for any other purpose. Your data is held on our computer systems. We have an obligation to keep this data accurate and we will endeavour to do so. Similarly, you are obliged to inform us of any data we hold that may no longer be accurate and we ask that you do so.

We will share a very limited amount of your data with the third parties who fund the services we provide for you; we consider this is in the legitimate interests of our business. Any other data we hold on you will only be shared with a third party where you give specific consent for us to do so.
Your data will be retained once the contract between us has ended within our Content Management System.

Your Rights:

You are entitled to request copies of the data we hold about you. You are also entitled to receive confirmation from us that we are processing your data, what that data is, and to ensure that your data is correct and ask for it to be rectified if it is not. In addition, you have the right to object to our processing your data and ask that it be deleted.

If you have any questions regarding how CHAI uses your personal data please contact our ‘Data Controller’ – Teresa Sutherland, Interim Project Executive, on 0131 442 2100.
Complaints about CHAI’s management of personal data can be made to the Information Commissioner’s Office (0303 1231113)