Privacy and Cookies

This privacy policy sets out the way, we use the personal data, you provide to the Scottish Government and Meister Works, when you use the Digital Maturity Assessment Tool.

Who we are?

For the purpose of the Data Protection Act 2018 and the General Data Protection Regulation, the data controller is the Scottish Government.  The Scottish Government has on behalf of the Health Boards and Local Authorities in Scotland, entered into a contract with Meister Works to provide the nominated individual called the Lead Respondent, within each organisation a digital maturity assessment to undertake on behalf of their Health Board or Local Authority.

What data do we collect?

Most of the personal information we process is provided to us directly by you, including your name, email address and telephone in your capacity as the Responsible Lead, for your Health Board or Local Authority.

In addition, the Lead Respondent can delegate a section to others within their own organisation and can poll sections of the assessment to gather views from other colleagues. This is done by email. However, these email addresses are not visible to anyone else.

How do we use your data?

We use the information that you have given us in order to:

  • Provide Instructions and ongoing communications
  • Set up user account to the Digital Maturity Assessment Tool.
  • Notify you when your organisation’s report is ready
  • Provide support and answer any technical issues relating to the tool

What legal basis do we have for processing your personal data?

Under the General Data Protection Regulation, the lawful basis we rely on for processing this information is a contractual obligation.

Who do we share personal data with?

The Lead Respondents name and contact details are shared with Meister Works to establish access to the Digital Maturity Assessment Tool and enable them to provide technical support where required. Beyond this we do not share personal data with anyone else.

Will your information be secure?

We take the security of your personal information seriously and take steps (including the implementation of appropriate technical and organisational measures) to ensure your personal information is treated securely and in accordance with this privacy notice.

Your information is kept on secure servers within the United Kingdom and we implement a range of measures to try to ensure the security and integrity of this Assessment tool. We take steps to ensure that only authorised persons have access to your data.

Where we have given you (or where you have chosen) a password which enables you to access this site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone

How long do we keep your personal data for?

We will only keep your personal information for as long as it is required to complete the digital maturity assessment exercise and produce the report for your organisation, including if it is needed for any legal or reporting purposes.  Please notify us at the earliest opportunity, if you are no longer the Lead Respondent for your organisation or your contact details have changed, so that we can amend or remove your details.

What are your data protection rights?

Under data protection legislation you have a range of rights. You have a right to ask us for a copy of the information we hold about you. You can also ask us to correct or update your personal data, or to erase it.   The way some of your rights apply may depend on the circumstances. To exercise your rights please contact us. Further information about your rights is set out below. To make a request, please contact us via

More about your rights

Right of access You have a right to access the personal information we hold about you and be told why we use it.
Right of rectification You can ask us to correct or update your information to ensure it is accurate and complete.
Right to erasure and right to restrict processing You can ask us to stop processing and to delete your data in certain circumstances (for example where it is processed with your consent, or it is no longer necessary for us to process it).
Right to object You have a right to object to our processing of your information.
Rights: profiling and automated decisions You have a right not to be subject to automated decisions which have a legal effect and to be protected by safeguards in respect of any profiling.
Right to object to direct marketing Where you have consented to receive direct marketing, you can change your mind at any time as described in the marketing section above. Please allow a few days for us to action your request.
Further information is also available from the ICO’s website (

Fees, information requirements and time limits

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated.


What is a cookie?

A cookie is a small file of data, often incorporating a unique identifier that is sent to your device browser from a website’s computer. It is stored on your browser or the hard drive of your computer if you agree. A cookie cannot read data off a user’s hard drive or read cookie files created by other websites.  The use of cookies is an industry standard that can be found on most major websites.

This data file stores the information you provide us with and in doing so enables us to amongst other things ‘remember’ you on repeat visit and once you log in keeps you logged in as you move around the site, effectively letting you move around the site without having to keep reintroducing yourself.

Most browsers accept cookies automatically, but you can set your browser to prevent this.  If your browser’s preferences allow it, each website or third-party service provider can send a cookie to your browser.

We reserve the right to modify or amend the use of cookies at any time and for any reason.  Any changes to the use of cookies posted on our site apply as soon as they are posted.  By continuing to use our site after any changes are posted, user, users acknowledge acceptance of those changes.

How do we use cookies? We do not use cookies to collect personally identifiable information about you as a user of our site. We use only strictly necessary cookies.  These are cookies that are required for the operation of this site.  They include, for example, cookies that maintain your session if you’ve logged into your account on the site.

How to reject cookies?

If you wish to restrict or block the cookies, we use on our site you can do this within your browser settings.  The Help function within your browser should tell you how to do this.  For further information about cookies please visit   Please be aware that in disabling cookies on this site may affect your experience of those parts of the site where the functionality is controlled using cookies.

Changes to this Notice

Changes to how we use your information will be published on this page, so you should check back periodically. If we are making a significant change to how we will be using your information we will normally contact, you to let you know.

We will change our practices from time to time as we continue to develop the Digital Maturity Assessment Tool. We may also change our privacy policy at any time, so we recommend that you visit this page occasionally to check what has changed.  This privacy policy was last updated on May 2019.

Contact Us

If you have any questions about the Digital Maturity Assessment Tool, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us. Email us at:                                          Call us: 203 086 7868 Or write to us at: 11-12 ST. JAMES’S SQUARE, LONDON, SW1Y 4LB

How to contact the appropriate authority

If you feel that We have not addressed your concern in a satisfactory manner or are unhappy with how we have used your data, you may contact the Information Commissioner’s Office at:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline number: 0303 123 1113

More information is available on the ICO’s website

Back to top