Privacy information

The Healthy Working Lives programme is delivered by Public Health Scotland (external site), Scotland’s national organisation for public health, in collaboration with Scotland’s 14 local NHS Boards.

We fully respect your right to privacy when using our services. Here you will find details of our privacy practices and what we do to maintain your right to privacy.

What information do we collect about you?

We collect information about you and your organisation when you access any of our services online, by phone or in writing. We only collect the information we ask from you, that you give us and consent, to be processed for the purpose of delivering the Healthy Working Lives programme.

When you are using self-assessments, forms and records on the website, if you are a registered user and sign in to your account, we will

  • store your form data for 7 days, if you choose to save your progress and come back to it later
  • record that you have used a self-assessment, form or record.

If you use self-assessments, we will record some of your answers to questions. We only do this where your answers suggest you would benefit from additional free support and you have agreed that we can contact you.

If you live or work in Dundee or Fife (or are an employer in Dundee or Fife) and were referred to the Health and Work Support service, the Health and Work Support Privacy Policy will apply rather than this Healthy Working Lives Privacy Policy.

The Scottish Government is the Data Controller for Health and Work Support, and the Health and Work Support Privacy Policy can be viewed on the Health and Work Support website (external site).

How will we use the information we collect?

We process your information for the purpose of providing you with services from Healthy Working Lives. This includes some or all of the following

managing your registrations, requests and enquiries you have submitted to us

  • allowing you to create a Healthy Working Lives website account and receive the benefits of being a registered Healthy Working Lives website user
  • allowing you to use other Healthy Working Lives Surveys online tools including Healthy Working Lives Surveys tool and Healthy Working Lives Award eportfolio
  • helping us to know what you need, and providing opportunities to give us feedback so that we can tailor and improve our products and services appropriately
  • providing you with information about products and services offered or promoted through Healthy Working Lives that you have opted in to receive
  • conducting data and statistical analysis to monitor performance of our services and make improvements.

If you are a Healthy Working Lives award holder, the name of your organisation will be published on the Holders of the award page.

Public Health Scotland may share the information we collect with

  • the 14 local NHS Boards with which we deliver the Healthy Working Lives programme
  • our affiliates and service providers in the UK as necessary for the purpose of keeping you updated on our products and services.

We may also disclose the information to a third party where we have a legal obligation to do so.

Public Health Scotland will not sell your personal information to any organisation.

How do we look after your information?

The information we collect about you and your organisation is stored on an electronic database on a secure server hosted and maintained by a UK third party.

If you create a website account, your account username (your email address) and password is stored on the website Content Management System (CMS).

We will only save form data on the website CMS for 7 days if you have

  • signed into your account
  • completed self-assessments, forms or records, and
  • saved progress.

The website and Healthy Working Lives Surveys tool are hosted on a secure server by a third party in the UK and are maintained by Public Health Scotland staff.

The principles of the General Data Protection Regulation (GDPR) require us to make sure your data is accurate, kept up-to-date and that we keep it for no longer than is necessary.

To meet these requirements

  • we will update your data or remove it from our database or website CMS at your request
  • we will include details of how to unsubscribe from email updates on our products and services, if you have opted in to receive them
  • we will remove you from our database if there has been no contact with you for 18 months.

Website performance monitoring

Using our website will generate log files of your activity. These files do not capture personal information but do capture the user's IP address. We store these log files on a secure server.

We make no attempt to identify individual users of this website, unless we suspect that unauthorised access to our systems is being attempted.

Your rights

Under the General Data Protection Regulation there are a number of rights relating to Data Protection. You can find more information about these rights in the Public Health Scotland Privacy Notice (external site) and on the Information Commissioner’s website (external site).

How to contact us

To request a copy of the information that we hold about you, correct any information that is inaccurate, or withdraw your consent, you can contact the Public Health Scotland Data Protection Officer (external site).

To unsubscribe from HWL services, you can contact us.

If you have created a website account, you can sign in and edit your profile to update some of your details.