Privacy Notice

Whitespace Scotland Limited is committed to protecting your right to privacy and handling your personal data responsibly. This privacy policy details how we collect your data about you, how we store it and how we use it.

Purpose of this Privacy Notice

This privacy notice aims to give you information on how Whitespace collects and processes your personal data, including any data you may provide through this website when you sign up to our Mailing List or complete the Contact Us form. 


For the purpose of Data Protection regulations, the data controller is Whitespace (Scotland) Ltd. Please note that this Privacy Policy applies only to our website and not to any third party sites that we we have produced for our clients, or may link to from this site.

If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact our Data Protection Officer using the following details:

Oliver Jackson
Whitespace (Scotland) Ltd.
Norloch House
36 King's Stables Road


Phone: 0131 625 5500

How do we collect personal data from you?

We receive information about you from you when you use our website, complete forms on our website, if you contact us by phone, email, or otherwise in regard to our services. Your personal data may be automatically collected when you use our services through the use of cookies and/or tracking scripts.

Data we may collect from you

We may collect and process the following data about you: details of forms you may fill in on this site, and your visits to our site, including traffic data, location data, weblogs and other communication data, and the resources you access. We may also automatically collect technical information, including anonymous data collected by the server for statistical purposes, the IP address used to connect your computer or device to the Internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.

Cookie information

Cookies are very small files that are stored on your computer when you visit most websites. They are sent back and forth between the website’s server and your Internet browser to allow the website to remember actions you’ve made. We use cookies and other local storage means to help improve the performance of this website by measuring web traffic and tracking user journeys.

Cookies set by this website

Google Analytics

Cookies: _ga; _gat; _gid

Expiry: 2 years; when you quit your browser; one day (respectively)

Purpose: These cookies collect information about how our visitors use this site. This data is collected anonymously, and is used to help improve this website’s functionality. For more information, see Google Analytic’s page on safeguarding your data.

Expression Engine

Expression engine is the software that this website is built on. It sets the following cookies:


End of session. Contains the last 5 pages viewed. Typically used for form or error message returns.


1 year. Date of the user’s last visit. Can be shown as a statistic for members and used by the forum to show unread topics for both members and guests.


1 year. Records the time of the last page load. Used in conjunction with the last_visit cookie.

Load Balancer

This cookie is used by the load balancing device that manages incoming website requests to ensure your requests go to the same server each time.

Cookies: whitespace_lbcp

Expiry: End of session. 

How we use your data

  • To provide you with our services
  • To comply with our contractual obligations we have with you
  • To enable us to review, develop and improve the website and services
  • To carry out marketing and statistical analysis
  • To review job applications
  • To provide you with information about services that you request from us or which we feel may interest you (where you have consented to be contacted for such purposes)

We ensure that we always have an appropriate legal basis for processing your personal data. The processing of your personal data is based either on providing you services you have requested, or your consent, where requested. 

How we store your personal information

We are committed to ensuring your personal information is kept secure and confidential and not kept for longer than is necessary for the purpose they were processed. When your personal information is no longer necessary, it will be deleted.

From time to time we may ask third party service providers to help us manage our information technology systems. Some of these systems may be located in countries overseas, including countries located outside the European Economic Area (EEA).

We will only transfer your information to a third party service provider or overseas, where we are satisfied that adequate levels of protection are in place to protect the integrity and security of any information being processed and compliance with applicable privacy and data protection laws. These measures may include the use of Standard Contractual Clauses, the EU-US Privacy Shield, Swiss-US Privacy Shield or your consent.

How we secure your information

We employ appropriate technical and organisational security measures to prevent unlawful or unauthorised use, access or accidental loss of personal information. We also seek to ensure our service providers do the same.

Information Sharing and Disclosure

We do not sell or rent any personal information about you to any third party.

Your rights

You have a right to obtain confirmation that your personal data is being processed and the right to request a copy of your personal data we hold.

You have the right to request correction or updating of the personal data that we hold about you and that is inaccurate.

You have the right to request your personal data be erased. If you would like us to delete your information from our records, please contact us using the contact details above. Please note that we may be required to retain certain information by law and/or for our own legitimate business purpose.

You have the right to request the restriction of our processing of your personal data in some situations. However, we will need to retain some of your personal data to ensure that the restriction is respected in the future.

You have the right to withdraw your consent to your personal data being processed, for marketing and for research purposes. You will have the always have the right to object to marketing. 

You have the right to complain to your local data protection authority about our collection or use of your personal data. In the UK, the local data protection authority is the UK Information Commissioner's Office

If you wish to stop receiving marketing communications from us then please click on the "unsubscribe" link at the bottom any of our emails.

Please address all data requests to the Data Protection Officer.

Changes to the Privacy Notice 

We may update this privacy notice from time to time. This privacy notice was last updated on 25 May 2018.