Privacy

The Scottish Government provide the Cloud Platform Service. To run the service, we collect and use your information to follow our Cloud First principles. You can read the Cloud First principles on gov.scot.

What type of information we collect

We collect and process the following information:

your name
your email address
any feedback you share with us
your cookies using Google Analytics
your IP address

We also use Google Analytics to collect information about:

which type of browser and device you used
the pages you visit on this site
how long you spend on each page on this site
how you got to this site
what you click on while you're visiting this site

Why we collect this information

We use the information you share with us to:

improve our services
give you access to our services
identify security threats

Our legal basis for processing this data is 'legitimate interests'. That's because:

it's in the legitimate interests of our users to make improvements
we need to maintain the security of our website site and the Cloud Platform Service

We only collect information about you using Google Analytics if you consent to it.

If you do not consent to it, you can let us know by emailing: DataProtectionOfficer@gov.scot.

What we do with this information

We need to share your information with third party services to give you access to the Cloud Platform. These are:

GitHub

Amazon Web Services

Microsoft

We will not:

sell your information to third parties

share your information with third parties for marketing purposes

We share your information with other Scottish Government teams. These teams need to share your information with their third party services to give you access to the Cloud Platform. These are:

OKTA

Zscaler

Exabeam

Using GitHub

We use your information to give you access to GitHub.

We use GitHub for:

source control

continuous integration and continuous deployment pipelines

code security scanning

dependency vulnerability scanning using Dependabot (including secret scanning, code scanning and advisory awareness)

giving data to our customer delivery teams

Github will also ask to collect:

photo

pronouns

biography

links to social media accounts like Facebook

We recommend you do not allow them to collect this information. It’s not needed to use the service.

How long we keep your information

We'll delete any feedback you share with us via this website after 3 years. We keep anonymised analytics for 38 months.

When you leave the platform, we keep your data for business purposes for 7 years.

How we store this information

All personal information is stored in the European Economic Area (EEA). Data collected by Google Analytics data may be processed outside the EEA.

We're committed to doing everything we can to keep your data safe. We perform regular security tests to make sure our systems and processes are secure.

Your data protection rights

You have the right to:

see your information – through a subject access request
improve your data – if you think the information we have is inaccurate or incomplete
delete your information – if you do not want us to use your data anymore
object to the use of your data – depending on the circumstances
take your data with you – if you want to share it to another organisation, depending on the circumstances

How to get in touch

You can contact our Data Protection Officer about this privacy policy:

Address

Data Protection Officer
Victoria Quay
Commercial Street
Edinburgh
EH6 6QQ

Email

DataProtectionOfficer@gov.scot

How to complain

If you're unhappy with how we've used your data, you can complain to the Information Commissioner's Office (ICO):

Address

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Phone

0303 123 1113
Find out about call charges

Changes to this policy

We may change this privacy policy. In that case, the 'last updated' date at the top of this page will also change.

Feedback, help or support

If you need any help or want to give any feedback you can e-mail us at: cloud1st@gov.scot