Last updated: 26/03/2026
This Privacy Policy explains how Scotland’s Critical Technologies Supercluster (“we”, “us”, “our”) collects, uses and protects personal data when you use the Scotland’s Critical Technologies Supercluster website at www.techsupercluster.scot
We are committed to protecting your personal data and handling it in accordance with applicable UK data protection law, including the UK GDPR and the Data Protection Act 2018. The ICO says privacy information should explain what personal data is collected, why it is used, the lawful basis, who it is shared with, and how long it is kept.
1. Who we are
Data controller: Technology Scotland Limited
Address: Technology Scotland, Technology & Innovation Centre, 99 George Street, Glasgow, G1 1RD
Email: info@techsupercluster.scot
If you have any questions about this Privacy Policy or how we use your personal data, please contact us using the details above.
2. The personal data we collect
We may collect and process the following personal data:
- your name
- your organisation name
- your email address
- your telephone number, if you provide it
- the contents of any message or enquiry you submit through our contact form
- newsletter signup information you provide
- technical and usage information, including IP address, browser type, pages visited and how you use the website
- cookie and preference information
3. How we collect personal data
We collect personal data:
- when you complete a contact form on our website
- when you sign up to receive updates or newsletters
- when you interact with the website
- through cookies and analytics tools, where applicable
4. How we use your personal data
We use personal data to:
- respond to enquiries submitted through the website
- send newsletters and updates where you have subscribed
- administer and improve the website
- understand how the website is used through analytics
- maintain records of stakeholder engagement
- protect the security and performance of the website
5. Lawful bases for processing
We rely on the following lawful bases under UK GDPR:
- Consent — for example, where you sign up to receive newsletters or consent to non-essential cookies.
- Legitimate interests — for example, to respond to enquiries, manage the website, maintain stakeholder engagement, and improve our services, where those interests are not overridden by your rights and interests.
- Legal obligation — where we need to process personal data to comply with the law.
The ICO says you should identify your lawful basis before processing and include it in your privacy notice.
6. Contact forms
If you contact us using a form on our website, the information you submit will be processed through Gravity Forms and sent to us so that we can respond to your enquiry.
We will use this information only for the purpose of handling your request and any related follow-up.
7. Newsletter sign-up
If you subscribe to our newsletter or updates, we will use your details to send you communications about Scotland’s Critical Technologies Supercluster and related news, updates and opportunities.
Our mailing list is managed through Mailchimp. Mailchimp provides embedded and hosted signup forms, and if you use Mailchimp signup tools you should ensure consent and privacy information are handled appropriately. Mailchimp also notes that enabling GDPR fields is only one part of a wider compliance process.
You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by contacting us directly.
8. Analytics and cookies
We use cookies and similar technologies to operate the website and understand how it is used. Some cookies are strictly necessary for the website to function. Other cookies, including analytics cookies used by Google Analytics 4, are optional and will only be used where you have given your consent through our cookie pop-up. You can manage your cookie preferences at any time through the cookie settings on our website.
9. Sharing your personal data
We may share personal data with trusted third-party service providers who support the operation of the website, including:
- WordPress as the website content management system
- Gravity Forms for website forms
- Mailchimp for newsletter sign-up and email communications
- Google Analytics for website analytics
- website hosting or technical support providers
We may also share personal data where required by law or where necessary to protect our legal rights.
We do not sell personal data.
10. International transfers
Some of our third-party providers may process personal data outside the UK. Where this happens, we will take appropriate steps to ensure your personal data is protected in accordance with UK data protection law.
11. Retention
We keep personal data only for as long as necessary for the purpose for which it was collected. The ICO says privacy notices should explain retention periods, or if fixed periods are not possible, the criteria used to decide them.
Suggested wording until you confirm exact timings:
- contact form enquiries: retained for up to 12 months after the last substantive contact
- newsletter data: retained until you unsubscribe, plus limited suppression information where needed
- analytics data: retained in line with your GA4 settings
- administrative records: retained only as long as necessary for operational purposes
12. Your rights
Under UK data protection law, you may have the right to:
- access your personal data
- ask for inaccurate data to be corrected
- ask for your data to be erased
- object to certain processing
- restrict certain processing
- withdraw consent at any time where consent is the basis for processing
The ICO says individuals must be told about these rights and about their right to complain.
To exercise your rights, contact info@techsupercluster.scot
You also have the right to complain to the Information Commissioner’s Office at ico.org.uk if you are unhappy with how we have handled your data.
13. Third-party links
Our website may contain links to third-party websites, including LinkedIn and YouTube. If you follow those links, those websites will have their own privacy notices and terms, and we are not responsible for them.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page.
