The Scottish Parliamentary Corporate Body (SPCB) processes any personal data you send in line with the requirements of the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA). Personal data consists of data from which a living individual is identified or is identifiable. The SPCB will only use your personal data for the purposes set out in this privacy notice and for which it was collected and in line with the legal basis for which it is being processed.
Further information about how the Scottish Parliament processes personal data
We collect and use your personal data to design, deliver and evaluate the mentoring programme.
We use your information to:
We collect and process normal category personal data such as
Your name will be anonymised prior to sharing the data with other parliaments.
*As the free text responses ask for information about additional needs such as accessibility requirements this may result in processing of special category data about health and accessibility requirements.We also collect equality information such as sex, age, including special category data about disability and ethnic group for monitoring and evaluation purposes. This information is optional.
Special category data is personal data which reveals:
We collect personal data directly from you when you apply to participate in the programme and during programme delivery.
Data protection law requires us to have a legal basis for processing your personal data. The legal basis for processing your personal data in relation to participating in the mentoring programme is for the purposes of a task carried out in the public interest (Article 6(1)(e) UK GDPR). The public interest task is for delivery and management of a mentoring programme that supports learning and development.
For the processing of equal opportunities data this is a requirement under public sector equality duty in terms of section 149 of the Equality Act 2010. Complying with this duty is in the substantial public interest.
We share relevant personal data with other parliaments involved in the mentoring programme where this is necessary to enable matching and communication between participants.
Programme coordinators may use identifiable information such as your name and contact details to administer the programme and confirm mentoring arrangements.
Information used for cross organisation matching will be shared in summarised form without direct identifiers such as names or contact details wherever possible. We only share the minimum amount of information required and ensure appropriate safeguards are in place when working with partner organisations.
For programme reporting and evaluation, data will be anonymised so that individuals cannot be identified.
We retain your personal data only for as long as necessary to deliver the programme and complete any follow up activity. After this, we will securely delete your personal data or anonymise it.
Anonymised data may be retained for a longer period for reporting and evaluation purposes, as it cannot be linked to identifiable individuals.
We do not intend to transfer personal data outside of the UK and Ireland (for the Irish Parliament), or to any international organisation, for the processing envisaged by this Privacy Statement.
In line with the principles underlying the National Guidance for Child Protection in Scotland, our staff may report a concern to the relevant authorities if they come across an issue during their work which causes them to think that a child may be at risk of abuse or harm.
You have the right to request a copy of the personal information about you that we hold.
Further information on how to make a data protection 'subject access request'.
We want to make sure that your personal information is accurate, complete, and up-to-date and you may ask us to correct any personal information about you that you believe does not meet these standards.
Where we use your personal information to perform tasks carried out in the public interest then, if you ask us to, we will stop using that personal information unless there are overriding legitimate grounds to continue. The right to object to the processing of personal data does not apply where the data subject has consented to the processing, subject to the right to withdrawn consent.
You have the right to ask us to delete personal information about you where:
Our use of your personal information is contrary to law or our other legal obligations
In some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we are checking the accuracy of personal information about you that we hold or assessing the validity of any objection you have made to our use of your information. Where this right is validly exercised, we may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.
Paper copies of the privacy statement may also be obtained using the contact information below.
This privacy statement was last updated on 25 June 2026.
If you have any further questions about the way in which we process personal data, or about how to exercise your rights, please contact the Head of Information Governance and Data Protection Officer at:
The Scottish Parliament
Edinburgh
EH99 1SP
Email: [email protected]
If you are unhappy with the way we have handled your personal information you can make a complaint to the Information Governance Team of the Scottish Parliament at the following address: [email protected].
We will respond to your complaint without undue delay and your complaint will be acknowledged within one month. If, having made a complaint, you are still unhappy with the way that your personal information has been handled, you can make a complaint to the Information Commissioner's Office.