Privacy and Cookies

Who are we?

We're CALL Scotland and we help children and young people across Scotland to overcome disability and barriers to learning created by their environment, and to fulfil their potential.

CALL Scotland is based within the University of Edinburgh. The registered address is: CALL Scotland, University of Edinburgh, Paterson's Land, Holyrood Road, Edinburgh EH8 8AQ.

What information do we collect?

The personal information we collect about you might include your name, address, email address, IP address, and information regarding what pages are accessed and when. If you purchase a product from us, your card information is not held by us, it is collected by our third party payment processors, who specialise in the secure online capture and processing of credit/debit card transactions, as explained below.

Who has access to your information?

• We will not sell, rent or share your information to any third parties.
• When you are using our secure online payment gateway to purchase a product such as a book, your payment is processed by a third party payment processor, who specialises in the secure online capture and processing of credit/debit card transactions. If you have any questions regarding secure transactions, please contact us.

How you can access and update your information

The accuracy of your information is important to us so if you believe any of the information we hold is inaccurate or out of date, please email us at gdpr@callscotland.org.uk or by writing to CALL Scotland, University of Edinburgh, Paterson's Land, Holyrood Road, Edinburgh EH8 8AQ. Alternatively, you can telephone 0131 651 6236.

You also have the right to ask for a copy of the information CALL Scotland holds about you.

We may charge £10 for information requests to cover our costs in providing you with details.

Security in place to protect the loss, misuse or alteration of your information

All personal information is treated securely. Any sensitive information (such as credit or debit card details) is encrypted and protected with 128 Bit encryption on SSL.

All other personal information such as your name or email address is stored on our web databases using Blowfish hashing (with a salt). We use Blowfish's slow key changing which is actually a benefit: the password-hashing method used in OpenBSD uses an algorithm derived from Blowfish that makes use of the slow key schedule; the idea is that the extra computational effort required gives protection against dictionary attacks.

Servers are monitored to try and detect a data breach and we only hold onto data as long as we need it. So, for example, in some cases an email or an IP address which is required to secure our forms would be deleted after 60 seconds and not held indefinitely.

Some personal information such as contact details are also stored on internal databases which aren't accessed from the web.

No passwords or credit/debit card details are stored anywhere on our databases.

Links to other websites

Our website contains links to other websites run by other organisations. This privacy policy applies only to our website. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.

16 years of age or under

If you're aged 16 or under, please get your parent or guardian's permission before you provide us with personal information.