Citizens Advice Scotland (CAS) is committed to ensuring that we are compliant with our obligations under the General Data Protection Regulation (GDPR), and that whenever we process personal data, we do so in a transparent, fair and lawful manner.
We are registered with the Information Commissioner's Office as a data controller and our registration number is Z9715836. You can contact our Data Protection Officer by writing to The DPO, Citizens Advice Scotland, Broadside, Powderhall Road, Edinburgh EH7 4GB.
If you are a member of CAS staff looking for information on Data Protection, including information on how to report a data breach, please refer to the CAS Data Protection Policy in the HR Zone.
Privacy Notice
Our Privacy Notice is downloadable here or at the bottom of this page.
This Privacy Notice sets out, in line with GDPR, how we collect and use your personal data during and after you contact us or access our services. It is important that you read this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using your data. If you are a client of a local citizens advice bureau or have accessed services from a local citizens advice bureau you should also to refer to that bureau’s Privacy Notice.
You can find contact details for all Scottish bureaux here.
Subject Access Requests
The General Data Protection Regulation gives individuals (data subjects) a number of rights, including the right to access personal data that an organisation holds about them. The process for requesting this data is known as a "Subject Access Request". You have the right to apply to CAS to access, modify, port or delete the personal information we hold about you. If you wish to make a Subject Access Request to CAS, please read the guidance which can be downloaded here or at the bottom of this page.
If you are a client of a local citizens advice bureau or have accessed services from a local citizens advice bureau and you want to make subject access request to find out what personal information is held about you, then you should do this by contacting the local bureau who provided you with advice or access to services.
You can find contact details for all Scottish bureaux here.
Right to Complain
If you think that Citizens Advice Scotland is handling your personal data inappropriately or is not meeting its legal requirements in respect of data protection laws, you have the right to complain to the Information Commissioner’s Office. Please visit the Information Commissioner’s website for more information (https://ico.org.uk/).
Cookies on CAS.org.uk
Our site uses Cookies, which are files saved on your phone, tablet or computer when you visit a website, to improve your experience and gather information on how you use our website.
You can prevent these cookies from being stored however this may downgrade or ‘break’ certain elements of this sites functionality.
Block/Manage Cookies
You can accept all cookies when prompted or you have the option to block cookies by altering the relevant settings within this prompt or browser.
You can change your cookie preferences at any time by clicking on the ‘C’ icon. You can then adjust the available sliders to ‘On’ or ‘Off’. You may need to refresh your page for your settings to take effect.
We use cookies for;
Logins and settings
We use cookies when you are logged in so that we can remember this fact. This prevents you from having to log in every single time you visit a new page. These cookies are typically removed or cleared when you log out to ensure that you can only access restricted features and area when logged in. In order to provide you with a great experience on this site we provide the functionality to set your preferences for how this site runs when you use it.
Google Analytics
This site uses Google Analytics which is one of the most widespread and trusted analytics solution on the web for helping us to understand how you use the site and ways that we can improve your experience. These cookies may track thing like such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content.
To opt out of being tracked by Google Analytics across all websites visit Google Analytics Opt-out Browser Add-on
For more information about Google’s cookie usage visit Google’s Cookie Usage Page
Social Sharing
We also use social media buttons and plugins on this site that allow you to connect with your social network. For these to work, Facebook, Twitter and LinkedIn, will set cookies through our site which may be used to enhance your profile on their site or contribute to the data they hold for various purposes outlined in their respective privacy policies - see below:
Cookies
Necessary |
|||
|---|---|---|---|
| Name | Purpose | Vendor | Expiration time |
| CookieControl |
Cookie Control cookies. This cookie is set in order to remember the user's preferences in regards to cookies. |
Civic | 90 days |
| has_js | Drupal uses this cookie to indicate whether or not the visitors browser has JavaScript enabled. | Drupal | Non Expiring |
| LPSID | This is a pattern type cookie associated with software from LivePerson which enables online chat functionality with site visitors. This cookie appears to be a unique session identifier. | LivePerson | Non Expiring |
| LPVID | This cookie name is associated with software from LIvePerson, which enables website owners to add online chat functionality to communicate directly with visitors. This cookie is believed to be a unique visitor identifier. | LivePerson | Non Expiring |
Analytical |
|||
| Name | Purpose | Vendor | Expiration time |
| _dc_gtm_ | This cookie pattern is related to the _gat cookie pattern that is also usually deployed by Google. The _gat cookie pattern is used to throttle the request rate; if Google Analytics is deployed via Google Tag Manager, the cookie root changes to _dc_gtm_ | Non Expiring | |
| _gat_UA-- | This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites. | Non Expiring | |
| _gat | This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate - limiting the collection of data on high traffic sites. | 10 Minutes | |
| _gid | This cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited. | Non Expiring | |
| _dc_gtm_ | This cookie pattern is related to the _gat cookie pattern that is also usually deployed by Google. The _gat cookie pattern is used to throttle the request rate; if Google Analytics is deployed via Google Tag Manager, the cookie root changes to _dc_gtm_ | Non Expiring | |
Marketing |
|||
| Name | Purpose | Vendor | Expiration time |
| _fbp | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers | Non Expiring | |
Changing your browser settings for cookies
You can adjust the settings in your web browser to determine whether sites can set cookies on your computer. If you've visited this website before, there may be previously-set cookies on your computer. You can find out how to delete them from the sites listed below.
