Privacy Notice

Cattanach is a Scottish Charitable Incorporated Organisation (CS004371) and Scottish Registered Charity (SCO49833), operating as Elevate Great.

Elevate Great is committed to ensuring that all personal data we hold is processed in accordance with data protection law and that good data protection practice is imbedded in the culture of our organisation.

Elevate Great processes the personal data of individuals (data subjects) who interact with us, support us, who use our services and who we support.

This notice sets out how we process data and the rights data subjects have in respect of their personal data.

1. What information does Elevate Great collect?

Elevate Great collects and processes a range of information containing personal data about you. This may include your name, company or organisation name, telephone number, email address, IP address, details of the sector in which you operate, your geographic location and details of the areas and services you are interested in.

We will also collect the personal data of prospective job candidates who respond to our advertising when you contact us directly, through our website, through third party websites or via social media.

From time to time, we will undertake research and will collect personal data in the course of undertaking that research. We will also collect personal data in the course of carrying out our project-based work and running competitions which you have entered.

We will also take photographs and/or recordings of attendees at events which we run for the purposes of promoting and sharing information about the work we are involved in. If you do not wish any photographs or recordings, where you can be identified, to be used, please contact at the address noted below.

In some limited situations we may collect special category data, primarily health data, for example, where you attend an event and require certain arrangements to be put in place for access or where you have dietary requirements or where information is provided in the context of one of our projects.

Elevate Great may collect information from you in a variety of ways including directly from you when you contact us or use our online enquiry form, use our services, take part in an event, partner with us or get involved in any of the projects which we run. We will collect data when you contact us or engage with us through social media or through third party websites.

We will also collect data from other charities and organisations, including our partners and organisations to whom we have made a grant.

We will also collect certain information from you by using cookies on our website. Cookie settings can be altered by changing your browser settings.

2. Why does Elevate Great process your personal data?

If we enter into a contract with you, we will use your contact details prior to us entering to that contract to contact you and for the purposes of entering into a contract with you.

Where you have entered into a contract with Elevate Great, we need to process your personal data in order to meet our obligations and exercise our rights in terms of that contract.

In other cases, Elevate Great has a legitimate interest to process your data, for example where we use your contact details to allow us to respond to any enquiries you send to us or to provide you with updates about Elevate Great, our work, new initiatives and events, pursue our charitable objectives, manage and run events, seek feedback and administer the organisations.

We also process data in the context of administering grants made and working with our learning partners to achieve our charitable objectives.

There may be some occasions where we seek your consent to process personal data. In that case we will provide full details of what we are seeking consent for, so that you will be able to carefully consider whether to provide that consent. Where you have provided consent to us for processing, you have the right to withdraw that consent and can do so at any time by contacting us at [email protected]. You also have the right to opt out of receiving marketing from us by contacting us at this address or by clicking the unsubscribe option in our emails.

3. Who has access to data?

Elevate Great shares your data with third parties (data processors), including sub-contractors engaged by Elevate Great to provide services, including IT and software service providers, cloud computing services providers, mail and marketing providers and document storage providers. Where we use these providers, we have appropriate contractual arrangements in place to ensure the security and confidentiality of your data.

We will also share your data as required by law or in connection with legal proceedings or legal claims.

Elevate Great may also share your data with third parties in the context of a restructuring of our organisation. In those circumstances the data will be subject to confidentiality arrangements.

If your personal data is transferred outwith the UK, we will ensure that adequate safeguards are in place, an adequacy agreement or other contractual arrangement is in place as required by law.

4. How does Elevate Great protect data?

Elevate Great takes the security of your data seriously. Elevate Great has internal controls in place to try to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by its employees in the performance of their duties. We use appropriate standards of technology and operational security to protect your personal data.

Where Elevate Great engages third parties to process personal data on our behalf, we do so on the basis of written instructions to those processors who are under a duty of confidentiality and who are obliged to implement appropriate technical and organisational measures to ensure the security of data. They are also not allowed to use your personal data for their own purposes.

5. How long does Elevate Great keep your data?

Elevate Great will hold your personal data for the duration of any contract with you and for a fixed period of six years thereafter. Where we do not have a contract with you, we will only hold your personal data for as long as is necessary for the purpose it is processed and, in any event, no longer than six years.

6. Your rights

As a data subject, you have a number of rights. These include the right to:

If you would like to exercise any of these rights or if you have any concerns about how your personal data is being processed, please contact Elevate Great at [email protected] or Elevate Great, 14-18 Hill Street, Edinburgh EH2 3JZ.

If you receive updates by email from us, you can opt out of receiving those emails at any time by contacting us at [email protected].

We hope to be able to resolve any issue with you but if you believe that Elevate Great has not complied with your data protection rights, you can complain to the Information Commissioner.

Further information is available at www.ico.org.uk

Information Commissioner’s House

Wycliffe House

Water Lane

Wilmslow

SK9 5AF

0303 123 1113

7. What if you do not provide personal data?

Please note that where you have entered into a contract with Elevate Great failing to provide data may mean that Elevate Great is unable to properly implement the contract and that you are unable to exercise certain contractual rights.

8. Monitoring and Review

This policy shall be regularly monitored and reviewed and was last updated in April 2025.