MHScot Workplace Wellbeing Privacy Policy

Privacy policy

This policy explains what personal information we collect through our online learning platform, why, and what your rights are. Last updated September 2026.

Who we are

MHScot Workplace Wellbeing CIC is responsible for your information. Registered in Scotland, company number SC440192. Registered office: 5 South Charlotte Street, Edinburgh, EH2 4AN. ICO registration ZA187968. Contact: Catherine Eadie, catherine@mentalhealthscot.land

What we collect

Your name, work email address, organisation and role, from your registration.

Your course progress, your answers to course questions, and your assessment result.

Anything you post in the learning community.

Any adjustment you ask for. If that includes information about your health, we use it only to arrange the adjustment, and only with your agreement.

If you buy a course for yourself, a record of your payment. Card payments are handled by Stripe, and we never see your card details.

Why we use it

To deliver your course and issue your certificate. This is needed to provide the course you, or your organisation, booked.

To keep in touch with our learning community, with occasional emails about resources, drop-ins and our podcast. You can unsubscribe at any time.

To let your organisation know when qualifications are due to expire, so they can plan requalification.

To improve our courses and share what learners tell us. We sometimes quote learners' answers, always anonymously, describing them only by sector or role. We never use your name without asking.

To keep financial records, as the law requires.

Who we share it with

Nuco Training and First Aid Awards, the awarding body, receive the details they need to register you and issue your certificate.

Your organisation, if they booked your place, may be told whether you completed the course.

The services we use to run the course: Heights (this platform), Stripe (payments), Microsoft Teams (guided sessions), TidyCal (assessment bookings), Airtable (course records) and Zoho (email). They only use your information to provide their service to us.

Some of these services store information in the United States. Where they do, the transfer is covered by the safeguards UK data protection law requires.

We never sell your information.

How long we keep it

Course records (registration, results and certificate details): four years after your course, which covers the three-year life of the qualification and requalification.

Your platform account and community posts: while your account is open. You can ask us to close it at any time.

Financial records: six years, as the law requires.

Your rights

You can ask to see the information we hold about you, and ask us to correct it, delete it, or stop using it. You can also object to how we use it, or ask for a copy to take elsewhere. Email catherine@mentalhealthscot.land and we'll reply within a month.

Concerns and complaints

If you're unhappy with how we've handled your information, please tell us first. We'll acknowledge your complaint within 30 days, look into it, and tell you what we find. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes

If we change this policy in a way that affects you, we'll let you know.