How MHSES uses and processes user data, and what users' rights are. Moray House School of Education and Sport (‘the School’) is committed to protecting your privacy and keeping you informed of how your information is used. We will only record your personal details in the manner and for the purposes set out in this privacy notice. Data will be kept secure from unauthorised access, use or disclosure. We will not sell, rent, trade or otherwise knowingly share or provide your personal information to any third party, except insofar as legally obliged to do so or as specified below. What information do we collect? Information we collect may include:In response to or as part of any contact with the School via electronic means we may request your contact information; such as your name, organisation, role, postal address, telephone, date of birth and email addressYour responses to surveys which we ask you to complete for research and service improvement purposesInformation required for research subject participation, although this may be subject to a separate consent process or privacy noticeInformation required to promote School activities, including details of the work, affiliations and achievements of our students, alumni and staff, which may also be subject to a separate consent process or privacy noticeInformation required to assess your eligibility for School funded opportunities e.g. your curriculum vitae, a covering letter or completed applicationHow you use our websites, unless you have opted out of cookie consentAny other information you post, email or otherwise send to us How do we use this information? The School will process the personal data of academics, researchers, students, graduates, visitors, staff and other stakeholders in order to deliver and improve the opportunities and services we provide in a personalised manner, to ensure each individual receives relevant information and to meet our statutory, contractual and legitimate business requirements in the most efficient and effective way.We do not use profiling or automated decision-making processes. A human decision maker will always be involved before any decision is reached in relation to you.Information about you will only be used:If you have provided us with your consentIf processing is necessary for the performance of a contract to which the data subject is party or in order to take the steps at the request of the data subject prior to entering into a contractIf it is in the legitimate interest of the School to process information about you as you are part of the University of Edinburgh community. In order to stay in touch with you and keep you informed of our events, news and servicesTo facilitate online bookings for our eventsWith your consent we may:Keep you up to date via electronic, postal and telephone communications with news, events, activities, programmes, services, funding and progress of interest to you with regards to the SchoolProcess information about you, including photographs, in digital channels including websites and social mediaProcess information about you to administer your conference or event attendance at the School. After which we may send you presentations, surveys and request feedbackSend you University and School marketing informationTo meet our contractual obligations to you we will:Process contracts for research agreements, funding award applications, placements, licensing agreements, research programme activity and service level agreementsTrack financial information for reportingMonitor University of Edinburgh staff and student entries into training, awards, programmes and competitionsProcess recipients of grants, funding and awards won for audit purposesCapture external, past and current researcher and academic publications and research outcomesOn the basis of our legitimate business interests to you we will:Supply you with the services and information that you request from us and to allow us to respond to your enquiry accordinglyAnalyse the information we collect so that we can administer, support, improve and develop our websites, documentation, teaching and research, room bookings, events and to ensure continuous improvement of all of our servicesInform stakeholders of opportunities that may be of interest to themMonitor the progress of the School and its stakeholders and inform them of appropriate opportunities and servicesAssist stakeholders in visa application processesNotify you about changes to our servicesSend you University and School information if you are a professional contact Cookies and website privacy For more information on our use of cookies and details of how the University of Edinburgh is committed to preserving your privacy, please visit the University of Edinburgh Privacy and Cookie Policy information webpages.Privacy and cookie Policy information How long will we keep your personal data? Whenever we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected and, in some cases, so we can comply with our legitimate and contractual obligations.In the case of subscribed services such as mailing lists we will hold the personal data you provided us for 1 year. After this period, we will send communication to you querying whether you wish to remain on our mailing list. Alternatively, you can opt out of the mailing list at any time.At the end of that retention period, your data will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning. Storage and transmission of your information Once we have received your information, we employ security measures to protect your information from access by unauthorised persons and against unlawful processing, accidental loss, destruction or damage.Transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of data transmitted to the website or via email. Any transmission is at your own risk. Passwords and credentials Where we have given you (or where you have chosen) a password which enables you to access certain parts of the website or information systems and services, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. Online Transactions All payment transactions will be encrypted. Areas of the site that process online transactions make use of – and transfer data to – third-party software and service providers. All third-party software and service providers that we use are compliant with the relevant Payment Card Industry standards.Payment Cards Industry Security Standards Council website Information disclosure Authorised personnel within the School will be able to access the information you provide to us. Unless required to do so by law, we will not share, sell or distribute any of the information you provide to us without your consent. To comply with statutory requirements, we are required to share your personal information with external agencies, particularly for the purposes of detection or prevention of crime or fraud. We may also disclose your personal information to the University of Edinburgh or any other subsidiary of the University of Edinburgh, for the purposes disclosed in this privacy statement. Who we share data with Information that you share with us may be processed by the following third parties:Other departments and services within the University of EdinburghOn certain programmes of study we will share information with other participating academic institutionsOn certain programmes of study we will share information with local authorities for the purpose of facilitating mandatory school placementsOn certain programmes of study we will share information with the General Teaching Council for Scotland for the purpose of assessing Fitness to TeachDiversity Travel for the purposes of making travel and accommodation arrangementsEnterprise Rent-A-Car or Arnold Clark for the purposes of arranging car hiresTo facilitate online bookings for our eventsCo-hosts of events and conferencesResearch funding bodiesIn some instances, the University of Edinburgh uses third-party companies to enhance the quality, service and functionality of certain web services available to visitors.You will be informed if this applies to your data.We use:Arnold Clark – to arrange car hires privacy noticeBlackboard Collaborate – the University supported virtual classroom and meeting tool Data Retention PolicyClaris FileMaker – to manage CALL Scotland’s activities database and loan bank privacy noticeDotdigital - to provide a bulk email service privacy noticeEPay – for event management and registration privacy noticeEnterprise Rent-A-Car – to arrange car hires privacy noticeEventbrite – for event management and registration privacy noticeJISC online surveys – to collect survey responses privacy noticeMailchimp – to provide a bulk email service privacy noticeMicrosoft Teams and Microsoft Teams Live Events - to host online meetings and presentations privacy statement Additional privacy statements The University maintains several other privacy statements that are specific to services delivered. University of Edinburgh privacy statements Unsubscribing If you change your mind about being contacted in the future by any of these means you can opt out from further communications at any point by contacting us directly at MHSES.Governance@ed.ac.uk or at the address below:School OfficeOld Moray House 1.02Moray House School of Education and Sport University of Edinburgh Holyrood Road Edinburgh EH8 8AQ Alternatively, unsubscribe via the unsubscribe link at the bottom of email communications you receive from us. Changes to the privacy policyWe keep this privacy policy under regular review and may amend this policy from time to time. If we make any substantial changes we will notify you by posting a prominent notice on the website.Further informationMoray House School of Education and Sport’s privacy notice is supported by the University of Edinburgh's wider privacy policies and guidelines.This privacy notice is continued at: Continued Privacy Notice This article was published on 2026-05-13