Privacy policy

The healthyliving award is a national award for the food service sector in Scotland. The healthyliving award is delivered by NHS Health Scotland, a national NHS Board, by a team with expertise and experience in the food and catering industry.

We fully respect your right to privacy when using our services. Here you will find details of our privacy practices and what we do to maintain your right to privacy.

What information do we collect about you?

We collect information about you and your organisation when you access any of our services online, by phone or in writing. We only collect the information we ask from you that you give us, and consent to it being processed for the purposes of delivering the healthyliving award programme.

To progress to the first stage of the healthyliving award, your organisation must meet the food hygiene standards of the award. We will request this information from your Local Authority Environmental Health Services department and you are asked to consent to this when you register for the award.

How will we use the information we collect?

We process your information for the purpose of providing you with services from the healthyliving award. This includes some or all of the following:

  • managing your healthyliving award application, registrations, newsletter subscriptions and any enquiries you have submitted to us.
  • helping us know what you need, and providing opportunities to give us feedback so we can tailor and improve our products and services appropriately.
  • providing you with information about products and services offered or promoted through healthyliving award that you have opted in to receive.
  • conducting data and statistical analysis to monitor performance of our services and make improvements.

If you are a healthyliving award holder, the name of your establishment and contract caterer (if any), will be published on the Healthy eating near you website pages.
NHS Health Scotland may share the information we collect with:

  • organisations we work with to deliver the healthyliving award - Scottish Government, Local Authority Environmental Health offices, Food Standards Agency Scotland, and the Scottish Food Enforcement Liaison Committee, who we work with to.
  • our affiliates and service providers in the UK/EU as necessary for the purpose of keeping you updated on our products and services.

We may also disclose the information to a third party where we have a legal obligation to do so. NHS Health Scotland will not share with or sell your personal information to any other organisation.

How do we look after your information?

The information we collect about you and your organisation is stored on an electronic database on a secure server hosted by a UK/EU third party.

If you have a healthyliving award member's area account, your username (unique ID) and password is stored on the website Content Management System (CMS).
The website is hosted on a secure server by a third party in the UK/EU, and is maintained by NHS Health Scotland staff.

The principles of the General Data Protection Regulation (GDPR) require us to make sure your data is accurate, kept up-to-date and that we keep it for no longer than is necessary.

To meet these requirements:

  • we will update your data or remove it from our database at your request
  • if you have opted in to get updates on our products or services, any information we send you will include details to let you unsubscribe
  • we will remove you from our database if there has been no contact with you for 18 months.

Website log files

Using our website will generate log files of your activity. These files do not capture personal information but do capture the user's IP address. We store these log files on a secure server.

We use Google Analytics to analyse these files regularly to monitor website usage and evaluate the effectiveness of our website. We do occasionally allow trusted partners and suppliers access to our Google Analytics. This information is not personally identifiable. For more information go to our Cookies page.

We make no attempt to identify individual users of this website, unless we suspect that unauthorised access to our systems is being attempted. We reserve the right to attempt to identify and track any individual who is reasonably suspected of trying to gain unauthorised access to computer systems or resources operating as part of NHS Health Scotland web services. As a condition of using this site, all users give permission for NHS Health Scotland to use its access logs to attempt to track users who are reasonably suspected of gaining, or attempting to gain, unauthorised access.

Your rights

Under the General Data Protection Regulation (effective from 25 May 2018), there are a number of new rights relating to Data Protection:
You have the following rights:

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure
  • The right to restrict processing
  • The right to data portability
  • The right to object
  • Rights in relation to automated decision making and profiling

You can find more information about these rights on the Information Commissioner's website.

Access to your information, changes, and complaints

To request a copy of the information that we hold about you, correct any information that is inaccurate, unsubscribe from our services, or withdraw your consent you can contact us or write to us at:


healthyliving award
NHS Health Scotland
Meridian Court
5 Cadogan Street
GLASGOW
G2 6QE


If you have a healthyliving award member's area account, you can log-in and update your details.

For enquiries about NHS Health Scotland (the Data Controller) data protection practices, you can contact Duncan Robertson, NHS Health Scotland's Senior Policy, Risk and Data Protection Officer by email at duncanrobertson@nhs.net or by phone on 0131 314 5436.

Should you wish to make a complaint about NHS Health Scotland's collection or use of data, the UK's independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals is the Information Commissioner's Office.