Privacy Notice
About this Privacy Notice
This Privacy Notice explains how personal data is collected, used, stored, and protected when you use the reporthate.scot online service.
You should read this Privacy Notice alongside:
- The reporthate.scot Terms and Conditions
- The reporthate.scot Cookies Statement
What is reporthate.scot?
reporthate.scot is an online platform that allows individuals to report hate-related incidents occurring in Scotland.
The service is designed to:
- Make reporting easier and more accessible
- Allow users to report anonymously if they choose
- Capture information about hate incidents that may not meet the legal threshold of a crime
- Support better understanding of hate through anonymised data
- Provide signposting to relevant support organisations
reporthate.scot is not an emergency service and does not replace reporting to Police Scotland.
Who we are
reporthate.scot is operated by:
- Organisation Name:
- ReportHate.scot CIC
- Legal Status:
- Community Interest Company
- Contact Email:
- info@reporthate.scot
For data protection purposes, reporthate.scot acts as the Data Controller.
What personal data we collect
Depending on how you use the service, we may collect the following:
Personal Data
- Name (optional)
- Email address (optional)
- Phone number (optional)
- Location of the incident (e.g. postcode or area)
- Date and time of incident
- Description of the incident
Special Category Personal Data (optional)
Users may voluntarily provide information relating to:
- Race or ethnicity
- Religion or belief
- Disability
- Sexual orientation
- Gender identity
- Other protected characteristics
You are not required to provide special category data to submit a report.
How we use your data
We use personal data to:
- Receive and process hate-related incident reports
- Understand patterns and trends in hate incidents
- Produce anonymised statistics and reports
- Contact you only where you have asked us to do so
- Signpost you to relevant support services
We do not sell personal data or use it for marketing.
Anonymity and sharing choices
When submitting a report, you can choose:
- To submit anonymously
- Whether your report may be shared with relevant organisations
- Whether anonymised data may be used for research or reporting
Your choices are respected and recorded.
Lawful basis for processing
Under UK GDPR, our lawful bases are:
Personal Data
- Article 6(1)(e) - task carried out in the public interest
- Article 6(1)(a) - consent (where applicable)
Special Category Data
- Article 9(2)(g) - substantial public interest
- Data Protection Act 2018, Schedule 1 - preventing and addressing discrimination and hate
Data storage and security
- Data is stored securely in Supabase PostgreSQL (EU region) with access restricted to authorised personnel
- All data transmissions use HTTPS encryption
- Uploaded evidence is stored in a private, siloed storage bucket with signed URLs
- Row Level Security policies enforce role-based data access at the database level
Data retention
Personal data is retained only for as long as necessary.
Indicative retention periods:
- Identifiable reports: 60 months
- Anonymised data: retained longer for statistical purposes
Retention schedules will be reviewed regularly.
Your rights
Under UK GDPR, you have the right to:
- Be informed
- Access your data
- Rectify inaccuracies
- Request erasure
- Restrict processing
- Object to processing
- Withdraw consent
To exercise your rights, contact: info@reporthate.scot
Complaints
If you are unhappy with how your data has been handled, you may complain to:
Information Commissioner's Office (ICO)