Privacy Policy

Who are we?

The web application is operated and managed by Gateway Shared Services (“Gateway”, “we” or “us”), a public sector, not for profit consortium of ten local authorities, hosted by Glasgow City Council at Castlemilk High School, 223 Castlemilk Drive, Glasgow, G45 9JY. We can be contacted by post at this address, by email at, or by telephone on 0141 270 6110.

Glasgow City Council is a local authority established under the Local Government etc. (Scotland) Act 1994. Its head office is located at City Chambers, George Square, Glasgow G2 1DU, United Kingdom. You can contact our Data Protection Officer by post at this address, by email, or by telephone on 0141 287 1055.

We provide this service to our local authority partners listed at We are a data processor of personal information (information related to identifiable living individuals) collected or obtained by or through this website on behalf of these local authorities who are the data controllers.

What is the legal basis for using your information?

The local authority has a statutory or legal duty to provide school pupils with suitable workplace learning opportunities. We provide Workit, and its related services, to support them in doing this. Processing your personal information is necessary for us to provide the service, and for the local authority to comply with its legal duty. We would not be able to provide the service to you without your personal information.

Why do we need your personal information and what do we do with it?

You give us your personal information, or your local authority provides it to us, so that school pupils can identify and book a suitable work placement, and so that we can carry out a health and safety check of the work placement provider on their behalf. We also use your information to verify your identity where required, contact you by post, email or telephone and to maintain our records.

If you are a young person, we collect personal information about you when:

  • your school shares this information with us, for example by securely uploading a pupil data file to Workit
  • you give it to us directly, for example on completing new placement request forms, or when using online forms or questionnaires.

If you are a work placement provider, we collect personal information about you when:

  • you give it to us directly, for example on completing forms provided to you as part of a work placement canvass, or when using online forms or questionnaires.

If you are a teacher, we collect personal information about you when:

  • a user account is setup for you by the responsible person within your establishment or a Gateway administrator.

What personal information do we use?

We may collect, store and otherwise process the following kinds of information.

If you are a young person:

  • SEEMIS Reference Number
  • SQA Candidate Number
  • Gender
  • Date of birth
  • Name and address
  • Telephone number
  • Registration class
  • Class (Year/Stage).

If you are a work placement provider:

  • Name
  • Business address
  • Email address
  • Telephone number.

If you are a teacher:

  • Name
  • Email address.

We collect personal information about you when you visit our website, but only to log the computer network’s IP address and collect session information such as the duration of the visit and type of browser used. This is recognised by the web server and is used for administration purposes and to provide statistics which we use to evaluate use of the site.

Any personal data collected through this website will be treated as confidential.

Who do we share your information with?

We do not share, sell or rent your personal information to third parties for marketing purposes.

We will disclose young peoples’ personal information to organisations offering work placements for the purpose of securing a work placement.

We will share work placement provider health and safety information to other local authorities only when the provider offers placements across local authorities.

Where information is shared only the minimum amount of information required for that purpose is disclosed.

How long do we keep your information for?

We only keep your personal information for the minimum period of time necessary. Sometimes this time period is set out in the law, but in most cases it is based on the business need. We maintain a records retention and disposal schedule which sets out how long we hold different types of information for.

You can view this on our website or you can request a hard copy from the contact address stated above.

Your rights under data protection law

  • Access to your information – you have the right to request a copy of the personal information that we hold about you.
  • Correcting your information – we want to make sure that your personal information is accurate, complete and up to date. Therefore, you may ask us to correct any personal information about you that you believe does not meet these standards.
  • Deletion of your information – you have the right to ask us to delete your personal information where:
    • you think that we no longer need to hold the information for the purposes for which it was originally obtained
    • you have a genuine objection to our use of your personal information – see Objecting to how we may use your information below
    • our use of your personal information is contrary to law or our other legal obligations.

Objecting to how we may use your information

You have the right at any time to tell us to stop using your personal information for direct marketing purposes.

Restricting how we may use your information

In some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we are checking the accuracy of personal information that we hold about you or we are assessing the objection you have made to our use of your information.

This right might also apply if we no longer have a basis for using your personal information, but you don't want us to delete the data. Where this right is realistically applied will mean that we may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.

Please contact us as stated above if you wish to exercise any of these rights.


We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect on line.

Other websites

This privacy policy only covers Links within this site to other websites are not covered by this policy and individuals should check the terms of the privacy policy of those other sites.

Use of cookies by Workit

Cookies are files that store information on your hard drive or your browser. These cookies mean that the website can recognise that you have previously visited the Website. This allows you to maintain your preferences on the Website and for us to measure the usability of the Website. To find out more about cookies, including how to see what cookies have been sent and how to manage and delete them, visit All about cookies.

We do not use cookies to store personal information.

You can, should you wish, disable the cookies from your browser and delete all the cookies currently stored on your computer. However, by deleting the cookies you may find you are prevented from taking full advantage of the website. You can find out how to delete cookies for your browser by clicking ‘help’ on your browser’s menu.

This website also uses Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses ‘cookies’ to collect information about your use of the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

Google will use this information to evaluate your use of this site and compile reports on website activity for our website operators. This helps us to evaluate and improve the website and monitor site usage.

Google will not associate your IP address with any other data held by Google.

We also make use of Google Analytics Demographics and Interest Reporting, part of Google Analytics Advertising Features. This uses Google's 3rd-party audience data (such as age, gender, and interests) with Google Analytics. This is used to provide demographic statistics. To opt out of being tracked by Google Analytics across all websites visit Google Analytics.

This website includes links to other websites operated by third parties which are not controlled by us and may also use cookies. You should check the privacy and cookies policies posted on the relevant third-party sites for further information on their use of cookies and how to reject or delete such cookies.


We aim to directly resolve all complaints about how we handle personal information. If your complaint is about how we have handled your personal information, you can contact the Council’s Data Protection Officer by email at or by phone on 0141 287 1055.

However, you also have the right to lodge a complaint with the Information Commissioner's Office, who can be contacted by post at: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. By phone on 0303 123 1113 (local rate) or 01625 545 745 or Visit their website for more information at

Please note if your complaint is not about a data protection matter or concerns the handling of personal information, please contact us using the complaints procedures in place at

More information

For more details on how we process your personal information visit If you do not have access to the internet, you can contact us via telephone to request hard copies of our documents.

Last Updated: 12/04/2024

This site uses the following OS & Code-Point Open Data

Contains OS data © Crown copyright [and database right] 2024.

Contains Royal Mail data © Royal Mail copyright and Database right 2024.

Contains National Statistics data © Crown copyright and database right 2024.