Legal
Privacy policy
Last updated 17 October 2026
Who we are
Edderton Scott (“we”, “us”) is a systems consultancy based in Glasgow, United Kingdom. We are the controller of the personal data described here. To contact us about your data, use the request form below.
What we collect, and why
When you contact us or fill in a form
Your name, work email, company, role, and anything you tell us about your business (such as turnover band, team size and the problem you want solved). We use it to reply, to decide whether we can help, and to arrange calls. Lawful basis: our legitimate interest in responding to business enquiries, or steps you ask us to take before entering a contract.
When you book a call or an audit
Your booking details and any notes you add. We use them to hold the appointment, send confirmations and reminders, and prepare. Lawful basis: performing a contract or taking steps at your request.
When you pay us
Payments are handled by PayPal. We receive confirmation of payment and billing details; we never see or store full card numbers. Lawful basis: contract and legal obligation (accounting records).
When you respond to our ads
If you submit a lead form on LinkedIn or Facebook/Instagram, the platform passes us the details you chose to share. We use them as described under “When you contact us”.
If we contacted you first
We research businesses we think we could help, using publicly available sources (company websites, LinkedIn, Companies House, job adverts) and business-contact data providers. We may hold your name, role, work email and company, and a note of why we got in touch. Lawful basis: our legitimate interest in offering relevant services to businesses. We contact a small number of businesses directly, never more than three times, and every message lets you opt out. If you ask us to stop, we will, and we keep only enough to make sure we don't contact you again.
If you use the admin cost check
Your answers aren’t stored unless you ask for the breakdown by email. If you do, we keep your answers with your details, send the breakdown and a personalised analysis, and only send follow-up emails if you tick the box for them. Every follow-up has an unsubscribe link. Lawful basis: your request, and your consent for follow-ups.
Cookies
See our cookie policy. Marketing cookies are only set if you accept them.
Who we share it with
Only the service providers that help us run the business: website hosting, email delivery, our internal client and project system, calendar and payment providers, automation tools that move enquiries into our systems, an AI provider (such as OpenAI or Anthropic) that helps write the personalised analysis you ask for and our own call notes, and (only if you consent to marketing cookies) LinkedIn and Meta. Some providers may process data outside the UK; where they do, we rely on UK adequacy regulations or approved contractual safeguards. We never sell personal data.
How long we keep it
- Enquiries that don't become work: up to 24 months, then deleted.
- Outreach research with no reply: up to 12 months.
- Client and billing records: 6 years after the engagement ends, as required for accounting.
- Consent records: as long as needed to show your cookie choices were respected.
Your rights
You can ask to see the data we hold about you, correct it, delete it, restrict or object to how we use it (including any direct marketing, at any time), or receive a copy to take elsewhere. Use the form below. We'll respond within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we'd appreciate the chance to put it right first.