Privacy Statement for the Noteable service

About this privacy notice

This privacy notice provides information about how EDINA and the University of Edinburgh collects and uses your personal information in relation to your use of the Noteable service.

Information about you: how we use it and with whom we share it

This privacy notice uses “you” to mean any individual about whom we collect and hold personal data. The information you provide will be used by the University to provide access to the Noteable service.

What information may we collect about you?

We collect, store and use the following categories of personal data:

How will we use the information about you?

We are using information about you that is required to register for and make use of the service. The Noteable service is designed to connect with a virtual learning environment through an LTI connection. To ensure the Noteable service provides meaningful recording of users' assessments, personal data are required to be stored.

Email and service website notification banners are the method via which users receive service notifications.

First name/surname are required for course registration only.

The information you provide to Noteable will be used by EDINA and the University of Edinburgh to:

We do not use profiling or automated decision-making processes. Some processes are semi-automated (such as anti-fraud data matching) but a human decision maker will always be involved before any decision is reached in relation to you.

How is your personal data collected?

We will hold the personal data you provided to us through website forms for five years after the end of your subscription, and for periods defined in the service data retention schedule after your last use of Noteable if you are a registered user. We hold IP address information for five years from the date of visit for security purposes. Email address, first name, surname, username are collected to provide access to the Noteable service.

You give us your personal data through the information collected about you in order to subscribe and access Noteable, take a payment from you or respond to an email relating to an enquiry. We capture this information as it is necessary to fulfil the subscription contract for the service.

If we correspond with you regarding a query or your subscription to Noteable, we may hold your contact details in our call management system for no less than 7 years in accordance with the Privacy Notice applicable to the call management system:

Data controller and contact details

For data collected under this privacy notice, the University of Edinburgh (the “University”) is the Data Controller (as that term is defined in the UK General Data Protection Regulation and the Data Protection Act 2018), registered with the Information Commissioner's Office, Registration Number Z6426984.

The University's Data Protection Officer can be contacted at:


Address: Governance and Strategic Planning, University of Edinburgh, Old College, EH8 9YL.

The University Data Protection Policy data protection policy is available via their website.

Data Sharing

In addition to the primary purposes, we are also legally obliged to share certain data with other public bodies such as HMRC and will do so where the law requires this; we will also generally comply with requests for specific information from other regulatory and law enforcement bodies where this is necessary and proportionate.

Your rights

You have the right to request access to, copies of and rectification or (in some cases) erasure of personal data held by the University and can request that we restrict processing or object to processing as well as (in some cases) the right to data portability (i.e. the right to ask us to put your data into a format that it can be transferred easily to a different organisation).

If you wish to make use of one of these rights, please email your local contact.

If we have asked for your consent in order to process your personal data you can withdraw this consent in whole or part at any time. To withdraw consent, please email your local contact, who will explain the consequences of doing so in any particular case and initiate proceedings for withdrawing consent.


If you are unhappy with the way we have processed your personal data you have the right to complain to the Information Commissioner’s Office (ICO), but we ask that you please raise the issue with our Data Protection Officer first.

As a visitor to we record your IP address; we do this so that we can monitor service user engagement.

Further information

You can access our cookies policy here:

If you have any questions, please contact the EDINA helpdesk at or 0131 650 3302.