Glasgow 2026 Privacy Notice
About Us
Glasgow 2026 Limited (“Glasgow 2026/”we”/”us””) takes its responsibility to look after your personal information very seriously. Glasgow 2026 are a ‘data controller’ for the purposes of the data protection legislation, and we are responsible for, and control the processing of, any personal information you share with us. This privacy notice contains important information about:
- The personal information we collect about you;
- Why we collect your information and what we do with it;
- Who your information will be shared with, and
- Your rights in relation to your personal data.
This notice relates to information collected from our website (including its subdomains), from our social media channels, from our contact centre, via email and any forms or questionnaires which you may complete on the website, or otherwise, as well as any postal, telephone or email enquiries you may make to Glasgow 2026.
We have a separate cookie notice for any information which we collect via cookies, web logs, Google Analytics, and security and performance software. For further information about these please read our cookie notice.
If you have any queries relating to data protection matters or if you would like a copy of this privacy notice in another format (for example: audio, large print or braille) please contact our Data Protection Officer at:
Data Protection Office
Airthrey Castle
University of Stirling
Stirling
Scotland
FK9 4LA
Email: dpo@glasgow2026.com
About Commonwealth Sport
Commonwealth Sport is the public facing brand of the Commonwealth Games Federation (CGF) and is used to promote the Commonwealth Sport Movement – which includes the Commonwealth Games, Commonwealth Youth Games and the Commonwealth Sport Foundation.
CGF is the organisation responsible for the direction and control of the Commonwealth Games and Commonwealth Youth Games, and for delivering on the vision of the Commonwealth Sports Movement: Our Commonwealth, united by sport.
CGF Partnerships (“CGFP”) was established in 2017 as a joint venture entity of the CGF and SportFive. The focus of CGFP is on delivering sustainable and long-term solutions to enhance the Commonwealth Sport Movement and the Commonwealth Games.
Commonwealth Sport Foundation is the charitable foundation of the Commonwealth Sport Movement (registered charity 1173238 in England and Wales) and is the official charity of Commonwealth Sport and Glasgow 2026.
More information about Commonwealth Sport can be found on their website at: Commonwealthsport.com
Links to other websites
Our website contains links to other websites of interest operated by third parties, including social media sites such as Facebook and Twitter and websites such as the Information Commissioner’s Office. Please note that this Privacy Notice only applies to the personal information that we collect through our website (including its subdomains) and our social media channels, and we cannot be responsible for personal information that third parties may collect, store and use through their websites. You should exercise caution and always read the privacy notice of each website you visit carefully.
What information do we collect and why do we need it?
We process the personal information provided by you, or a third party acting on your behalf (such as a relative or friend), in order to respond to your requests including applications to participate in events and campaigns organised by Glasgow 2026 and to receive communications from us. To keep you updated about Glasgow 2026 and the Games, we wish to collect the following information about you to personalise your communications:
- Your name
- Your email address
- Your postal address
- Country of residence/ village address
- Postcode/Zip Code
- Mobile phone number
- Date of birth
- Age
- Gender
- Preferred Sports
- Preferred Nation
If you also consent to receive marketing information from Glasgow 2026 and/or Commonwealth Sport, then we and Commonwealth Sport will use your personal information, with your consent, to provide specific email and/or mobile communications related to Glasgow 2026 or any future Commonwealth Games.
If you also consent to receive marketing information from, and about, the Commonwealth Sport Foundation (charity number:1173238), then we and Commonwealth Sport will use your personal information, with your consent, to provide specific email and/or mobile communications related to the Commonwealth Sport Foundation. We will also share your personal information, with your consent, the Commonwealth Sport Foundation for them to provide you with specific email and/or mobile communications related to their charitable objectives, news and events.
If you also consent to receive marketing information from, and about, Games partners or sponsors from Glasgow 2026 and/or Commonwealth Sport, then we and Commonwealth Sport will use your personal information, with your consent, to provide specific email communications related to such partners and sponsors that we think will be relevant to you. We will also share your personal information, with your consent, with Games partners and sponsors, for them to provide specific email [and/or mobile communications]. We will never share your personal information with our partners or sponsors unless you have given consent to do so. We will never sell your personal data to third parties or any other organisations.
We would also like to undertake profiling of the impact our marketing activities have across the country, to ensure we are reaching a wide audience. To enable us to do this we would also like to collect your name, email address, country of residence and postcode. You do not have to provide this information and we would only collect this with your consent. You have the right to withdraw your consent at any time. (please refer to the section entitled ‘your data protection rights’)
We also use personal information submitted to us by you, or a third party who is acting on your behalf, via the website, our social media channels or by post, to deal with any specific enquiries you may have, such as:
- Registering to create a Commonwealth Sport Account
- Registering your interest in volunteering
- Applying to participate in events and campaigns organised by or with the collaboration of Glasgow 2026
- Registering your interest in purchasing tickets for the Games. You may provide us with your nationality, sports in which you are interested so we can show the information most relevant to your interests and your accessibility requirements to help us provide you with the seats that best meet your needs
- Registering your interest in relation to a specific Commonwealth sport
- Reporting on our performance regarding equality, diversity and inclusion
- Submitting a complaint to us
- Contacting the press office
- Contacting our contact centre
- Submitting a freedom of information request
- Submitting a data protection enquiry
- With your consent, to run background checks where necessary in order to be eligible for certain competitions, awards and events organised by Glasgow 2026
- Promoting the Commonwealth Games
Depending upon the enquiry you make or the information you want to access, we may need to collect further personal information from you in order to respond to your request.
Who will have access to your personal information?
We use a third-party organisation called Pulselive Ltd to host and maintain our website; and store personal data collected via the website.
We use a third-party DotDigital to store personal data collected via our website: and to send our marketing and communications material.
If you have contacted us by post at our Stirling address, then our staff will use your personal data in order to respond to your enquiry.
Social media channels where you have shared your data on the relevant platform.
How is processing your information lawful?
The law requires us to determine which of six defined lawful bases we use to process different categories of your personal information, and to notify you of the basis for each category.
When you ask us to provide you with information about our organisation or Commonwealth Sport, we/Commonwealth Sport rely on the basis of consent to process your personal data in order to provide you with this information. We will ask you to expressly opt in by clicking on a ‘tick box’
When you also ask us to provide you with information about the Commonwealth Sport Foundation, then we, Commonwealth Sport, or the Commonwealth Sport Foundation rely on the basis of consent to process your personal data in order to provide you with this information. We will ask you to expressly opt in by clicking on a ‘tick box’.
We also rely on the basis of consent, via use of a ‘tick box’ to send you any direct marketing material on our behalf or on behalf of our Games partners or sponsors. We also rely on the basis of consent, via use of a ‘tick box’ to share your personal data to both our Games sponsors and partners and those sponsors and partners of Commonwealth Sport.
You have the option to opt into each individual type of marketing.
If you have expressly made your personal data public (e.g., for promoting the Commonwealth Games)
Similarly, we rely on the basis of consent for our use of cookies. You have the option to refuse to accept cookies each time you visit our website. However, if you do so, you may not be able to continue to use all or part of our website or our services. (Please see our Cookie Notice for further information)
We continue to process your information on the consent basis until you withdraw your consent or it can be reasonably assumed that your consent no longer exists. You may withdraw your consent at any time by contacting our Data Protection Officer (please see the ‘how to contact us’ section).
If you would like to withdraw your consent to receiving direct marketing materials, you can contact our Data Protection Officer. Alternatively, there will also be a link to a unique preference centre in each marketing email you receive where you can select ‘unsubscribe’ in order to withdraw your consent or you can update your ‘opt in’ preferences in various fields in order to change your consents.
When we respond to freedom of information and data subject requests, the legal basis for processing your personal data is that it is necessary to comply with a legal obligation placed on us as the data controller.
When we respond to complaints you may have about Glasgow 2026 or use surveillance monitoring and provide transport services for which we process your personal data for the performance of a task carried out in the public interest.
We process any special category personal data (e.g. health data) which you may provide on our contact centre form, or which may be recorded on outbound telephone calls to you from our contact centre, or other application form, for reasons of substantial public interest.
We may need to process your personal data to provide products or services to you, either at your request, with your express consent or in order to fulfil an existing contract, or to enable us to administer any competitions or other promotions you enter into for which you may have given express or implied consent.
We may process some personal data (e.g. accident and incident reports) for the purposes of employment, social security or social protection law.
There may also be instances where we need to process your personal data when it is necessary for our legitimate interests when your personal data is not processed in the context of public tasks, (or those of a third party) and your interests and fundamental rights do not override those interests. We would rely on this basis when we are required to communicate with you further to any enquiries or contact you have made with us, that is not covered by the lawful bases described above.
How we protect your personal data
We employ comprehensive and appropriate security measures in order to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access, and any other unlawful forms of processing. We aim to ensure that the level of security and the measures adopted to protect your personal data are appropriate for the risks presented by the nature and use of your personal data. Our security measures include organisational security (passwords and access controls, staff training, information security and data protection policies), physical security (secure data centres, building security) and IT security (firewalls, encryption).
Personal data collected via the website and enquiries sent to our Stirling Office will only be processed in the UK.
Although we will always treat the information you send us with the strictest confidence, we cannot guarantee the security of the Internet. No transmission over the Internet can ever be guaranteed secure and it is possible, though very unlikely, that someone other than ourselves could access and read information sent to us in this way. If you feel concerned about this, please use another form of contact, e.g. telephone or post.
How long do we keep your personal data?
If you make a simple request for information about Glasgow 2026 or the Games, we will retain your personal data for no longer than six months. This will enable us to answer your enquiry and to deal with any further enquiries or complaints you may have relating to your initial enquiry. After six months, your personal data will be deleted.
If you register to receive communications or marketing information from us whether this be from, and about the Games, the Commonwealth Sport Foundation or from, and about, any of our Games sponsors or partners and those of Commonwealth Sport, we will retain your personal data until the end of December 2026, or until you expressly withdraw your consent for us to process your personal data. We will then ensure your personal data is deleted.
If you register to receive communications or marketing information from Commonwealth Sport and/or Commonwealth Sport Foundation, your data will be transferred to Commonwealth Sport and/or Commonwealth Sport Foundation subject to the consents which you have provided. Commonwealth Sport and/or Commonwealth Sport Foundation will retain your personal data until the end of the subsequent Commonwealth Games unless otherwise notified by Commonwealth Sport to you, or until you expressly withdraw your consent for Commonwealth Sport and/or Commonwealth Sport Foundation to process your personal data. If withdrawal of consent happens prior to 31 December 2022, we will ensure your personal data is deleted securely.
If you have made a subject access request, a freedom of information request or a complaint about Glasgow 2026 we will retain your data until the end of December 2026, after which point it will be securely deleted. Copies of identity verification documents will be destroyed immediately after we have verified your identity.
If you are registered for a competition or an event organised by or promoted by Glasgow 2026 we will retain your personal data either until the end of the competition or if directly linked to the end of the Games, until the end of December 2026, unless we have relied in your consent for the use of your personal data, in which case we will retain your data until you expressly withdraw your consent for us to process your personal data. We will then ensure your personal data is deleted securely.
We may need to process special category personal data to provide you with medical support and treatment, this will be processed for reasons of substantial public interest or vital interests.
Your data protection rights
Data protection legislation gives you rights in relation to the personal data we may hold about you. Please click on the links below to receive a more detailed explanation of each of these rights.
If you have any comments, concerns or complaints about the use of your personal data, please contact our Data Protection Officer (please refer to section “How to contact us” for contact details).
You are not normally required to pay a fee for exercising any of your rights. However, where we receive requests which are manifestly unfounded or excessive, for example because they are repetitive in nature, we may;
- Charge a reasonable fee taking into account the administration costs of providing the information or taking the action requested; or
- Refuse to act on the request.
We will respond to any rights that you exercise within a month of receiving your request, unless the request is particularly complex, in which case we will respond within three months, but we will notify you if we need to do this.
Please be aware that there are exceptions and exemptions that apply to some of the rights which we will apply in accordance with the Data Protection Legislation. More detailed information can be found on the Information Commissioner’s Office website.
Your rights in relation to the personal data we may hold about you are as follows:
The right to be informed;
We are required to tell you what data we collect about you, how it is being used, how long it will be kept and whether it will be shared with any third parties. We meet this requirement by providing you with this Privacy Notice.
The right of access to personal data;
You have the right to request a copy of the personal data that we hold about you. We must provide this free of charge, within one month. This is often referred to as a subject access request. We will provide you with:-
- Confirmation that we are processing your personal data;
- The categories of personal data;
- A copy of the personal data;
- Details of the purpose for which it is being or is to be processed;
- Details of the recipients or classes of recipients to whom it is or may be disclosed, including if they are overseas and what protections are used for those oversea transfers;
- The period for which it is held (or the criteria we use to determine how long it is held);
- Any information available about the source of that data;
- Whether we carry out any automated decision-making, or profiling, and where we do, information about the logic involved and the envisaged outcome or consequences of that decision or profiling;
- Information about your right to request rectification, erasure or restriction or to object to such processing; and
- The right to lodge a complaint with the ICO or another supervisory authority.
To help us assist you, please provide us with as much information as possible about the type of information you would like to see.
The right to rectification;
You have the right to ask us to rectify personal data that we hold about you if you think it is inaccurate. You also have the right to ask us to complete information we hold about you if you think it is incomplete. If you would like to do this, email, call or write to us (see “How to contact us“). You will need to provide us with enough information to be able to identify you. You will also need to notify us what personal data we hold about you is incorrect and what it should be replaced with.
The right to erasure (also known as the right to be forgotten);
In certain circumstances, you can ask for the personal data we hold about you to be erased from our records, where:-
- You do not believe that we need your data in order to process it for the purposes set out in this Privacy Notice;
- If you had given us consent to process your data, you withdraw that consent and we cannot otherwise legally process your data;
- You object to our processing and we do not have any legitimate interests that mean we can continue to process your data; or
- Your data has been processed unlawfully or have not been erased when it should have been.
The right to restrict or prevent your personal data being processed;
You have the right to request that we restrict the processing of your personal data in certain circumstances. You may request that we stop processing your personal data temporarily if:
- You do not think that your data is accurate. We will start processing again once we have checked whether or not it is accurate;
- The processing is unlawful but you do not want us to erase your data;
- We no longer need the personal data for our processing, but you need the data to establish, exercise or defend legal claims; or
- You have objected to processing because you believe that your interests should override our legitimate interests.
The right to data portability;
You have the right to receive personal information you have given to us in a structured, commonly used and machine-readable format. You also have the right to request that we transmit this information directly to another organisation.
The right to object;
You have the right to object to the processing of your personal data in certain circumstances. Whether it applies, depends on our purpose and lawful basis for processing your personal information.
The right to ask us to stop contacting you with direct marketing;
You can ask us to stop contacting you with marketing materials about Glasgow 2026 and/or Commonwealth Sport and/or about its/their official Games partners and sponsors and we will confirm that we have done this within a month of receiving your request. If you would like to withdraw your consent for receiving this information, please:
- Email or write to us (see "How to contact us"). Or you can also click on the 'unsubscribe' button at the bottom of our marketing emails. It may take a few business days for this action to be implemented
Rights in relation to automated decision making;
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
How to contact us
Please contact our Data Protection Officer if you have any questions about this Privacy Notice or the information we hold about you. If you wish to exercise any of your rights or if you wish to make a complaint about how we have handled your personal information, our Data Protection Officer can be contacted by email or by post at:
Data Protection Officer at:
Glasgow 2026 Limited
Airthrey Castle
University of Stirling
Stirling
Scotland
FK9 4LA
Email: dpo@glasgow2026.com
If you have made a complaint and are dissatisfied with how we have handled your complaint then you have the right to complain to the Information Commissioner’s Office (ICO). The ICO can be contacted at:
The Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113 (local rate)
Textphone service: 01625 545860)
Email: casework@ico.org.uk
Changes to this privacy notice
We regularly review and, where necessary, update our privacy information. If we plan to use personal information for a new purpose, we update our privacy information and will communicate the changes via this Privacy Notice. Please check our website occasionally to ensure you are aware of the most recent version of this notice. This privacy notice is version 1 and is effective from October 2024.
The use of our website is governed by our terms and conditions, which can be accessed here.
