Privacy refers to information we obtain about you and the use we make of it in the course of our business. We also have a Security Statement that describes how sensitive information is kept safe and secure.
If you don't find your concern addressed here, feel free to contact us by e-mail us using the feedback form on this site.
One of the basic principles we've followed in designing this website is that we ask for only the information we need to provide the service you've requested. As a result, the answer to this question depends almost entirely on how you choose to make use of our websites and the growing list of website services.
Currently website customers provide information in order to take advantage of the following services:
Purchases: Name, address, phone, e-mail, photo ID card and credit card information are necessary for purchase and delivery. Please note that credit card information is not stored beyond the period of transaction.
Promotional Offers: To supply this to you we need contact details. To make purchases we need the information identified above.Our licence requires us to maintain a record of all season ticket holders.
NB No other organisation is given access to your information.
IP address information that we collect is not used to personally identify you and instead is aggregated to measure the number of visits, average time spent on the Site, pages viewed, etc. We use this information to measure the use of our Site and to improve its content.
When other personal information, such as your name and e-mail address, is collected from you with your consent (for example, through the use of on-line forms or via e-mail etc.) we generally let you know at the time of collection how we will use that personal information. We may also use the personal information you provide or which we collect via this Site for the purposes of:
Except with your permission or as provided herein, First ScotRail will not sell, trade or rent personal information about you to unaffiliated third parties.
We may also use and disclose information in aggregate (so that no individuals are identified) for marketing and strategic development purposes or use and analyse the information we collect so that we can administer, support, improve and develop our business.
In particular, we may use your information to contact you for your views on our services and to notify you occasionally about important changes or developments to the Site or our services. Further we might also use your information to contact you by post, telephone, fax, SMS or by e-mail (where you have consented to us doing so) to let you know about other products and services:
If you change your mind about being contacted in the future, please let us know.
By using the Site you consent to us using your personal information for the purposes described above.
Our website (www.scotrail.co.uk) uses cookies. These are small text files that are stored on your computer or handheld device in order to make sure this site’s as easy to use as possible and give you an enhanced browsing experience. With the information these files provide us with, we can keep improving our website content, appearance and how it works in general.
What cookies do we use?
Strictly Necessary Cookies
These cookies are essential to the website and are required in order for the website to operate. They support features such as;
Performance Cookies
These cookies aren’t essential – but the anonymous information they provide us with is really helpful. We use these cookies to;
Targeting or Advertising Cookies
These cookies are used to determine and deliver adverts that are more relevant to you. These cookies collect information about users browsing habits. They’re typically placed by advertising networks and are shared with other organisations and advertisers.
If you’d like to change your Cookies settings…
Here’s how to change your settings if you want to;
Check the 'Help' function of your browser to determine how to update your cookie settings. If you are having difficulty there, we recommend the website: http://www.aboutcookies.org/default.aspx. It contains a step-by-step guide explaining how to update your cookies settings on most web browsers.
Please note that, in a few cases, switching off or deleting cookies may reduce the functionality of or prevent access to certain websites (including this website.)
More information
For specific information on our website and how it uses cookies, we’ve included the following table.
| Name | Expires |
| The session ID | Immediately |
| has_js | session |
| Name | Expires |
| The session ID | Immediately |
| has_js | session |
| Name | Expires |
| The session ID | Immediately |
| has_js | session |
| Name | Expires |
| __stid | Now + 1 year |
| __uset | Now + 3 hours |
| __utma | Now + 2 Years |
| _umtb | Now + 30 minutes |
| _umtz | Now + 6 months |
Booking engine
Classification: Functionality and Performance cookies
| Name | Details | Expiry |
| sess_track | This session cookie identifies the user to the website using a unique randomly generated id. Once the user leaves the website the session ends. | Session |
| WebTisPersonalisation | This cookie stores a unique token that can be used across the website to enable personalisation. | Session or 1st Jan 2100 if the user selects: "Remember me" |
| WebTisToken | A unique token that can be used by web pages not included inside the online booking engine to enable the personalisation of those web pages. Is only present when the user is logged in. | Session |
| WebTisLogin | This cookie indicates whether a user is logged in or not as well as storing items from the shopping basket. | Session |
| perm_track | This cookie is a unique randomly generated id that links the website users' actions across their website visits (sessions). Primarily this is used for fraud detection although it is also used for analytics. | 1st Jan 2100 |
| ASP.NET_SessionID | A token generated by the webserver that powers the website this value is used to recognise the user and link their session data to their website usage. The website cannot function without this cookie. | Session |
| SecureToken | Used by SSL this randomly generated ID allows session validation in the secure areas of the website. Purchases cannot be made without this cookie. | Session |
| Google Analytics cookies: _utma, _utmb, _utmc, _utmz | These cookies allow us to count page visits and traffic sources so we can measure and improve the performance of our site, using a service provided by Google Analytics. For more information about Google's privacy policy, please use this link:http://www.google.com/intl/en/policies/privacy. | |
| WebTrends cookies (1st and 3rd party) | ||
| WT_FPC | Allows us to track website usage and general user behaviour. This cookies stores the date and time the cookie was created, the last visit, and the start of the most recent session. | 10 years |
| ACOOKIE | This cookie is used to track general website usage to facilitate site improvements | 2 years |
| Name | Expires |
| rsi_segs | Now + 13 Months |
| JSESSIONID | End of session |
| __utma | Now + 2 Years |
| _umtb | Now +30 Minutes |
| _umtz | Now + 6 Months |
The information you provide to us will be held on our server in the United Kingdom and may be accessed by or given to our staff and to third parties including our group companies and business partners (such as our web agency, database management company and, government bodies and law enforcement agencies, successors in title to our business and suppliers we engage to process data on our behalf, who act for us for the purposes set out in this policy or for other purposes approved by you. Those parties process information, fulfil and deliver orders, process credit card payments and provide support and other services on our behalf. We may also:
Countries outside the European Economic Area do not always have strong data protection laws. However, we will always take steps to ensure that your information is used by third parties in accordance with this policy.
Unless required to do so by law, we will not otherwise share, sell or distribute any of the information you provide to us without your consent.
Our Site may contain links to other websites which are outside our control and are not covered by this Privacy Policy. If you access other websites using the links provided, the operators of these websites may collect information from you which will be used by them in accordance with their privacy policy, which may differ from ours.
We will retain your information for a reasonable period or as long as the law requires. In accordance with the UK's Data Protection Act 1998, we employ strict physical, electronic, and administrative security measures to protect your information from access by unauthorised persons and against unlawful processing, accidental loss, destruction and damage both on-line and off-line.
Given that the Internet is a global environment, using the Internet to collect and process personal information necessarily involves the transmission of data on an international basis. Therefore by browsing this Site and communicating electronically with us, you acknowledge and agree to our processing of personal information in this way.
Whereas First ScotRail employs reasonable measures to protect against viruses and other harmful components, the nature of the internet is such that it is impossible to ensure that your access to the Site will be uninterrupted or error-free, or that this Site, its servers or emails which may be sent by us are free of viruses or other harmful components.
The contents of this Site are designed to comply with the general obligations of the European Directives on Data Protection and E-Privacy. We cannot be responsible for non-compliance with any local advertising or other laws in relation to this Site or its contents.
Under the Data Protection Act 1998, you are entitled to see the personal information we hold about you and you may ask us to make any necessary changes to ensure that it is accurate and kept up to date . If you wish to correct or update the personal information that you have provided to us of if you choose to opt out of any communications that you may have initially agreed to receive, please contact us by e-mail on scotrailcustomer.relations@firstgroup.com using the contact details provided at the Contact Us. We are entitled by law to charge a small administrative fee to meet our costs in providing you with details of the information we hold about you and we may require proof of your identity before we supply the information to you.
If you have any comments, queries or requests relating to our use of your personal information or any questions about this privacy policy, please contact us [using the details provided on the Contact Us page]. We welcome your questions and any suggestions you may have about our Privacy Policy.
Copyright First 2000.