What information is collected and shared

To set up your Scratch Less account, the University of Nottingham shares your name, email address, study ID and age group (8-12 years or 13+ years) with We Create Digital. We Create Digital acts as a data processor for the study and hosts the Scratch Less website.

We Create Digital uses this information to create your user account so you can access the online programme. They keep this information for up to 12 months after the end of the study.

Data about how the programme is used, such as the dates you access it, is processed by We Create Digital and shared with the study team at the University of Nottingham.

We Create Digital also shares limited information with a third-party email provider, Mailgun, to send you reminders to complete the programme. You can read more about Mailgun’s privacy practices here: https://www.mailgun.com/legal/privacy-policy/

The Scratch Less website uses two essential cookies that are needed for the site to work properly:

XSRF-TOKEN

This cookie helps keep the site secure by making sure any forms or actions you submit are coming from your browser. It stores a small security token and does not contain personal information. Without it, some features may not work correctly.

scratch-less-session

This cookie helps the site remember you as you move between pages, such as whether you are logged in. It contains a simple session ID and no personal details. Without it, the site may forget your activity or log you out unexpectedly.

How your information is used

Your information is used to:

• create and manage your Scratch Less account
• allow you to access and use the online programme
• understand how the programme is being used as part of the study
• send reminder emails to help you complete the programme

Your Scratching Tracker Diary is private. What you record is for you to view and learn from.

We Create Digital can access your diary entries to keep the service running smoothly, but they will not share what you write with anyone else. They will only let the study team know whether the tracker has been used, not what has been recorded in it.

How your information is protected and stored

We Create Digital keeps your information secure and processes all data in line with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Your personal information is stored only for as long as needed and no longer than 12 months after the end of the study.

Full details about how your data is used as part of the Scratch Less study can be found in the patient information sheet: [add link once it exists]