About this document
This Privacy Policy explains how we process your personal data and your rights in relation to the personal data we hold.
For the purposes of any applicable data protection laws in England and Wales, including the Data Protection Act 2018 (DPA) the UK General Data Protection Regulation (UK GDPR) and General Data Protection Regulation EU 2016/679 (EU GDPR), the University is the data controller of your personal data.
If you wish to contact us in relation to your personal data, or to exercise your rights, please contact us at the email address at the end of this policy.
How your personal data is collected
We collect your personal data when you register to use the portal. If we are issuing awards, publishing electronic documents or providing you with Digital Badges, we may also display in the portal personal data that we have previously collected for you and for which we have previously obtained your consent.
What categories of personal data are collected?
We collect the following categories of personal data:
Students/Learners/Graduates/Alumni:
Identification and contact details
- biographical information such as your name, salutation, title, date of birth and age
- your image and likeness (as captured in a photograph);
- your contact details including address, email address and phone number;
Student life and academic
- the courses you have completed, dates of study, examination results and attendance record. We will also keep records relating to assessments of your work, details of examinations taken
- records of communications sent to you by the University or received from you
Online and transactional
- details of your IP address, browser type and operating system when you visit our website.
- details of financial transactions e.g. for products and services we have provided.
All Other User Types
Identification and contact details
- biographical information such as your name, salutation, title, and company / organisation.
- your image and likeness (as captured in a photograph) if you choose to provide it.
- your contact details including address, email address and phone number;
Online and transactional
- details of your IP address, browser type and operating system when you visit our website.
- details of financial transactions e.g. for products and services we have provided. Please note that credit card and bank account details are NOT stored.
The basis for processing your data, how we use that data and with whom we share it
We will process your personal data either in ways you have consented to, or because it is otherwise necessary for a lawful purpose. We set these out as follows:
As part of the contractual relationship between you and us
In this respect we use your personal data for the following purposes:
- third party users when you have opted in for third party search, this is used for requesting to view/share your records
Where you have consented
Your personal data will also be processed by us where we have your consent.
Where applicable, consent will always be specific and informed on your part, and the consequences of consenting or not, or of withdrawing consent, will be made clear.
International transfers of data (Students/Learners/Graduates/Alumni only)
In limited circumstances we may disclose personal data to third parties, or allow personal data to be stored or handled, in countries outside the UK. For example, we will transfer data to:
- partner institutions or organisations where you undertake, or plan to undertake, a placement or exchange programme as part of your studies
Your rights under the Data Protection Legislation
Under data protection legislation you have the following rights:
- To obtain access to, and copies of, the personal data we hold about you.
- To require that we cease processing your personal data if the processing is causing you damage or distress;
- To require us not to send you marketing communications.
- To request that we erase your personal data;
- To request that we restrict our data processing activities in relation to your personal data;
- To receive from us the personal data we hold about you, which you have provided to us, in a reasonable format specified by you, including for the purpose of transmitting that personal data to another data controller; and
- To require us to correct the personal data we hold about you if it is incorrect.
Please note that the above rights are not absolute, and requests may be refused where exceptions apply.
If you have any questions about these rights or how your personal data is used by us, you can contact us via the Data Protection Enquiries email address set out below.
If you are not satisfied with how your personal data is used by the University you can make a complaint to the Information Commissioner.
Data Protection Enquiries: [email address]