Home / About Us / Corporate Information / Data Protection / Privacy Notices - Student
Please see below for UCLan’s student privacy notices.
For more details please contact the Information Governance Manager
This privacy notice tells you what to expect us to do with your personal information when you enrol at UCLan and become a student. Personal information (or personal data) is any information which relates to and identifies you. Data protection legislation (the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA)) set out how we should handle your personal information.
The University of Central Lancashire Higher Education Corporation is the data controller for the personal information we process, unless otherwise stated. We are registered with the Information Commissioner’s Office and our registration number is Z5512420.
There are many ways you can contact us, including by phone, email, social media and post. View our main contact details.
UCLan’s Data Protection Officer is the Information Governance Manager, who can be contacted on DPFOIA@uclan.ac.uk. View further information and contact details.
The University uses information you provided on your UCAS application form or other type of application form, as well as any supporting documents, references or records from interviews obtained as part of the admissions process. We may also use information provided to us by your college or other education provider if it runs courses designed to help you progress to a UCLan course. We also collect and use information you provide during enrolment, including information about any disabilities or long-term health conditions you inform us about. As you progress through your course, we will collect and use a variety of other information to assist you with your studies, maintain records about your studies and academic achievements, student finance and about your use of the academic and non-academic facilities and services that we offer. Most of this information is usually collected from you directly during your time at UCLan.
Students studying at partner institutions
If you are studying at one of our partner institutions in the UK or overseas, you will usually enrol at UCLan and at your partner institution. Your partner institution will deliver your course and keep records about you. UCLan will also keep some records about you as outlined in this privacy notice because we are the awarding body for your course. UCLan receives information about you from your partner institution during the application process to enable you to enrol and so that we can provide IT and other facilities and services to you, where appropriate. We also receive information throughout your course to enable us to monitor your progress and for internal and statutory reporting purposes. If you declare a disability to your partner institution, they will inform us of this for such monitoring and reporting purposes. We may also receive information about complaints and disciplinary matters, as appropriate.
Students studying on the AUC UK Track
If you are studying the Postgraduate Diploma in International Medical Sciences as part of the AUC UK Track, you will be enrolled at UCLan and AUC at the same time.. UCLan will use the information you provided to AUC in your application form, as well as the information you provide to us directly when you enrol, for the purposes set out in this notice.
Once you enrol, we use information about you for a variety of purposes. The main purposes are set out below. Depending on the nature of your course or use of University facilities, there may be additional reasons why we use your information which are specific to your course, school or service we offer. You will be informed about these locally as appropriate.
For the administration of your studies
We use your information to deliver and administer all aspects of your education (including any placements with external providers), including for identity verification and visa/immigration checks; teaching, assessment and quality assurance purposes; considering and approving academic progression and managing academic appeals; managing resits; considering any applications for extenuating circumstances; and determining and confirming awards. Where relevant e.g. for PhD students, we monitor, evaluate and support your research activity. We also maintain records of your studies and academic achievements. To provide an enhanced student experience, we may use software to analyse the information we hold about you within a number of different systems to create a profile of your engagement and academic achievements throughout your course. This profile helps us to identify if you may benefit from additional support. In any such instances, staff supporting your studies may contact you to discuss any additional support we can offer.
Financial administration
We will use your information, as provided by you or by funding bodies, to administer all financial aspects of your relationship with us and any funders, where relevant. This includes managing and collecting payments for course fees, accommodation, car parking, fines, bursaries and other support allowances, as well as for debt recovery purposes in the event money is owed to the University. We may use external debt collection agencies for this purpose.
Operation of the University’s regulations, procedures and codes of practice
We will use information about you if you make, or are the subject of, a complaint or allegation involving another student, member of staff or external party under any of the University’s rules, regulations, procedures or codes of practice. Information will be used to investigate complaints or allegations, manage the outcomes and put in place any remedies, including additional support or disciplinary measures. This includes investigating cases where the use of unfair means is suspected (which includes suspected plagiarism, cheating or collusion) and fitness to practise cases (where this is relevant to your course).
Security and crime prevention
The University operates a CCTV system for security and crime prevention purposes. This covers University buildings (inside and outside) and public areas across the main campus. Your images are likely to be captured by the CCTV system while you are on, in, or near University premises. CCTV footage will be used to maintain the security of the University community, enhance public safety, prevent and detect crime and apprehend and prosecute offenders. CCTV footage may be used, where there is a lawful basis, in the investigation of complaints and allegations made under the University’s rules, regulations, procedures and codes of practice.
The University may also use your information to carry out welfare checks, maintain a safe environment around the University campus and University accommodation and investigate complaints or concerns.
Some buildings, such as the Library, have security access controls and collect data from your student card to show when you enter and leave.
Delivery of facilities and services
We will use your information to provide you with services and facilities such as an IT service, library, accommodation, parking permits, sports centre, clubs and societies (via the Students’ Union) and a careers service. All students and graduates are automatically eligible to receive ongoing support from the Careers Service. The Careers Service uses your information to provide specialist careers advice, mentoring, help with CV preparation and advertising and informing you of job vacancies.
Provision of a student wellbeing service
The University offers a variety of support to students via its Student Services team. Student Services uses your information to provide wellbeing support, including counselling and mental health support. It also provides a disability support service. If you declare a disability during the enrolment process or at any other time, unless you are solely studying at one of our partner institutions, the information will be passed to the Inclusive Support Team who will contact you to discuss your support needs and any reasonable adjustments which may need to be put in place. The team will discuss with you how we might need to share your information to put reasonable adjustments in place and you will be given the option to say that you want information about your disability to remain confidential.
Communicating with you
We will use your information to communicate effectively with you via email, post, telephone, text (SMS), social media or other methods, as appropriate. We will send you messages about a variety of things such as the administration of your course, timetable changes and events and activities happening at the University. If you are studying at a partner institution, we will also send you updates about our partnership and the status of your programme. We will keep you informed of important updates using newsletters, circulars or other methods. We may also send you messages about University services and facilities. If you are an Initial Teacher Education student, we will contact you about continuing professional development as a newly-qualified teacher. You can opt out of receiving communications which are considered to be marketing by contacting the Academic Registry: AskAcademicRegistry@uclan.ac.uk. Only some of the communications we send are marketing.
Research, reporting and statistics
We will use your information to compile statistics and for research, surveys and market research to help with corporate planning, reporting and University administration, as well as for statutory reporting purposes to external agencies, where required.
Monitoring and compliance
We will use your information to ensure and monitor our compliance with legislation including laws relating to equality, health and safety and immigration. We will also use your information to monitor our compliance with regulatory requirements set by external agencies.
Providing an alumni service
When you graduate, you automatically become an alumnus and will be provided with information about the University’s alumni service. We will use information about you to offer you an alumni service, which includes keeping you informed of University news, publications and events, career opportunities, academic and professional development opportunities and much more. Further information is available in the Alumni Privacy Notice. You can opt out of receiving communications from the alumni service at any time by contacting the Alumni team.
The University relies on the following lawful bases from the GDPR to process information about you for the purposes set out in this notice:
Article 6(1)(b), which allows us to process personal data when it is necessary for the performance of a contract. You enter into a contract with us when you accept an offer of a place (the student contract). Under your student contract, we deliver and administer your studies, administer finances, operate the University’s regulations, rules, procedures and codes of conduct, communicate with you and deliver facilities and services, among other things. We require you to provide any information we reasonably request for these purposes otherwise we cannot deliver your student contract. If you are studying on the AUC UK Track, we also rely on this lawful basis to share information with AUC for the performance of your student contract with AUC.
Article 6(1)(c), which allows us to process personal data when it is necessary to comply with a legal obligation. We are legally required to provide some reports and statistics to external agencies, as well as monitoring compliance with laws relating to immigration (e.g. visas) and equality, among other things.
Article 6(1)(e), which allows us to process personal data where it is necessary to perform a task in the public interest. Some internal reporting and monitoring; teaching and research; auditing; and the provision of student support; is carried out as part of our tasks in the public interest
Article 6(1)(f), which allows us to process personal data where it is in our, or someone else’s, legitimate interests to do so and it does not unduly prejudice your rights and freedoms. We rely on this condition to, among other things:
We also process some information only if you provide your consent. In this case, Article 6(1)(a) applies, and Article 9(2)(a) applies where the information is special category data (special category data is information about your race, ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data used for ID purposes, health, sex life or sexual orientation). It will be clear where we are relying on your consent to collect and use your information because consent will be requested at the time you provide the information. When you are asked for consent, we will explain why we are asking for the information and how we will use it if you choose to provide it. Consent can be withdrawn at any time and we will explain how you can do this in each individual case.
Where we process special category data and data about criminal convictions for the purposes set out in this notice, we rely on the following additional lawful bases from the GDPR and DPA:
Article 9(2)(g) GDPR, which allows us to process special category data if the processing is necessary in the substantial public interest and there is a basis to do so in law. The law which allows us to rely on this basis is section 10 DPA by virtue of Schedule 1 DPA, which also provides the lawful basis for processing data about criminal convictions. Further information about the lawful bases from Schedule 1 DPA on which we rely to process these types of personal data can be found in the policy Data Protection: Processing special category data and criminal convictions data.
Article 9(2)(j) GDPR, which allows us to process special category data for archiving, scientific or historical research purposes or statistical purposes, where there is a basis to do so in law. The law which allows us to rely on this basis is section 10 DPA by virtue of Schedule 1(4) DPA.
We share your information with a range of external organisations and bodies, some of which are processing personal data on our behalf. We only share your personal data with another person or organisation where the law allows us to and we consider it to be appropriate under the circumstances. The external parties we may share information with include the following:
Occasionally we may need to send your personal information outside the European Economic Area (EEA) e.g. to enable you to participate in an exchange visit or field trip; so that we can report to an overseas funding provider; to communicate with our partner institutions; or obtain a service from a data processor. If you are an international student, where required we will also confirm your degree results to the government in your home country to enable your degree to be recognised e.g. to the CSCSE in China. These transfers are usually carried out with your consent or because they are necessary for us to deliver your student contract. All transfers are carried out with appropriate safeguards in place to protect your information and ensure it remains secure. For example, we share information with Turnitin (as described in the previous section) on the basis that Turnitin complies with the EU-US Privacy Shield. We also share information on the basis of the EU standard contractual clauses (controller-controller version) e.g. when we share information with our international agents. A copy of these standard contractual clauses can be obtained from UCLan on request.
If you are studying on the AUC UK Track, we will share your information with AUC, based in the USA. Any transfer of personal data to AUC is carried out on the basis of the EU standard contractual clauses (controller-controller version), a copy of which can be obtained from UCLan or AUC on request.
We will maintain your full student record for six years following your graduation. If you are studying on certain courses, we are legally required to keep your information for longer than this. You will be informed if you are on such a course.
Six years after you graduate, the majority of your information will be deleted but we will keep indefinitely information which is necessary to confirm that you studied here and the qualification and grade you obtained. If you are part of our Alumni Network, we will retain additional information.
Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information. Further information about each of these rights can be found on the Information Commissioner’s Office website.
Your right of access
You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process. For further information or to make a request, please see our website.
Your right to rectification
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
Your right to erasure
You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing
You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing
You have the right to object to any processing we carry out, if we carry it out on the basis that it forms part of our public task or is in our legitimate interests. You also have the right to object to your personal information being used for direct marketing purposes.
Your right to data portability
This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information because we have your consent or because it is necessary for your student contract, and the processing is automated.
We work to high standards when it comes to processing your personal information. If you have queries or concerns, please contact the relevant part of the University, or the Information Governance Manager, and we will respond.
If you remain dissatisfied, you can make a complaint about the way we process your personal information to the Information Commissioner’s Office, which is the UK supervisory authority for data protection. Further information can be found on the data protection pages of our website.