Close of of a student holding a pen in their hand while studying at a PC

Student privacy notice

Information you need to know:

Liverpool John Moores University (LJMU) needs to obtain and process a range of information about its students in order to exercise its responsibilities and fulfils its education, training and support obligations to you and to carry out other essential university activities.

LJMU is the Data Controller.

Our Data Protection Officer can be contacted at

LJMU takes your privacy very seriously.  This privacy notice explains how we use your personal information and your rights regarding that information. We are committed to being transparent about how we collect and use your data and to meeting our data protection obligations.

What information are we collecting?

We collect a range of information about you - for recruitment, enrolment and admission, to deliver and administer your education and to support you through your student journey.

We will hold your application, your funding arrangements, details of your program of study and academic achievement.

As you progress through your course, we will collect attendance, supervisory, assessment and graduation information about you.

When you engage with University services, we will collect details necessary to provide that service to you e.g. for advise and wellbeing support, pastoral services.

We will also collect information so that we can comply with our health and safety and management duties as well as for research, statistical and archival purposes.

In all cases, we will hold your name, contact details, date of birth, nationality and immigration status, contact details and emergency contact details.

This list is not exhaustive and you will be given specific information when using a particular service e.g. using counselling services or where we need to tell you about something that is not already covered elsewhere.  More information can be found in your Student Handbook

Please do not hesitate to ask us about any specific circumstances where your data has been collected.

Why are we collecting your data and what is the legal basis for this?

We need to collect personal data from you for several reasons. For example, we need to keep proper records, provide support and guidance, to monitor your attendance and academic progress and provide appropriate learning and teaching support.

We hold financial, sponsorship and fees data so that we can invoice you correctly and record payments.

We collect information about your health and disability so that we can properly support you during your time at the University.

We will use your data to keep in touch with you after graduation and for alumni relations.

We also need to collect date so that we can run the business and activities of the University and in order to fulfil our legal obligations.

At all times we will do so in compliance with the principles of the General Data Protection Regulation (GDPR) and for one of the legal basis set out in Article 6 of the Regulation.

In some cases, we will use your personal data because it is necessary to fulfil our contract with you or where we have a legal obligation to so do.

In other cases, we will use your data to perform the tasks we carry out in the public interest such as the provision of higher education and research.

Sometimes we will use your data on the basis of our legitimate interests. Where we do this we will only do so because we believe our interests are not overridden by any harm to your data protection rights.

In other cases we may feel it is appropriate to only use your personal data with your full consent. Where we do this you will be given full details of what you are consenting to and how you can withdraw that consent.

Who has access to this data?

Your information will only be accessed by Liverpool John Moores University Student Recruitment and Admissions staff, academics, authorised student ambassadors and service colleagues in other departments where an enquiry has been forwarded for a response.

Your data may also be shared with the following services in order to communicate with you about events and activities that we think you might find of interest:

  • Our Admissions service
  • Our Academic departments
  • Our Professional Services departments
  • Providers of our managed print services

We will not normally pass your personal data any other third parties without your consent unless required to do so by law or in response to a request for assistance from law enforcement bodies such as the Police, or the Student Loans Company in their capacity of detecting fraud.

We are required by law to share the data of current students with HESA (Higher Education Statistics Agency) for statistical reporting.

Details on how HESA processes your personal data are set out in the HESA Student Data Collection Notice.

How does the University protect your data?

The University takes data protection very seriously. The information we collect is stored safely and securely and processed in accordance with GDPR.

Your personal data will be handled in line with the University’s Data Protection and Information Security Policies.

For how long does the University keep your data?

Your personal data will only be kept as long as necessary.

Our Records Retention Schedule contains details of each types of record held across the organisation, who has responsibility for them and how long they should be held for.

Your rights

As a data subject, you have a number of rights. You can:

  • Access and obtain a copy of your data on request
  • Ask the University to correct inaccurate or incomplete data 
  • Ask the University to delete or stop processing your data, for example where the data is no longer necessary or legally required for the purposes of processing
  • To object to processing where we are relying on a legitimate interest
  • To request transfer of your data to another party
  • If your personal data has been provided by consent, you have a right to withdraw that consent at any time. 

If you would like to exercise any of these rights, please contact the Data Protection Officer

What if you do not provide data?

We do require certain information from you to enable us to provide you with an education. You will engage with some of our teams on an optional basis, such as Student Advice and Wellbeing and Alumni Services. These teams will only be able to assist you or keep you informed if you choose to provide your information to them.

Transfers of data outside the UK

Generally, we do not send your personal data outside the UK. However, in some specific cases we may transfer the personal data we collect to countries outside the UK in order to perform our contract with you/or a contract with another organisation that requires your personal data i.e. a collaboration agreement with a university based outside of the UK. Where we do this, we will ensure that your personal information is protected by way of an ‘adequacy regulation’ with the UK or by putting alternative appropriate measures in place to ensure that your personal information is treated by those third parties in a way that is consistent with and which respects the UK laws on data protection. For example model contractual clauses, data sharing/data processing agreement and binding corporate rules (where applicable).

Automated decision making

We will not make any decisions about you automatically using a computer, based on your personal data. All decisions affecting you will be taken by a human.

How to complain to the Information Commissioner’s Office?

You have the right to complain to The Information Commissioner if you believe that our processing of your personal data does not meet our data protection obligations.  The Information Commissioner can be contacted:

Post: Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK95AF.
Telephone:  0303 123 1113.
Email: contact can be made by accessing