Student privacy notice
Information you need to know:
Liverpool John Moores University (LJMU) needs to obtain and process a range of information about its students in order to exercise its responsibilities and fulfils its education, training and support obligations to you and to carry out other essential university activities.
LJMU is the Data Controller.
Our Data Protection Officer can be contacted at DPO@ljmu.ac.uk
LJMU takes your privacy very seriously. This privacy notice explains how we use your personal information and your rights regarding that information. We are committed to being transparent about how we collect and use your data and to meeting our data protection obligations.
What information are we collecting?
We collect a range of information about you - for recruitment, enrolment and admission, to deliver and administer your education and to support you through your student journey.
We will hold your application, your funding arrangements, details of your program of study and academic achievement.
As you progress through your course, we will collect attendance, supervisory, assessment and graduation information about you.
When you engage with University services, we will collect details necessary to provide that service to you e.g. for advise and wellbeing support, pastoral services.
We will also collect information so that we can comply with our health and safety and management duties as well as for research, statistical and archival purposes.
In all cases, we will hold your name, contact details, date of birth, nationality and immigration status, contact details and emergency contact details.
This list is not exhaustive and you will be given specific information when using a particular service e.g. using counselling services or where we need to tell you about something that is not already covered elsewhere. More information can be found in your Student Handbook
Please do not hesitate to ask us about any specific circumstances where your data has been collected.
Why are we collecting your data and what is the legal basis for this?
We need to collect personal data from you for several reasons. For example, we need to keep proper records, provide support and guidance, to monitor your attendance and academic progress and provide appropriate learning and teaching support.
We hold financial, sponsorship and fees data so that we can invoice you correctly and record payments.
We collect information about your health and disability so that we can properly support you during your time at the University.
We will use your data to keep in touch with you after graduation and for alumni relations.
We also need to collect date so that we can run the business and activities of the University and in order to fulfil our legal obligations.
At all times we will do so in compliance with the principles of the General Data Protection Regulation (GDPR) and for one of the legal basis set out in Article 6 of the Regulation.
In some cases, we will use your personal data because it is necessary to fulfil our contract with you or where we have a legal obligation to so do.
In other cases, we will use your data to perform the tasks we carry out in the public interest such as the provision of higher education and research.
Sometimes we will use your data on the basis of our legitimate interests. Where we do this we will only do so because we believe our interests are not overridden by any harm to your data protection rights.
In other cases we may feel it is appropriate to only use your personal data with your full consent. Where we do this you will be given full details of what you are consenting to and how you can withdraw that consent.
Who has access to this data?
Your personal data will only be processed by relevant LJMU staff where the data is necessary for them to undertake their designated role.
Examples of relevant staff may include:
- Your Academic Tutor
- Academic Registry staff and Administrators in your facility
- Student Advice and Wellbeing
- Student Governance
- Alumni Services and other teams that you engage with.
We may also be required to share your information with some external parties.
Examples of external parties include:
- Local Authorities (e.g. council tax and other benefit purposes, including fraudulent claims).
- Relevant government departments and other public bodies to which the University has a statutory obligation to release information including the Student Loan Company, funding councils and the Quality Assurance Agency (QAA).
- The Higher Education Statistics Agency (HESA). Details on how HESA processes your personal data are set out in the HESA Student Data Collection Notice.
- Police when they make a valid request
- Providers of software we use or organisers of events for a strict purpose
- As a Tier 4 licensed sponsor, we may be required to give information to the UK Visas and Immigration Agency (UKVI) about students with visas to study. Our sponsorship duties include informing the UKVI if a student fails to register, withdraws, or fails to attend classes and hand in work.
- External examiners and assessors
- Student Union in order to facilitate your membership of this and associated clubs and societies.
We will not share your data with parents without your consent other than in very serious emergency circumstances.
How does the University protect your data?
The University takes data protection very seriously. The information we collect is stored safely and securely and processed in accordance with GDPR.
Your personal data will be handled in line with the University’s Data Protection and Information Security Policies.
For how long does the University keep your data?
Your personal data will only be kept as long as necessary.
Our Records Retention Schedule contains details of each types of record held across the organisation, who has responsibility for them and how long they should be held for.
As a data subject, you have a number of rights. You can:
- Access and obtain a copy of your data on request
- Ask the University to correct inaccurate or incomplete data
- Ask the University to delete or stop processing your data, for example where the data is no longer necessary or legally required for the purposes of processing
- To object to processing where we are relying on a legitimate interest
- To request transfer of your data to another party
- If your personal data has been provided by consent, you have a right to withdraw that consent at any time.
If you would like to exercise any of these rights, please contact the Data Protection Officer DPO@ljmu.ac.uk
What if you do not provide data?
We do require certain information from you to enable us to provide you with an education. You will engage with some of our teams on an optional basis, such as Student Advice and Wellbeing and Alumni Services. These teams will only be able to assist you or keep you informed if you choose to provide your information to them.
Transfers of data outside the EAA
Generally, we do not send your personal data outside the European Economic Area. Where we transfer the personal information we collect about you to countries outside the EU in order to perform our contract with you/or a contract with another organisation that requires your personal data i.e. a collaboration agreement with a University based outside of the EU. We ensure that your personal information does receive an adequate level of protection and we have put in place the following appropriate measures to ensure that your personal information is treated by those third parties in a way that is consistent with and which respects the EU and UK laws on data protection, for example model contractual clauses, data sharing/data processing agreement and binding corporate rules (where applicable).
Automated decision making
We will not make any decisions about you automatically using a computer, based on your personal data. All decisions affecting you will be taken by a human.
How to complain to the Information Commissioner’s Office?
You have the right to complain to The Information Commissioner if you believe that our processing of your personal data does not meet our data protection obligations. The Information Commissioner can be contacted:
Post: Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK95AF.
Telephone: 0303 123 1113.
Email: contact can be made by accessing www.ico.org.uk