Enquirer privacy policy

This privacy notice explains how we use your data in relation to your enquiry.

The University of Plymouth is registered with the Information Commissioner’s Office Z7546246 and is responsible for the use of the personal data provided to it. You may provide us with information directly but we may also receive it from third parties including but not exclusive to:

  • Cappex
  • Common App
  • GBGroup
  • Hotcourses
  • International agents
  • Postgrad.com
  • Prospects
  • ThinkPostgrad,
  • UCAS
  • Your attendance at Higher Education fairs.

This privacy notice explains how we use your data in relation to your enquiry. If you apply to become a student at the University, then you should refer to our applicant privacy policy.

What personal data will be processed?

The personal data we process will be:

The information that you provide to us when you fill in a form (for example, if you order a prospectus, register for an Open Day, meet us at a UCAS fair) such as:

  • your name and contact details,
  • your date of birth,
  • your subject(s) of interest,
  • your nationality, to determine whether you are a UK/EU or international student,
  • your domicile,
  • the start year of the subject you are interested in, and
  • your predicted and achieved academic qualification;
Our registration for and attendance at University events (such as open days); and
Records of communications sent to you by the University or that we receive from you.

Occasionally we may need to process data which is classed as ‘special category’ or sensitive personal data. We will ask you for consent to do this. This data includes data about your ethnicity, sexual orientation, religious beliefs or health/disability data.

What is the lawful basis of the processing?

The University may rely on one or multiple grounds for processing your personal data including: 

  • You have provided consent for the processing; 
  • There is a contractual commitment to provide the services and, therefore, processing is necessary to meet those contractual obligations; 
  • Where processing of certain data is in the public interest, for example, where it enables the delivery of the University’s charitable activities and the subsequent benefits to society; 
  • The information is available to the public at large; and/or 
  • The processing is necessary for the purposes of legitimate interests of the University or other third parties and does not affect the fundamental rights and freedoms of the individuals concerned.

When we use your data to compile statistics and conduct research, we usually use anonymised data from which you cannot be identified, but where that is not possible, we do so on the basis that this is necessary;

  • In the public interest; or
  • For scientific or historical research or statistical purposes; or
  • For the purposes of the University’s legitimate business interests (for example, in order to manage and develop its business).
We will only process your special category data (which is sensitive information about you) with your explicit consent or if it is necessary:
  • For the establishment, exercise or defence of legal claims;
  • Very occasionally, when it is needed to protect your or another person’s vital interests and you are not capable of giving your consent (for example, in an emergency);
  • Archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.

We will ask you to consent to have your data added to the Higher Education Access Tracker (HEAT).

When you provide your personal details for a specific enquiry, such as an open day we ask for your consent to process your personal data for marketing purposes that do not directly relate to your enquiry. You can withdraw your consent for this at any time by contacting businessdevelopment@plymouth.ac.uk.

Where we have collected your data prior to the 25 May 2018 and where we see it meets the University’s legitimate business interests we will continue to contact you regarding your enquiry. There will be an option to opt-out at any time via our online preference centre or by contacting the admissions team.

How we use your data

The University uses your data to ensure we can provide you with the best possible experience, through our marketing, communications, recruitment and analytical reporting activities. We seek to respond in an appropriate, timely, and effective way when dealing with enquiries and uses a customer relationship management (CRM) system to support this service. This means that you will not have to repeat all the details of a previous enquiry: each time you contact us we will be picking up where you left off. It also means that we can improve the information that we provide to you about our courses, services and processes in future.

The information you provide will be used to supply the information requested and, if you consent, send you further printed materials or electronic communications for the following purposes:

  • To provide you with information relating to Plymouth and the local area, and the University (including its facilities and services) to help you make an informed decision as to whether to apply to study with us;
  • To provide you with information about the subject(s) you are interested in and our services and facilities to help you make an informed decision as to whether to apply to study with us;
  • To tailor our communications and services to you based on your postcode, domicile, achieved and predicted academic qualifications as well as your subject(s) of interest;
  • To invite you to attend relevant events (such as open days);
  • To provide you with information about our visits to your city or country.
We will also process your data to fulfil and monitor our legal responsibilities, for example, under equalities, immigration and public safety legislation. In addition, we will compile statistics and conduct research in relation to enquirers, applicants and students for the purpose of planning, reviewing, managing and developing the University’s business, (but not to make any decisions about you).

If you disclosed to us that you have a disability, our Disability Services team will contact you to let you know how you can access the Learning Support, Disability and Mental Health services. You will be provided with further details about how your data will be used for this purpose at the relevant time.

We sometimes use ‘profiling’ software to help us make sure the information we send you is appropriate for you, but we do not use ‘profiling’ software to make any automated decisions about you.

We may also ask you to provide contact details for your intermediary contact (for example a parent / guardian or spouse) if we need to share information about your enquiry. You may choose to share their details with us via an online form but we will ask them to consent to receiving information from us.

Who will your personal data be shared with?

Within the University, your data is shared with only those University staff who need access for the processing purposes set out above.

Your personal data is shared as is necessary, on a considered and confidential basis, with several external organisations which assist the University with handling enquiries and student applications and with sending you information about studying here. These organisations act on our behalf in accordance with our instructions and do not process your data for any purpose over and above what we have asked them to do.

We make sure we have appropriate contracts in place with them. This includes

  • Mailing houses
  • External research agencies
  • External media agencies to send you targeted messaging via social media. If you do not wish to receive these, you can amend your settings or preferences on the relevant social media platform.
We may also share your personal information with third parties (including your school/ college, partner(s) with whom we may have collaborated to organise and/or evaluate events, the Universities and Colleges Admissions Service (UCAS), the Higher Education Statistics Agency (HESA), the Department for Education, the Higher Education Access Tracker (HEAT), any third parties managing HEAT’s database, and HEAT service subscribers and approved researchers) for the same purposes as listed above, and also for storage. Please note that only certain events/initiatives involve sharing your personal information with HEAT and related parties. These include the following:

  • The Office for Students (OFS)
  • The Universities and Colleges Admissions Service (UCAS)
  • The Higher Education Statistics Agency (HESA)
  • The National Data Service (NDS)
  • The National Pupil Database
  • The Office for Fair Access
  • The Department for Education
  • Local Authorities
  • University of Plymouth’s education partners including Further Education colleges
  • Your school, academy or college.
Sometimes your personal data is processed by these organisations outside the European Economic Area (e.g. because they use a cloud-based system with servers based outside the EEA), and if so, appropriate safeguards are in place to ensure the confidentiality and security of your personal data. We do not share your data with external organisations for marketing their products or services. We do not sell your personal data to third parties under any circumstances, or permit third parties to sell on the data we have shared with them.

Higher Education Access Tracker (HEAT) 

The Higher Education Access Tracker is a shared, central, online repository and reporting tool that has been developed collaboratively with Higher Education Institutions across the sector to provide a web-based data-capture system that tracks student engagement in widening participation outreach activities delivered by each subscriber organisation.

  • By providing your consent you are allowing the University of Plymouth to input your personal details onto the HEAT database. The personal details inputted onto the HEAT database are name, date of birth, postcode and school/college.
  • HEAT is used to create a register of attending students of school engagement activities and provide us with the opportunity to collaboratively monitor, track and evaluate our services in supporting its outreach and fair access targets. Further details of how participant data is used is available here https://heat.ac.uk/data-privacy-participants/.
  • The collaborative service will combine personal information recorded by the University of Plymouth against a number of other data sets to measure trends in applications and accepted applicants from groups of institutions and subsets of institutions. Therefore data entered onto HEAT may be shared with education funding bodies, government departments and agencies, like the Higher Education Statistics Agency (HESA), and the University and Admissions Services (UCAS).
  • We may use HEATs student profiler tool to allow us to see whether any consenting students have participated in other member outreach activities (where data is restricted to minimal details).
  • We may use HEATs postcode profiler tool to allow us to understand information regarding the area in which a student lives. The indicators include Indices of Multiple Deprivation (IMD), Income Deprivation Affecting Children Index (IDACI) and participation of local areas (POLAR) measuring the proportion of the young population that participate in higher education. This is also alongside information regarding whether a student’s postcode is part of a local ward with support through the National Collaborative Outreach Network.
  • We may use some of the data in research, reports and publications anonymously – we will never publish personal details or write it in a way that an individual can be identified.
  • Data on HEAT of individuals we first work with under the age of 21 years old will be kept until they are 30 years old and for those over 21, information will be kept for 10 years. If they enter university within this time, the data will be kept for 15 years after graduation.

How long is your data kept by the University?

If you do not apply to study with us, any data you provide to us as an enquirer is kept for 2 years after your indicated year of entry in line with our Records Retention Schedule. If you go on to make an application to the University of Plymouth, your enquiry data will be kept in line with our applicant privacy notice which you can see on our website here. We will also draw this to your attention when you apply.


Your rights in relation to your data

If you choose to receive further information from the University of Plymouth, you may change your mind at any time by writing to us or emailing us using the following contact details:

Telephone: + (44) 01752 585858
Email: businessdevelopment@plymouth.ac.uk

Mailing address:
Student Recruitment and Admissions
University of Plymouth
Drake Circus
Plymouth
PL4 8AA

You will also be able to update how you hear from us via an online preference centre. You will find a link to your online preference centre in every email communication we send to you.

You have the following rights in relation to your personal data:

  • The right to request your personal data is rectified if inaccurate
  • The right to request erasure of your personal data
  • The right to request that the processing of your personal data is restricted
  • The right of portability in relation to your personal data
  • The right to object to the processing of your personal data
  • The right to object to processing which involves automated decision making or profiling.
For enquiries about Subject Access Requests or if you have a Data Protection query or complaint, please email dpo@plymouth.ac.uk. You also have the right to lodge a complaint about the processing of your personal data with the Information Commissioner’s Office.

This document is effective from 25 May 2018. It is reviewed when necessary and updated on this page.

This document was last reviewed August 2019.

Enquirer Privacy Policy PDF