What we need
UAL Short Courses Ltd is the ‘Data Controller’ of the personal data that you provide to us. We are required to collect basic personal data about you including name, salutation, address, telephone, email, nationality, date of birth, next of kin and passport information if you’re travelling from overseas. We will also create personal data in relation to your participation in the course, such as tuition notes, marking, attendance records etc.
Why we need it
We need to know your personal data in order to fulfil our contract of services with you in line with our standard booking terms and conditions. This will be processed under GDPR legal basis 6(1)b ‘necessary for the performance of a contract’. We are required by law to gather information regarding nationality and passport status to comply with UKVI regulations.
If you wish to book onto an Online short course you will be required to use our Workflow e-portfolio service. In Workflow, your assignments and course discussions will only be shared with other students on your course. You may also voluntarily share your personal data (such as a profile picture, or biography) but this is under your own control and you are not required to do this. If you do, this will be visible to all other UAL students and staff so please do not share any information you do not want public. We do not process this information in any way and will remove it from our servers once your Workflow access has expired.
If you are currently under the age of 13 we may share information about you with your parent/guardian. After you turn 13, we will only share this information with your permission.
What we do with it
All the personal data provided by you at the point of online account creation is processed by our staff in the UK however for the purposes of IT hosting and maintenance this information is located on servers within the EU and shared with our third party data processors named in the table below. Information provided by you in conjunction with our application based programmes including but not restricted to Preparation type courses are processed by our staff in the UK but shared with our third party data processor based outside of the EU namely Survey Monkey who are compliant with the EU-U.S. Privacy Shield Framework. Also, for courses which include a digital badge, your information will be shared with our third party badge provider Credly, who are based outside the EU but who are compliant with the EU-U.S. Privacy Shield Framework.
How long we keep it
We keep all your personal data for a minimum of 6 years from the end of your time with us after which time it is deleted from our systems as well as third party provider’s systems. We are required to retain specified documents for Tier 4 students in accordance with Appendix D of the Tier 4 Sponsor Guidance provided by the Home Office.
What are your rights?
Please refer to our general privacy information webpage to learn more about your rights.