Archived: Data protection privacy notice for enquirers and applicants

What this privacy notice is about

This is a summary of how we protect your personal data and respect your privacy. This notice is for enquirers and applicants to foundation, degree, degree apprenticeship, postgraduate and other courses.

Enquirers and applicants 2022/23

How we collect your information

We collect your personal data when you make an enquiry or apply as a prospective student.

From third party organisations through which you have expressed an interest in studying (for example, international representatives and agents, FindAMasters, Prospects, Hotcourses and the Student Room).

This may include when you (or someone acting on your behalf) provides payment information either on the phone or via a University-managed website such as the KU Store or web payment portal.

What types of information we collect

We may collect the following types of personal data about you:

Personal details

  • your name, and contact information such as address, email and telephone number, as well as your date of birth, national insurance number (or other tax identification number);
  • your passport number or national identity card details, country of domicile, your nationality and your immigration status;
  • information relating to your education and employment history;
  • records relating to assessments of your work, examination grades and other information in your student record;
  • information about your family or personal circumstances, and both academic and extracurricular interests (for example, when assessing your suitability to receive a bursary or in order to provide you with pastoral care);
  • employer information;
  • bank details or credit/debit card information (in accordance with Payment card industry Data Security Standards) to facilitate payments.

Special category data

  • your health and medical conditions (for example, disability and dietary needs);
  • criminal convictions where required for certain programmes of study or prior to certain placements (for example, where a Disclosure and Barring Service check is required);
  • unspent criminal convictions which if declared will require a risk assessment based on the seriousness and nature of the crime, this could involve consulting your probation officer or similar professional;
  • information about your racial or ethnic origin, religion or similar beliefs;
  • sexual orientation.

How we use your information

Your data will be used for the purposes of dealing with your enquiries or application, as well as sending you relevant information about Kingston University.

The information you provide to us in your application is used for the purposes of recruitment and admissions and to assess your eligibility for other reasons including bursaries and accommodation.

Your information may be used to facilitate payment to the University and may be shared with payment service providers for the processing of payments. Where necessary, information may be shared with debt collection agencies, solicitors and tracing agents to assist with the recovery of debt.

What legal basis we have for processing your information

For a contract

We process some of your personal data because it is necessary for the performance of a contract with you or in order to take steps to enter into a contract. In this respect, we use your personal data for the following:

  • to interact with you before you are enrolled as a student, as part of the enquiries and admissions process (for example, to send you a prospectus or answer enquiries about our courses).

To comply with legal obligations

We also process your personal data for our compliance with our legal obligations. In this respect, we may use your personal data for the following:

  • to comply with immigration laws (UKVI)


We may also process your personal data where we have your specific, or where necessary, explicit consent to do so. In this respect, we may use your personal data for the following:

  • when you respond to online marketing.

Who we share your information with

Third parties that help us store and process enquiries and help to compile applications from prospective students (for example, conversion services and/or our international recruiting representatives working on our behalf).

Third parties that provide platforms to help us deliver online surveys or third parties conducting surveys on our behalf. For example, we may pass student contact details to survey contractors to carry out surveys of enquirers and applicants' views. These organisations and their contractors will use the details of enquirers and applicants only for this purpose and will then delete them.

The police and other law enforcement agencies, for the prevention and detection of crime.

How long we keep your information

If you do not become a student at Kingston University we will retain your information for the period set out in our retention schedule available on the policies and regulations page on our website after which the data will be deleted or anonymised so that we can use it for statistical purposes.

Note, in some cases, we may keep hold of personal data for use in future contacts (for example, data obtained during the enquiry process may be linked with data subsequently collected if you enrol as a student).

Your rights

Under the GDPR and the Data Protection Act 2018, you have certain rights:

  • to access the personal data we hold about you;
  • to require us to correct the personal data we hold about you;
  • to require us to erase your personal data;
  • to require us to restrict our data processing activities (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal);
  • to receive your personal data, which you provided to us, in a structured, commonly used and machine-readable format and the right to transmit that data to another controller;
  • to object to any of our particular processing activities where you feel this has a disproportionate impact on your rights;
  • to not be subject to a decision based solely on automated processing, including profiling, which has a legal effect on you.

Please note that the above rights are not absolute and we may be entitled to refuse requests where exceptions apply.

Your responsibilities

When considering your personal data, enquirers and applicants should ensure the information provided to the University remains accurate and up to date.

You should inform the University as soon as possible if details, such as your address, change.

Who to contact

Please contact if you have any queries about this privacy notice or how we process your personal data.

If you then wish to exercise your rights as a data subject, please use the Data Subject Request form on our website under policies and regulations.

If you are not satisfied, you can make a complaint to the Information Commissioner. You can find out more about your rights under data protection legislation from the Information Commissioner's Office website.

Changes to this privacy notice

This privacy notice will be updated on an annual basis. If we make any significant changes in the way we treat your personal information we will make this clear on the Kingston University website or by contacting you directly.

Kingston University is the data controller of your personal data and is subject to data protection legislation, the General Data Protection Regulation (GDPR), Data Protection Act (DPA) 2018 and Privacy and Electronic Communications Regulations (PECR). We are listed on the Information Commissioner's Office (ICO) register of fee payers.

You can find privacy notices and other relevant policies on our website under policies and regulations.