Skip to main content

Student Privacy Notice

Purpose of this notice
Where does the University get your personal data from?
The purposes for which we process your personal data and the legal basis for that processing
How we apply further protection in the case of “Special Categories” of personal data
Legal basis for processing your data under GDPR
Additional notices and guidance/policies
Who might we share your personal data with?
Which third-party service providers process my personal information?
Transfers to third party countries
Data security
Retention periods
Your rights as a data subject
Your duty to inform us of changes
Changes to this notice
Concerns and contact details

Purpose of the Notice

This Notice explains how we will collect and use your personal data.

We are the data controller for personal data that we process about you.

Throughout this Notice, “University”, “we”, “our” and “us” refers to the University of Leeds of Leeds, LS2 9JT. “you” and “your” refers to those expressing an interest in becoming a student at the University (both prior to and at formal application stage), together with those who later become a registered student at the University.

This notice does not form part of any student contract.

It is important that you read this privacy notice together with other applicable privacy notices.

If there is anything you are unclear about, please contact our Data Protection Officer Rebecca Messenger-Clark dpo@leeds.ac.uk who shall be happy to answer any queries you may have concerning this Notice or the way in which we processes your personal data.

Where does the University get your personal data from?

We obtain personal data about you from the following sources:

  • from you, for example when you provide your details for open day activities or register as a student with us;
  • from third party sources (e.g. UCAS, other institutions involved in joint programmes or the Student Loans Company). When we obtain personal data about you from third party sources, we will look to ensure that the third party has lawful authority to provide us with your personal data.
  • data that we and our staff generate about you, such as during tutorials and in connection with your attendance and accommodation at the University;
  • your school or previous educational establishments or employers if they provide references to us;
  • fellow students, family members, friends, visitors to the University and other contacts who may provide us with information about you if and when they contact us, or vice versa.
  • The provision of most data that you provide to us is a contractual requirement. If you do not provide us with information that you are contractually obliged to provide, the consequences will depend on the particular circumstances. In some cases we may not be able to provide you with certain services; in other cases, it could result in disciplinary action or the termination of your contract.

Categories of personal data being processed

The University will collect and use your personal data for the purposes set out further below. The usual categories of personal data we expect to process about you include (but are not limited to):

  • Details of which course you are studying;
  • Other data that is necessary to the operation of the University/student contract or to the functioning of the University including: any data about you contained in your assessed work, our assessments of your work and details of any qualifications you are awarded; details of any disciplinary complaints or decisions about you; your contact and accommodation details; any communications you have with us, and any communications we generate about you, for example if you ask us to defer your studies to a later academic year; details of any payments that you make to us, including your bank/payment card details.
  • Data you and others sent us when you applied to us (including information sent to us via UCAS and your predicted grades). This includes your academic record and personal statement which we use to assess your application;
  • Details of any relevant criminal convictions, allegations or charges that we ask you to declare to us either when you apply to us, or whilst you are a student, or which are reported to us, and of any Disclosure and Barring Service checks that we request. Relevant criminal convictions or charges are those that indicate an applicant or student might pose an unacceptable risk to other students or staff. More information is available here for undergraduate and postgraduate admissions. For reporting any criminal offences whilst a student at the University please see here.
  • Information that you voluntarily provide to us about any disabilities or health conditions you have, and about your age, ethnicity, gender, religion and belief, and/or sexual orientation. You may also provide this information to us as part of the equality monitoring that we undertake pursuant to our legal obligations under the Equality Act 2010;
  • Where you inform us of a health condition or disability, we will take this information into account when considering whether to make a reasonable adjustment under equality law and in other cases where we are legally required to;
  • Data about you that we have to collect by law (for example where UK immigration law requires us to record information about you, or to report it to the immigration authorities);
  • Data that we voluntarily provide about you, either whilst you are a student or after you graduate, for example if you ask us for a reference; and
  • Bank and other payment details, where we need to reimburse you, or where you provide such details to us when making a payment.

In general terms, we process your personal data for the administration and delivery of your student contract with us, including the use of our services such as, residential services, lecture capture, attendance monitoring, the Library and sports facilities.

The law requires that we provide you with information about the lawful basis on which we process your personal data, and for what purposes.

Most commonly, we will process your data on the following lawful grounds:

  • Where it is necessary to perform the contract we have entered into with you;
  • Where it is necessary for the performance of a task in the public interest;
  • Where it is necessary to comply with a legal obligation;
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

We may also use your data, typically in an emergency, where this is necessary to protect your vital interests, or someone else’s vital interests. In a small number of cases where other lawful bases do not apply, we will process your data on the basis of your consent.

Some of the above grounds for processing will overlap and there may be several grounds which justify our use of your personal information.

How we apply further protection in the case of “Special Categories” of personal data

The University may process “special categories of data” as described under the GDPR. These are more sensitive personal data which require a higher level of protection. We need to have further justification for collecting, storing and using this type of personal data.

The Special Categories of personal data consist of data revealing:

  • racial or ethnic origin;
  • political opinions;
  • religious or philosophical beliefs;
  • trade union membership.

They also consist of the processing of:

  • genetic data;
  • biometric data for the purpose of uniquely identifying someone;
  • data concerning health;
  • data concerning someone's sex life or sexual orientation.

We may process Special Categories of personal data in the following circumstances:

  • With your explicit written consent; or
  • Where it is necessary in the substantial public interest, in particular: necessary for the purposes of the prevention or detection of an unlawful act and must be carried out without your consent so as not to prejudice those purposes; or for equal opportunities monitoring;
  • Where it is necessary for archiving purposes in the public interest, or for scientific or historical research purposes, or statistical purposes, subject to further safeguards for your fundamental rights and interests specified in law.

We will put in place other safeguards which we are required by law to maintain when processing such data.

Less commonly, we may process this type of data where it is needed in relation to legal claims or where it is needed to protect your interests (or someone else's interests) and you are not capable of giving your consent, or where you have already made the data public.

Some of the above grounds for processing will overlap and there may be several grounds which justify our use of your personal information.

Criminal convictions and allegations of criminal activity

Further legal controls apply to data relating to criminal convictions and allegations of criminal activity. We may process such data on the same grounds as those identified for “Special Categories” referred to above.

We set out in table 1 of this Notice the purposes for which we will process your personal data and the legal basis for that processing.

Table 1 gives the University’s present view on the grounds for processing against each specified purpose.

Here is a brief explanation of the grounds referred to under table 1.

(Article 6(1)(a)), Consent – on specific occasions the University will only process certain data if you consent e.g. on registration you only need to provide certain “special categories” of data if you agree that that.

(Article 6 (1)(b)), necessary for the performance of your student contract – on many occasions the University will process your data to enable it to meet its commitments to you e.g. those relating to teaching and assessment.

(Article 6 (1)(c)), necessary to comply with a legal obligation – the University does have legal obligations to provide your personal data to others e.g. HESA.

(Article 6 (1)(d)), for the purpose of protecting the vital interest of yourself or another – sometimes in extreme circumstances the University will have to release information to protect your interests or the interests of others e.g. in medical emergencies.

(Article 6 (1)(e)), processing necessary for the performance of a task carried out in the public interest – the University is an educational establishment and in particular its educational activity is conducted in a public interest (including your interest and the interest of others).

(Article 6 (1)(f)), processing is necessary for the purposes of the legitimate interest of the University or a third party subject to overridden interests of the data subject – the University (and sometimes third parties) has a broad legitimate interest in activities that connect to the activities and education of students. Subject to those interests not being overridden by the interests of fundamental rights and freedoms of students, it will pursue those interests. A good example of this legitimate interest would be its Alumni activities. Where Article 6(1)(f) is used the “legitimate interest” is generally the interest of the University (or third party) in providing or supporting the provision of higher education to its students.

(Article 22(2)(a)), automated decision making necessary for performance of a contract – the University will sometimes automate decisions relating to its services it is providing to you.

(Article 9(1)(a)), processing “special categories” of data where you have given consent – the University will process certain sensitive information about you with your consent.

(Article 9(1)(g)), processing “special categories” of data where necessary for reasons of substantial public interest.

(Article 9(1)(f)), processing “special categories” of data in connection with legal claims.

It is recognised that some of the above grounds will overlap and that the University could rely on multiple grounds justifying its lawful processing. The University also reserves the right to rely upon other grounds that are not referred to under table 1.

No.Specific PurposesLegal Basis – reference to Article 6 GDPR unless indicated to the contrary
1Admission, registration and administration of their studies.(1)(b) or (1)(f)
2Academic assessment and progression.(1)(b) or (1)(f)
3Administration of student related policies and procedures including appeals, complaints, grievances, disciplinary matters, and matters relating to health and conduct and to cheating and plagiarism(1)(b) or (1)(f)
4Pursuit of social and sporting activities e.g. relating to use of the University’s sports facilities.(1)(b) or (1)(f)
5The provision of University accommodation and other support services such as those of the Library, ISS and the Careers Centre.(1)(b) or (1)(f)
6The granting of awards (including the publication of awards and marks and inclusion in pass lists made available via the University's web site).(1)(b) or (1)(f)
7Processing and recovery of accounts and fees.(1)(b) or (1)(f)
8Research and statistical analysis.(1)(b) or (1)(f)
9Production of statistical returns required for third party government bodies e.g. the Higher Education Statistics Agency, for completion of government supported surveys e.g. the National Student Survey, the Destination of Leavers in Education Survey and the Teaching Excellence Framework.(1)(c) or (1)(e) or (1)(f)
10Creation of e-mail addresses, available to those within and outside of the University. (Please note that it is possible for those accessing such addresses to obtain such information as a  student’s home department/resource centre and indeed whether an individual is or has been enrolled at the University).(1)(b) or (1)(f)
11Direct mailing of or about (i) student benefits and opportunities offered by or through the University and (ii) University activities and events organised for students.(1)(b) or (1)(f)
12Host mailing of services or career opportunities of direct relevance to student interests.(1)(b) or (1)(f)
13Administration of employment contracts where the student is employed by the University.(1)(b) or (1)(f)
14Administration of Alumni membership.(1)(b) or (1)(f)
15Consideration and granting of prizes, scholarships and bursaries: of discretionary funding available to students; and of other such awards.(1)(b) or (1)(f)
16In relation to the safety of individuals and their property and the protection of University assets, including the use of CCTV.(1)(b) or (1)(f)
17The production of student identification cards; and the inclusion of photographic images on the University’s computerised student record system.(1)(b) or (1)(f)
18The operation of a lecture capture facility relating to the recording of educational activities e.g. lectures, by the University.(1)(b) or (1)(e) or (1)(f)
19Automated individual decision making with regard to assessment of fees status and suitability for further financial assistance to be provided to students such as bursaries. For further information regarding decision making in those areas please see http://students.leeds.ac.uk/#FinanceArticle 22(2)(a)
20Automated individual decision making based on data collected at registration about students’ current career position with regard to the type of careers opportunities and advice they are contacted about. For further information regarding decision making in this area please see http://careerweb.leeds.ac.uk/info/13/career_planningArticle 22(2)(a)
Personal data released to third parties for the following purposes.
21To the Higher Education Statistics Agency, HEFCE, government departments, the West Yorkshire Workforce Development Confederation and other authorised users for the completion of student surveys and analysis of student statistics and/or to enable them to carry out their statutory functions as applicable.[1](1)(e) or (1)(f)
22To local authorities for the purpose of enrolment on the electoral register and automatically exempting student from payment of council taxes.(1)(b) or (1)(f)
23To the British Council for the administration of pre-arrival events.(1)(b) or (1)(f)
24To The Leeds University Students’ Union – in accordance with options given on registration.(1)(a) or (1)(f)
25To professional and industrial bodies wishing to communicate with students about career opportunities and membership of their body(1)(b) or (1)(f)
26To Junior Common Rooms and other student societies for the pursuance of student activities with those bodies.(1)(b) or (1)(f)
27To the police or other regulatory body where pursuant to the investigation or disclosure of a potential crime.(1)(f)
28To close family and the emergency services where there is an emergency situation e.g. illness, serious injury or bereavement.(1)(f)
29To external examiners for the purposes of assessment.(1)(b) or (1)(f)
30To governmental and regulatory bodies for the purpose of gathering census or other information including the assessment of fees, including electoral registration officers.(1)(b) or (1)(c)
31To the Home Office and other international and national governmental and regulatory bodies in connection with the assessment of students status.(1)(b) or (1)(c)
32To third parties accessing information about student awards - ranged by department - which is available in the public domain; and for the verification of awards to employers and other educational institutions.(1)(b) or (1)(e)
33To other educational institutions involved in the delivery of a student’s course or programme, e.g. affiliated colleges, exchange institutions, including those outside of the UK and sometimes the EU and EEA; and to other organisations in relation to work placements.(1)(b) or (1)(f)
34To bona fide accreditation bodies for the purpose of accrediting University courses. (1)(e)
35To professional bodies where registration with that body is related to or a requirement of the student’s studies e.g. the GMC for medical students.(1)(b) or (1)(e) or (1)(f)
36To the University’s Alumni branch offices/representatives within and outside of the UK for dissemination of information in connection with activities and events for former students.(1)(b) or (1)(f)
37To any third party accessing the University’s e-mail directory of student e-mail addresses.(1)(b) or (1)(f)
38To any third party wishing to access a catalogue within the University’s library containing reference to student work.(1)(e) or (1)(f)
39To banks (and other payment agencies you may use), family, sponsors or other third parties to enable them to pay student debts.(1)(b) or (1)(f)
40To external agents of the University in relation to the repayment of student debts.(1)(f)
41To external agencies - which may be based outside the European Economic Area - in connection with procedures for guarding against plagiarism.(1)(e) or (1)(f)
42To Data Processors in order for them to process data on behalf of the University for any of the purposes for which the University is permitted to process the data, including the provision of academic and other services by the University.(1)(b) or (1)(f)
43In relation to the provision of references for students or former students.(1)(f)
44To sponsors, including the UK research councils, the Student Loan Company and sponsors located overseas.(1)(b) or (1)(f)
45To external bodies and individuals who have funded student prizes and awards.(1)(b) or (1)(f)
All students agree to the University processing their “sensitive personal data”/“special categories of data for the following purposes and for release to the following third parties:
46To the Higher Education Statistics Agency, HEFCE, government departments and other authorised users for the analysis of student statistics and/or to enable them to carry out their statutory functions as applicable.Article 9(1)(a)
47To professional bodies where registration with that body is related to or a requirement of the student’s studies e.g. the GMC for medical students.Article 9(1)(g)
48To other bodies involved in the delivery of the course or programme e.g. affiliated colleges, for the purpose of statistical analysis and programme administration.Article 9(1)(a)
49For the assessment and provision of services to disabled students.Article 9(1)(a)
50For admission to and the administration of student programmes.Article 9(1)(a)
51Where required, to the police or other agencies in connection with particular programmes of study or prior to certain placements.Article 9(1)(a) or (g)
52To the University’s external lawyers, insurers in respect of accidents occurring within the institution and external auditors.Article 9(1)(f)
53The operation of a lecture capture facility relating to the recording of educational activities e.g. lectures, by the University.Article 9 (1)(a)

[1]  In the case of HESA, this may include releasing telephone numbers so that HESA or its agents can make telephone calls in relation to the auditing of First Destination Surveys of graduates.

 

 

Additional notices and guidance/policies

The University has also published separate policies and guidance which may be applicable to you in addition to other privacy notices. It is important that you read this privacy notice together with other applicable privacy notices.

The other relevant privacy notices include:

The relevant policies and guidance include:

  • Attendance monitoring – we conduct attendance monitoring for a number of reasons including to assist with student visas for international students and ensure the proper engagement of our students. If you are a student, we may require you to participate in electronic recording of attendance for example using our UniLeeds app that you have downloaded on to your mobile phone or other portable device. Please see: Monitoring Attendance and Engagement for further guidance.
  • Lecture capture service – we regularly record educational activities in which you may be involved. These recordings will be made in accordance with our policy on Audio or Video Recording for Educational Purposes. Please note that under this policy we assume that you generally consent to being recorded, however, there is a right to opt out and request an edit of recordings. Save in agreed exceptional circumstances, we do not permit students to record education activities. Please see: Policy on audio or video recording for educational purposes. Please read the Policy to understand your rights and obligations.
  • HESA returns – we are required to return important information (that will include your personal data) to HESA. Please see HESA’s collection notice together with other supporting information at: HESA's collection notice
  • Learning Analytics – we use data that we gather from University systems about your learning to enhance your education, support your academic journey and maximise your chances of success. This means that we will gather and analyse data relating to your education and present these in appropriate formats to you and staff who support you, to support your learning, progress and well-being. The Code of Practice on Learning Analytics sets out the responsibilities for staff, students and the University to ensure that learning analytics is carried out responsibly, transparently and ethically. This covers the presentation of learning analytics data to students and staff and also its use in research projects and management information. Please see: Code of Practice for Learning Analytics. for the full code of practice. This document is currently reviewed by the University on an annual basis.

 Automated individual decision making, including profiling

This is where we may make decisions automatically about you without human intervention. With regard to University Alumni activity please see Alumni privacy notice. We use your personal data to conduct other automated individual decision making and profiling as described in table 1. Table 1 also provides where you can go to find out further information on the logic behind our decisions as well as the significance and consequences of our decisions. If you are still finding it difficult to locate or understand this information please contact the Data Protection Officer who will help you further.

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.

Unwanted communication

We will from time to time communicate with you by email, post and telephone about various services provided by the University. If, at any stage, you are concerned about the content of these communications, e.g. marketing information that you don’t think is relevant to you, or you wish to change the method of communication, please use the unsubscribe function.

We will however continue to contact you about matters relating to the Student Contract and any matters ancillary to the contract.

If you have any concerns please contact our Data Protection Officer, Rebecca Messenger-Clark dpo@leeds.ac.uk.

Who might we share your personal data with?

We may share your personal information with third parties where required by law, where it is necessary to administer the contract with you or where we have another legal requirement or legitimate interest in doing so. Where we share your data we ensure an appropriate Data Sharing Agreement is in place, which contains clauses approved by the Information Commissioner's Office on how the personal data must be safeguarded against loss and inappropriate access. Some of these third parties may be outside the European Union.

This includes for example:

  • where we are required to report information about students that are subject to visa controls to UK Visas and Immigration;
  • where we are required to report information to enable the University to fulfil its obligations to report information to the Higher Education Statistics Agency  https://www.hesa.ac.uk/about/regulation/data-protection/notices or its successor body in order to comply with regulatory obligations; and/or
  • where we decide to report alleged criminal misconduct to the police.

It also includes disclosures where the third party is an agent or service provider appointed by the University to enable us to operate effectively, we only do this where we are satisfied that appropriate safeguards are in place to ensure adequate levels of security for your data.

We do not, and will not, sell your data to third parties.

Which third-party service providers process my personal information?

"Third parties" includes third-party providers (including contractors and designated agents).

Examples of bodies to whom we are required by law to disclose certain data include, but are not limited to:

OrganisationWhy?
Home Office; UK Visas and ImmigrationTo fulfil the University’s obligations as a visa sponsor.
Disclosure and Barring Service (DBS)Required for certain roles to assess an individual’s suitability for positions of trust or where the role works with vulnerable people or children.
Office for Students and UK Research and InnovationData submitted for the Research Excellence Framework (REF) which is a system for assessing the quality of research in Higher Education.
HM Revenues and Customs (HMRC)Real time information released to HMRC in order to collect Income Tax and National Insurance contributions from employees.
Examples of bodies to whom we may voluntarily disclose data, in appropriate circumstances, include but are not limited to:
OrganisationWhy?
Agencies with responsibilities for the prevention and detection of crime, apprehension and prosecution of offenders, or collection of a tax or dutyFor the prevention, detection or investigation of crime, for the protection of the public, and/or to support national interest.
Students’ UnionThere is an implied statutory expectation that we will pass your data to the students’ union (for membership purposes) unless you have chosen to opt out of its membership.
Turnitin or other plagiarism detection softwareIn order to establish whether any work has been plagiarised.
Higher Education Statics Agency (HESA)Some information, usually in anonymised form, will be sent to HESA for statistical analysis and to allow government agencies to carry out their statutory functions.
Occupational Health providersTo enable the provision of these facilities, where applicable.
Third party service providersTo facilitate activities of the University [including activities that are carried out by third-party service providers such as lawyers, accountants and IT providers etc.].  Any transfer will be subject to an appropriate, formal agreement between the University and the third-party service provider.

Where information is shared with third parties, we will seek to share the minimum amount of information necessary to fulfil the purpose.

All our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes (as written in the contract between us) and in accordance with our instructions.

Data Transfers to third party countries

Sometimes to achieve the purposes for which we are processing your personal data we may need to share your personal data with other organisations based within the EU or EEA or if outside the EU or EEA based in countries that have comparable levels of protection.

When it is necessary to share your data with organisations, we will ensure that there are appropriate safeguards in place. We have Data Sharing Agreements with third parties, which include clauses recommended by the Information Commissioner's Office to ensure appropriate safeguards for the data.

When you are resident outside the EU or EEA in a country where there is no “adequacy decision” (a country outside the EU or EEA that ensures adequate level of data protection due to its domestic laws or international commitments) by the European Commission, and an alternative safeguard is not available, we may still transfer data to you which is necessary for performance of your contract with us, or to take pre-contractual measures at your request.

Otherwise, we will not transfer your data outside the UK, EU or EEA without first notifying you of our intentions and of the safeguards that apply to your data.

Data Security

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business requirement to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality. Details of these measures may be obtained from the Data Protection Officer (whose details are set out at the foot of this document).

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Retention periods

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. Once you are no longer a student we will retain or securely destroy your personal information in accordance with our Data Retention Policy.

Your rights as a data subject

We thought it would be helpful to set out your rights under GDPR. You have the right to:

  • withdraw consent at any time where that is the legal basis of our processing;
  • access your personal data that we process;
  • rectify inaccuracies in personal data that we hold about you;
  • restrict the processing in certain ways;
  • obtain a copy of your data in a commonly used electronic form; and
  • object to certain processing of your personal data by us.
  • be forgotten, that is your details to be removed from systems that we use to process your personal data;

Please be aware that these rights are subject to certain conditions and exceptions as set out in the data protection legislation.

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, withdraw your consent to any processing, or request that we transfer a copy of your personal information to another party, please contact the Data Protection Officer in writing and they will explain any conditions that may apply.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

Please see for https://ico.org.uk/ further information on the above rights. You may also contact the Data Protection Officer for further information.

You have a right to complain to the Information Commissioner’s Office about the way in which we process your personal data. Please see https://ico.org.uk/.

Your duty to inform us of changes

 It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your study with us and until after you have graduated or otherwise completed your studies (see http://students.leeds.ac.uk/info/10104/makingchanges/651/changeofnameoraddress)

Changes to this notice

We shall inform you of any changes to this Notice. Notification will be through the appropriate medium of communication e.g. where our main contact with you is by email we will email you.

Concerns and contact details

If you have any concerns with regard to the way your personal data is being processed or have a query with regard to this Notice, please contact our Data Protection Officer, Rebecca Messenger-Clark at dpo@leeds.ac.uk.

Our general postal address is University of Leeds, Leeds LS2 9JT, UK.

Our data controller registration number provided by the Information Commissioner's Office is Z553814X

This privacy notice was last updated October 10th 2023