Your personal data will only be accessible to the relevant staff involved in delivering the uses of your personal data stated above. Hard copies of personal information are kept in a secure location and personal data stored electronically is on secure systems.
We may share your data with other departments within BCU only where necessary for the delivery of alumni or development services.
We may share your personal data with certain third parties for the purposes of delivering the Alumni community and development services, in accordance with your preferences provided. We will not share your personal data with third parties except:
- Our employees, agents and contractors for the sole purpose of providing you with requested alumni community and / or development services:
- Third party providers may be used to send email or post. They are only allowed to use this information to send out the communications/post, and are required to securely delete it;
- Where we are running an event in partnership with a third party, it may be necessary to share your personal data. If this is the case, we will always make this clear during the registration process and provide the name of the third party;
- We may share your personal data with a third party provider to check if you have signed up to the Telephone Preference Service (TPS) or Fundraising Preference Service (FPS), but they will only use the data for this purpose, and will then delete it.
- We may share information, if legally required with regulatory bodies and auditors, for example if records had to be lawfully inspected by the Information Commissioners Office.
- We may share data to obtain industry-endorsed accreditation from third parties for university courses, for example Creative Skillset accreditation, a quality mark for excellence in training courses and education in the creative industries
- To those with an interest in tracking student progress and attendance to comply with legal obligations:
- If we have a statutory duty to do so, for example to provide statistical data to the Higher Education Statistics Agency (HESA). (Use the search term ‘collection notices’ for information about how HESA may use your personal data)
- You may be included in the longitudinal surveys of leavers in the years after you graduate. If so, we will pass your contact details to the organisation that has been contracted to carry out the survey. That organisation will only use your details for that purpose, and will then delete them.
If we use a third party, we will always ensure that appropriate controls are in place to ensure data is safe, it is only used for the allowed purpose and it is permanently deleted after the task has been completed.
The secure database used to store your data is kept in the UK. However, some of the personal data we process about you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"), for example where it is processed by staff operating outside the EEA who work for us or for one of our suppliers, or where personal data is processed by one of our suppliers who is based outside the EEA or who uses storage facilities outside the EEA.
In these circumstances, your personal data will only be transferred on one of the following bases:
- where the transfer is subject to one or more of the "appropriate safeguards" for international transfers prescribed by applicable law (e.g. standard data protection clauses adopted by the European Commission);
- a European Commission decision provides that the country or territory to which the transfer is made ensures an adequate level of protection; or
- there exists another situation where the transfer is permitted under applicable law (e.g. where we have your explicit consent).
We share personal data with the CRM supplier for storing Alumni information for the BCU Alumni Community. We rely on the UK General Data Protection Regulation (UK GDPR) Article 6 lawful basis of public task for the processing of this information.
For the special category data shared with the CRM supplier, which is whether there is a disability declared by the student (type of disability is not shared), we rely on the lawful basis of public task and the Article 9 condition of processing of Article 9(2)(g) Substantial Public Interests. Please note, the lawful basis 'public task' and the condition of processing ‘substantial public interest’ do not mean that the information is made publicly available. Instead, they mean that it is in the good of society (i.e. it’s in the public good) that organisations can use such information. The relevant condition under Part 2 of Schedule 1 of the Data Protection Act 2018 is equality of opportunity or treatment.
In addition to the circumstances stated above we will share your personal information if we believe someone’s life is in danger or we believe we are compelled to by law.
Will you be contacted for marketing purposes?
For alumni who were BCU students between 2011/12 – 2024/2025 BCU will only send you emails offering support, growth opportunities and marketing if you provided your consent. For alumni who were students from 2025/26 onwards, BCU is relying on the lawful basis of legitimate interests for processing your personal data and therefore will send you emails containing offers of support, growth opportunities and marketing unless you opt out. We may personalise the message content based on information you have provided. Any Alumni can opt out of specific content themes or all alumni communications, at any time, using the Alumni Communications Preference Centre which can be accessed from BCU alumni emails and the Alumni pages on the BCU website.