Privacy Notice for Freedom of Information (FOI) requests

1. Who are we?

Birmingham City University is the data controller. To submit a Freedom of Information request, please email You can contact our Data Protection Officer by emailing or by post to:

Data Protection Officer
Information Management Team
Birmingham City University
Floor 1, Joseph Priestley Building
6 Cardigan Street
Birmingham, B4 7RJ

2. What type of personal data is collected?

When you make a Freedom of Information request or FOI internal review request you provide us with the following personal information: name and contact details. The legal basis for using this personal information is ‘legal obligation’ which means we are carrying out a task to comply with a legal obligation.

3. How will the personal data be used and how long is it kept?

BCU will use your personal data to help respond to your FOI or internal review request. We keep your FOI or related internal review for up to 3 years from the end of the year of completion, unless there is an identified need to keep it for longer. We may keep your name, and date of the FOI / internal review on a register for 10 years for monitoring purposes.

4. Who can access my personal data and will they share my personal data with anyone?

Your personal data will only be accessible to relevant staff, for example staff involved in responding to your FOI or internal review request. Hard copies of personal information are kept in locked storage and personal data stored electronically is on secure systems within the UK or EU.

BCU does not share the personal data you have provided as part of the FOI or internal review request with other organisations outside of BCU unless we believe we are compelled to by law or we seek external assistance such as a consultant or legal advice.

5. What rights do I have regarding my personal data?

You have the right to correct or update your personal data at any time. You have the right to request the restriction of the processing of your personal data. To do correct or update your personal data, request restriction of processing or to retract the FOI or internal review request, please email To read more about your rights please go to the ICO website

If you are not satisfied with the response to your FOI or internal review request, you have the right to lodge a complaint with the Information Commissioners Office about the handling of your personal data and can find out more about this on their website

Issue no: 1
Issue date: 25/03/2024