Policy Owner: Cavell College
Effective Date: 15 August 2026
Review Date: 15 August 2027
Version: 1.0
1. Purpose
Cavell College is committed to protecting personal information and ensuring that it is collected, used, stored, and shared responsibly and lawfully.
This policy sets out the College’s approach to managing and protecting personal data in accordance with applicable UK data protection legislation.
2. Scope
This policy applies to personal information processed by Cavell College in connection with:
- Applicants and prospective students.
- Current and former students.
- Staff and academic personnel.
- Website users and enquirers.
- Other individuals whose personal information is processed by the College.
3. Data Protection Principles
Cavell College aims to ensure that personal information is:
- Processed lawfully, fairly, and transparently.
- Collected for specific and legitimate purposes.
- Relevant and limited to what is necessary.
- Accurate and kept up to date where necessary.
- Retained only for as long as necessary.
- Protected against unauthorised access, loss, misuse, or disclosure.
4. Lawful Processing
Personal information will only be processed where Cavell College has an appropriate lawful basis, such as:
- Consent.
- Contract.
- Legal obligation.
- Legitimate interests.
Where special category personal data is processed, an appropriate additional legal condition will also be required.
5. Data Security
Cavell College will take appropriate technical and organisational measures to protect personal information.
Access to personal data will be limited to authorised individuals who require it for legitimate College purposes.
Any suspected or confirmed personal data breach should be reported to the appropriate College contact as soon as possible.
6. Sharing Personal Data
Personal information may be shared with relevant staff, academic or programme partners, service providers, regulators, government authorities, or other organisations where there is a lawful basis for doing so.
The College will not disclose personal information unnecessarily.
7. Data Retention
Personal information will be retained only for as long as necessary for the purpose for which it was collected and to meet applicable legal, regulatory, academic, or administrative requirements.
8. Individual Rights
Individuals may have rights under applicable data protection legislation, including the right to:
- Access their personal information.
- Request correction of inaccurate information.
- Request erasure in certain circumstances.
- Restrict or object to processing in certain circumstances.
- Request data portability where applicable.
- Withdraw consent where processing is based on consent.
9. Data Protection Responsibilities
All individuals who handle personal information on behalf of Cavell College are expected to:
- Keep personal information secure.
- Use information only for authorised purposes.
- Avoid unnecessary disclosure.
- Follow College data protection procedures.
- Report suspected data breaches promptly.
10. Privacy Notice
Further information about how Cavell College collects and uses personal information is provided in the Privacy Notice.
11. Complaints
Anyone who has concerns about how their personal information has been handled should contact Cavell College.
Individuals may also have the right to complain to the Information Commissioner’s Office (ICO).
12. Contact
Cavell College
56–60 Nelson Street
Whitechapel
London E1 2DE
United Kingdom
Landline: 020 8109 6121
Mobile: +44 7556 598451
Email: info@cavellcollege.co.uk
13. Review
This policy will be reviewed regularly to ensure that it remains appropriate and aligned with applicable data protection requirements.
Effective Date: 15 August 2026
Next Review Date: 15 August 2027