Use the links below to quickly navigate to the information you are looking for:

About this Notice

We ask that you read this privacy notice carefully as it contains important information on who we are, how and why we collect, store, use and share personal data, your rights in relation to your personal data and on how to contact us and supervisory authorities in the event that you have a query or complaint.

The University of Warwick (“UoW”) is committed to protecting the privacy and security of personal data. The purpose of this notice is to promote transparency in the use of personal data, and to outline how UoW collects and uses your personal data, in accordance with the General Data Protection Regulation 2016 (“GDPR”) and the Data Protection Act 2018 (“DPA 2018”).

The UoW collects, uses and is responsible for certain personal data about you. This is known as “processing”. When we do so we are regulated under the GDPR and DPA 2018 which applies across the European Union and we are responsible as ‘data controller’ of that personal data for the purposes of those laws.
The purpose of this notice is to explain how the UoW will collect and use (process) your personal data, what rights you have in relation to that data and to provide transparency about the data collected about you.

The UoW is the data controller under the GDPR and the DPA 2018 and we will process your personal data in accordance with the GDPR and DPA 2018 at all times. You, as a ‘data subject’, therefore have specific rights to the data that we hold, collect and process.

Throughout this notice, “University”, “we”, “our”, and “us” refer to the UoW; “you” and “your” refer to those expressing an interest in becoming a student at the University (both prior to and during the application process), and those who later become enrolled students at the University.

If you would like this notice in another format (for example: audio, large print, braille), please contact us.

The personal data we collect and use

The following are examples of personal data which may be collected, stored and used:

If you are being considered for a bursary or scholarship then additional information will be collected for qualifying criteria.

Special Category Data:

Special Category personal data is any identifying information including but not limited to the following: racial or ethnic origin, political opinions, religious or philosophical beliefs, data concerning health or data concerning a natural person’s sex life or sexual orientation.

How the University of Warwick obtains your personal data

We may collect your data in a number of ways, for example:

Purpose and associated lawful basis

The personal data that we collect will only be used where it is necessary and there is a legal basis for us to process that information. Generally this means that we use your personal data in the administration of your enquiry and to provide you with marketing materials. We do this only with your consent.

Your personal data will be processed by the UOW for the purposes detailed below.

Lawful bases for processing your personal data under the GDPR and DPA 2018

Personal data

Personal data will only be processed when the law permits this to happen. Most commonly personal data will be processed in the following circumstances:

Details of how the University of Warwick applies these can be found below.

Special Category data

During the enquiry process we may collect and process special category personal data. We may also collect special category personal data from you when you are completing an application form. We may only process special category personal data in the following circumstances where, in addition to a lawful basis for processing, there exists one of the following grounds:

UoW will only use personal data for the purposes for which it was collected unless it is considered reasonable that it is needed for another purpose and the reason is compatible with the original purpose. If the University needs to use your personal data for an unrelated purpose, it will notify you and will explain the legal basis that permits it to do so. The University may process your personal data without your knowledge or consent, in compliance with this policy and procedure, where this is permitted by law.

Retention of your personal data

The GDPR and DPA 2018 requires that personal data should be kept for no longer than is necessary for the purposes for which the personal data are processed (except in certain specific and limited instances).

The University’s Record Retention Schedule (RRS) is a tool that enables the University to transparently demonstrate how the organisation complies with its data protection obligations by making provision for the time periods for which common classes of record are retained by UOW.

Full details of the retention periods of records can be found by viewing the records management page and selecting the University’s Record Retention Schedule (RRS), which is kept up to date separately.

Data Sharing

We may share your personal data with organisations within and outside of the European Union. Where any sharing or transfer of data occurs we will always ensure that there are appropriate safeguards in place to protect your personal data and that there is a lawful basis to share/transfer that data.

Such personal data will be the minimum required for the purpose, only sent when necessary, justifiable and where we have the appropriate legal basis to do so.
Examples of times your data may be shared would include the following:

Data subject rights

Under the GDPR and DPA 2018 you have a number of important rights free of charge.

You have the right to:

To exercise any of these rights please find out more here. If a subject access request is made and the request for access is clearly unfounded or excessive, the University reserves the right to refuse to comply with the request in these circumstances.

Keeping your personal data secure

The UoW keeps your personal data secure at all times using both physical and technical measures.

Where appropriate, we also take measures such as anonymisation to ensure data cannot be used to identify you and/or encryption to ensure that the data cannot be accessed without the right security accesses and codes.

Where UoW engages a third party to process personal data it will do so on the basis of a written contract which conforms to the security requirement of the GDPR and DPA 2018.

UoW takes measures to enable data to be restored and accessed in a timely manner in the event of a physical or technical incident.

UoW also ensures that we have appropriate processes in place to test the effectiveness of our security measures.

How to Contact us

We hope that our Data Protection Officer (DPO) can resolve any query, concern or complaint you raise about our use of your personal data on the contact details below:

Ms Anjeli Bajaj (DPO) can be contacted via e-mail at infocompliance at warwick dot ac dot uk

Or write to:

The Data Protection Officer

Information and Data Compliance Team
University of Warwick
University House
Kirby Corner Road

The GDPR and DPA 2018 also gives you the right to lodge a complaint with the Information Commissioner who may be contacted at or telephone: [0303 123 1113].

How we process your personal data

The table below will provide a detailed overview of the information that we collect on you, the purpose for collecting that information and the lawful basis we rely for processing that data.

Specific Purposes for use of personal data

Who we share your personal data with

Processing with Consent

As part of your enquiry or application process, we specifically seek your consent for the following:

Changes to this Privacy Notice

This privacy notice was published on 23rd August 2018 and last updated on 23rd August 2018.

We may change this privacy notice from time to time, when we do we will inform you by putting a message on the website and/or e-mail.