This page outlines our standard privacy policy and explains the reasons Jisc processes your personal data:

We need it to provide you with a service you’ve requested

If you don’t provide us with the required personal data, we’ll try to provide the service, but it may be impossible.

We’ll keep your data whilst it’s needed to deliver the service, and for an additional three months in case you have any further queries.

If another organisation helps us to provide the service, we’ll also make your data available to them. If this involves transferring information to a country not recognised as providing equivalent protection, we’ll use additional safeguards approved by UK or EU regulators.

We require all organisations we work with to keep information as safe as we do.

We need it to identify problems or ways to make the service better

We’ll keep your personal data for up to six months after you use the service; after that, unless we need it for a particular investigation, we’ll delete it.

Sometimes we use automated processing to detect and respond to problems more quickly: if you’re individually affected by this processing, you can ask us to review its results.

If there are attacks on our services, or other criminal activity, we may share information with the police.

All these uses are checked to make sure they create a benefit, rather than a risk, for individuals. If you have particular circumstances that may increase your risk you may contact our data protection officer (see below) to ask for a review of that assessment.

You’ve asked us to, for example by setting up a profile page or joining one of our research projects

We’ll keep your personal data until you ask us to change or delete it, or for at least three years after you last use the service.

We’re operating a service provided to you by someone else (eg, your university or college)

We’ll keep your personal data for as long as the provider needs us to.

To ask about your personal data, or to exercise any of your rights, you should contact them. We’ll help them respond, but the law prohibits us from responding directly to you.


Individual Jisc services may have their own privacy notices with further information about how they use your personal data.

By law you have certain rights over your personal data that we hold: to receive a copy of the data, to ask us to correct any errors, or to delete it once we no longer need it. To contact us regarding those rights, or anything else in this privacy notice, please write to our data protection officer, David Reeve, by email (dataprotection@jisc.ac.uk) or at our registered postal address below.

If you don’t feel we’ve dealt with your request appropriately, you can appeal to the Information Commissioner’s Office.


Specific aspects of the privacy policy relating to:

Institutions

  • By providing information to our digital experience insights team you agree that you have asked us to process it as described in our standard privacy notice above. You may instruct us to stop processing it at any time by emailing (help@jisc.ac.uk) and asking to be removed from communications around this service. Until then, we’ll use it only to contact you regarding the service, including updates on progress and purchasing information.

Students taking our surveys

  • By providing information in this survey you agree that Jisc process it as described in our standard privacy notice above. It will be used for the purpose of analysing responses overall to inform our research and development and for any technical support needed. It is not for marketing purposes. The information will also be used by your institution and this should be explained in an equivalent privacy notice produced by them . Jisc will use anonymised aggregated data for analysis, public reports and presentations. We will keep the personal data for one year.

Data protection and management issues: clarifying data ownership and responsibilities.

Data will be collected from participants by Jisc through our Online surveys (formerly BOS) system. This data will be jointly owned and managed by Jisc and participating institutions.

  • By providing information to our digital experience insights team you agree that you have asked us to process it as described in our standard privacy notice above. It will be used for the purpose of analysing responses overall to inform our research and development and for any technical support needed. It is not for marketing purposes. The information will also be used by your institution and this should be explained in an equivalent privacy notice produced by them (an example is given below). We will use anonymised aggregated data for analysis, public reports and presentations. We will keep the personal data for one year.

We recommend that in communicating with students and staff about taking part in the Digital experience insights surveys, you should frame and share a data protection statement similar to this one. You should also discuss this with your data protection officer:

"Privacy notice

This survey is being carried out by [institution name] in conjunction with Jisc. We will ask you questions about your [for students: course and your experiences of digital learning] or [for staff: use of digital tools and the digital infrastructure in your teaching]. Your participation in this questionnaire is voluntary and you can stop at any point without your responses being included in the dataset. More information regarding data protection can be found here. [add link to institution’s data protection policy]. The data is used to help improve students digital experience. We will share the anonymised data with Jisc, as part of a wider national study.

By providing information in this survey you agree that Jisc process it as described in our standard privacy notice. It will be used for the purpose of analysing responses overall to inform our research and development and for any technical support needed. It is not for marketing purposes. The information will also be used by your institution and this should be explained in an equivalent privacy notice produced by them . Jisc will use anonymised aggregated data for analysis, public reports and presentations. We will keep the personal data for one year."


Jisc is a not-for-profit company limited by guarantee, registered in England

  • Company number: 05747339
  • Charity number: 1149740
  • Our registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA.