Privacy Notice for Accommodation and Residential Services

This Privacy Notice explains who we are, how and why we collect and use personal information about you, our purposes and lawful bases for processing, who we share your personal data with, relevant retention periods, and how you can exercise your privacy rights. Please do read this notice to understand our practices and if you have any questions please contact us using the contact details provided.


Who we are

The Manchester Metropolitan University (‘the University’) is the Data Controller in respect of the personal data you provide as part of your accommodation application and on-going student accommodation management. The University is registered as a Data Controller with the Information Commissioner’s Office (ICO). We manage personal data in accordance with the General Data Protection Regulation (GDPR) and the University’s Data Protection Policy.


The personal data we process

We currently collect and process the following personal data as part of your accommodation application:

We may collect further personal data directly from you accordingly to your enquiry.


The purposes of the processing and lawful basis

Lawful basis - Contract:

Your information will enable us to:

Lawful basis - Legitimate interests: we process personal data for these purposes in ways which you would reasonably expect and which we believe have minimal privacy impact.

Your information will enable us to:


Lawful basis - Consent: we offer you as real choice and control whether you wish to participate in these activities. 

Your information will enable us to:


Lawful basis - Legal obligation: under the Equality Act 2010 we are obliged to consider reasonable adjustments and offer support on the grounds on health and disability.

Your information will enable us to:


Lawful basis - Public task: In order to a perform specific task which is in the public interest and has a basis in law. 

Your information will enable us to:


Lawful basis - Vital interests: should the need arise, in order to potentially protect your life or the life of another.

Your information will enable us to:


We may also need to share your personal data with certain third parties for specific reasons:


The right to withdraw consent

If we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. You can withdraw your consent by writing to stating your name, your student ID number and in the e-mail subject state: Withdrawal of Consent.


Data retention

Your personal data will only be retained for as long as it is necessary in accordance with the University’s Retention and Disposal Schedule. This is a publically available document and can be viewed here. Specifically, we will retain the personal data relating to student accommodation management until the termination of our accommodation relationship with you + 6 years. This includes:


Your rights in respect of the processing

You GDPR provides data subjects with the following data subject rights:

Please note, that these rights apply in certain circumstances, for example according to the lawful basis utilised by the University. The right of access to personal information held about you exists in order to be aware of, and verify, the lawfulness of the processing. To exercise these rights please write to: For information about the data subject rights please refer to the main Student Privacy Notice.


Contacting us

For questions or concerns about this Privacy Notice or our use of your personal information, please contact in the first instance.

Our Data Protection Officer can also be contacted using, by calling 0161 247 3331 or in writing to: Data Protection Officer, Legal Services, All Saints Building, Manchester Metropolitan University, Manchester, M15 6BH.


Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) as the supervisory authority in respect of the processing of your personal data. We would encourage you to expend our internal complaints procedure through our initial contact and the University Data Protection Officer, prior to contacting the ICO. If you wish to contact the ICO the following contact information can be used: or telephone: 0303 123 1113. For any further contact information please see:


Updates to this privacy notice

We may update this privacy notice from time to time in response to changing legal, technical or business developments. When we update our privacy notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws.

Privacy Notices