Privacy Notice for Student Applicants


This notice explains who we are, how and why we collect and use personal information about you as a student applicant, our lawful bases for processing, relevant retention periods, and how you can exercise your data subject rights. Please do read this notice to understand our practices and if you have any questions please get in touch using the contact information provided.


Who we are

Throughout this notice, “University”, “we”, “our” and “us” refer to the Manchester Metropolitan University. We are a higher education institution offering teaching, education, research and all necessary services to support those who study with us. The University is the Controller in respect of the personal information we hold about you. We manage all personal information in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 and the University’s Data Protection Policy.


The personal information we collect about student applicants

We receive applications to the University via the Universities and Colleges Admissions Service (UCAS) and via direct application routes.

The personal information we collect about you may include the following:

Personal details such as title, name, address, telephone number, email address, date of birth, sex and gender;

We may also process the following special category personal data:


Where does the University get your personal information from? 

Most of this information comes from your application, either via UCAS or your direct application.  We also obtain information:



The purposes of the processing

We use your personal information to assess your application, specifically:

Admissions decisions are not automated.

For other purposes related to your application, such as:

If you are successful in your application the information you provide will form the basis of your student record.


Our lawful bases for processing

The University relies on the following lawful bases from Article 6 of the GDPR in order to use your personal information for the purposes outlined above.

The Universities relies on the following lawful bases from Article 9 of the GDPR in order to use personal information supplied by you which is defined as special category:


The recipients or categories of recipients of the personal data

In addition to sharing your personal information with relevant University for the purposes of assessing your application we will share your personal information for the above purposes as relevant and necessary with:

Other than as set out above, we will not normally publish or disclose any personal information about you to other external enquirers or organisations unless you have requested it or consented to it, or unless it is in your vital interests to do so (e.g. in an emergency situation).


Withdraw your consent

Where we collect, use and share your personal information with your consent we will provide you with specific privacy notice information at the appropriate time. You can withdraw your consent at any point. To do so you are encouraged to refer back to the privacy notice which we provided to you when we collected your information or when we sought your consent to use your information in a specific way. 

Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the use of your personal information conducted in reliance of other lawful bases. You may also use the contact information under the heading ‘How to Contact Us’ to withdraw your consent.


Data retention

The University will retain your personal information for no longer than is necessary; specifically:

For further information about the University’s retention and disposal practices please see the Retention and Disposal Schedule Page.


Your rights in respect of the processing

The GDPR provides data subjects with the following rights: 

For further information about your subject rights please see our Data Subject Rights Webpage. To protect the confidentiality of your information we may ask you to verify your identity before fulfilling any request.


Contacting us

For questions or concerns about this Privacy Notice, or our use of your personal information, please contact in the first instance.

Our Data Protection Officer can also be contacted using, by calling 0161 247 3331 or in writing to: Data Protection Officer, Legal Services, All Saints Building, Manchester Metropolitan University, Manchester, M15 6BH.


Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) as the supervisory authority in respect of the processing of your personal data. We would encourage you to expend our internal complaints procedure through our initial contact and the University Data Protection Officer, prior to contacting the ICO. Please contact: or telephone: 0303 123 1113. For any further contact information please see:


Updates to this privacy notice

We may update this privacy notice from time to time in response to changing legal, technical or business developments. When we update our privacy notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. This notice was last updated on the 17.10.19.

Privacy Notices