Data protection and your rights

Who handles your data?

Coventry University Group is the data controller, which means we’re responsible for ensuring your personal data is handled fairly, lawfully, and transparently.

Our commitment to data protection is outlined in:

• The Information Governance Policy and associated standards
• The IT and Information Security Policy, and associated standards
• Our Privacy Notices, which you can read in full on our website.

How we use your data

We collect personal data:

• directly from you
• from third parties such as UCAS
• through your use of University systems and services.

This data is used in accordance with our Students Privacy Notice to support your academic progress, wellbeing, and meet the University’s legal and contractual responsibilities. Information may be shared internally or, where necessary, with trusted external parties such as placement providers, government bodies, or IT service partners when necessary.

Legal bases for processing

Examples include data processing required for safeguarding, professional accreditation, funding, or delivering student support. All processing is conducted with appropriate legal basis and safeguards.

We use your personal data for purposes related to your studies, student experience, safety, support, and to meet legal and operational requirements. The lawful bases for this processing include:

• Contractual necessity (e.g., enrolment, assessments)
• Legal obligation (e.g., statutory returns)
• Public task (e.g., education provision as a public institution)
• Legitimate interests (e.g., internal reporting or service improvement)
• Vital interests (e.g., safeguarding or emergencies)
• Consent (where explicitly required).

Your rights

We are committed to keeping your data accurate, secure, and only for as long as needed, following our data retention schedules.

You have rights under data protection law, for full details on your rights and how to exercise them, please refer to the Privacy Notice alternatively, visit the Information Commissioner’s Office (ICO) website.

If you're handling data (e.g. for research or coursework) 

Data Protection will apply to you where you need to collect or process personal data for research, coursework, or your dissertation. It is your responsibility to do so following University policies. Please refer to guidance on the Student Data Hub to ensure appropriate handling.

Contact points

For advice or support about data protection please contact the Record & Information Governance Unit at: 

• General enquiries: enquiry.igu@coventry.ac.uk 
• Data Subject Access Requests: dsar@coventry.ac.uk 
• Records Management team: Recordsmanagement@coventry.ac.uk  
• Data Protection Officer (for complaints): dpo@coventry.ac.uk