Lakeshore Management College is committed to protecting the privacy, security, and rights of individuals whose personal data we process. We handle personal information lawfully, fairly, and transparently, in accordance with the UK General Data Protection Regulation as incorporated into UK law, and the Data Protection Act 2018.
This notice explains how we collect, use, store, share, and protect personal data, and sets out the rights of individuals in relation to that data.
Lakeshore Management College acts as the Data Controller for the personal data it processes.
Where applicable, data may be processed jointly with partner organisations, including awarding bodies and regulatory authorities, under agreed data sharing arrangements.
3
Personal Data We Collect
We collect and process personal data only where necessary. This may include:
Identity data
Name, date of birth, gender, nationality, and identification documents where required
Contact data
Address, email address, telephone number
Admissions and academic data
Application information, qualifications, assessment results, attendance records, progression and achievement data
Financial data
Fee information, payment records, and funding related data
Equality and monitoring data
Information relating to disability, ethnicity, or other protected characteristics where provided voluntarily or required for regulatory purposes
Technical data
Website usage data, IP addresses, and system access logs
4
How We Use Personal Data
We process personal data for the following purposes:
- Managing enquiries, applications, admissions, and enrolment
- Delivering education, assessment, and academic support
- Monitoring attendance, engagement, progression, and outcomes
- Fulfilling contractual obligations to students
- Meeting legal and regulatory requirements, including those of awarding bodies and government agencies
- Safeguarding, student welfare, and equality monitoring
- Operating and improving our website and IT systems
We do not use personal data for purposes that are incompatible with those listed above.
5
Lawful Basis for Processing
Under UK GDPR, we rely on one or more of the following lawful bases:
Performance of a contract
Where processing is necessary to deliver education and student services
Legal obligation
Where processing is required by law or regulation
Public task
Where processing supports statutory or regulatory functions within education
Legitimate interests
Where processing is necessary for operational purposes and does not override individual rights
Consent
Where required, and where individuals have a genuine choice
Consent may be withdrawn at any time, where it is the lawful basis used.
We share personal data only where there is a legitimate and lawful reason to do so. This may include sharing with:
- Awarding bodies and validation partners
- Regulatory and statutory authorities
- Student loan, funding, or visa related bodies
- External auditors, professional advisers, or service providers
All data sharing is governed by appropriate agreements and safeguards.
7
Data Storage and Security
Personal data is stored securely, whether in electronic or paper form. We apply proportionate technical and organisational measures to protect data against:
- Unauthorised access
- Loss or destruction
- Alteration or disclosure
Access to personal data is restricted to staff who need it to perform their duties, and staff receive training on data protection responsibilities.
Personal data is retained only for as long as necessary, in line with legal, regulatory, and operational requirements. Retention periods reflect sector guidance and contractual obligations with awarding bodies.
Once data is no longer required, it is securely destroyed or anonymised.
Under UK GDPR, individuals have the right to:
- Access their personal data
- Request rectification of inaccurate or incomplete data
- Request erasure, where applicable
- Restrict or object to processing in certain circumstances
- Request data portability, where relevant
- Withdraw consent, where consent is the lawful basis
Requests can be made in writing using the contact details above. We will respond within statutory timescales.
10
Cookies and Website Use
Our website uses cookies and similar technologies to support functionality and analyse usage. Further detail is provided in the Cookies Policy available on the website.
If you have concerns about how your data is handled, you should contact Lakeshore Management College in the first instance.
You also have the right to lodge a complaint with the UK Information Commissioner's Office:
Organisation:Information Commissioner's Office
This Data Protection and Privacy Notice is reviewed regularly and updated where necessary to reflect changes in law, regulation, or institutional practice.
Questions? For any data protection enquiries, please contact us at
dataprotection@lakeshoremc.uk.