GDPR

Data Protection and Privacy

Data Protection Law controls how West Thames College uses the personal information provided by individuals who work for us, study with us, apply to study with us, or access our services.

Our Privacy Statements describe how we use the personal information we are provided with by members of the public. You may be asked to provide personal information when you make an enquiry, become an applicant or student, are a client, or use the services we offer.

If you provide us with information, it will only be used in the ways described in our Privacy Statements. Our statements will be updated from time to time and the latest versions will always be published here on our website.

Privacy Policy

West Thames College is a Data Controller registered with the Information Commissioner’s Office (ICO). We process personal information in accordance with UK Data Protection Law and our Data Protection Policy.

Data Protection Policy
Student Privacy Data Policy
Staff Privacy Data Policy
Nursery Privacy Data Policy
Supplier Privacy Data Policy
Visitor Privacy Data Policy

Contacts

All written correspondence relating to Data Protection should be addressed to:

West Thames College

London Road

Isleworth

TW74HS

The Data Protection Officer, appointed by West Thames College to provide independent advice and assurance in relation to the governance and management of data protection, is Prunella D'Souza, Executive Assistant to the CEO & Principal.

Please This email address is being protected from spambots. You need JavaScript enabled to view it. to send any communication for the attention of the Information Office.

Requests
Subject Access Requests

The Data Protection Act 2018 and UK Data Protection Law give individuals the right to obtain confirmation as to whether their personal data is being processed and, where applicable, to access the personal data we hold about them. This right of access is known as a Subject Access Request (SAR).

We aim to provide access to personal data within one month of receiving a Subject Access Request. If a request is complex, an extension of up to a further two months may be required. Where this is the case, we will communicate with the individual making the request and explain the reasons for the extension.

A copy of the information will normally be provided free of charge. However, a reasonable fee may be charged where a request is manifestly unfounded or excessive, or where an individual makes repeated requests. We will notify the individual if we intend to make a charge and explain why.

Click an option below to find out more:

Who can make a Subject Access Request?

Subject Access Requests may be made by:

  • The individual whose personal data is being requested (the Data Subject).
  • A representative of the Data Subject who has written consent, such as a parent, solicitor or court-appointed representative.
  • A parent or guardian of a child under 16 years of age, where appropriate and where this is in the child's best interests. The views and rights of the child will be taken into account.
How can I make a Subject Access Request?

If you would like to see the data that the college holds about you, please email This email address is being protected from spambots. You need JavaScript enabled to view it..

Please note that we will use reasonable means to verify the identity of the individual making the request. We may require individuals to provide appropriate proof of identity before we release personal information.

Requests to Delete Personal Data

One of the rights provided by UK Data Protection Law is the right to request the deletion or removal of personal data in certain circumstances. This is sometimes referred to as the ‘right to be forgotten’ or the ‘right to erasure’.

An individual may have the right to have their personal data erased and to prevent further processing in specific circumstances, including:

  • Where the personal data is no longer necessary for the purpose for which it was originally collected or processed.
  • Where the individual withdraws their consent, where consent is the legal basis for processing.
  • Where the individual objects to the processing and there is no overriding legitimate interest for continuing the processing.
  • Where the personal data has been unlawfully processed.
  • Where the personal data must be erased to comply with a legal obligation.

The right to erasure is not an absolute right. There are circumstances where West Thames College may be required or permitted to retain or continue processing personal data. If we are unable to comply with a request for erasure, we will explain the reasons to the individual.

How can I make a request to have my personal data deleted?

Please contact Prunella D'Souza, Executive Assistant to the CEO & Principal by This email address is being protected from spambots. You need JavaScript enabled to view it..

Each request will be considered on a case-by-case basis and in accordance with applicable data protection legislation.

Can I speak to the Data Protection Officer before I make a Subject Access Request or Request for Erasure?

Yes. We take all concerns and questions relating to data protection and the use of personal information seriously.

If you would like to speak to the Data Protection Officer about a question or concern before making a formal request, please contact the Information Office using the details provided above.

Prunella D'Souza
West Thames College
E: This email address is being protected from spambots. You need JavaScript enabled to view it.
T: 020 8326 2323

 

Student Privacy Data Policy

Staff Privacy Data Policy

Nursery Privacy Data Policy

Supplier Privacy Data Policy

Visitor Privacy Data Policy 

Apply Now

Select a course you've previously looked at or search for a new one, confirm the details and start your application.

Know what you're looking for?