Privacy Policy

1. Introduction
Bath Spa University (“we,” “us,” or “our”) is committed to protecting your privacy and ensuring that your personal data is handled securely and in compliance with data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Information We Collect
We may collect and process the following types of personal data when you use our website:

• Personal details such as name, email address, and contact information (if provided through forms or correspondence)
• Technical data including IP address, browser type, and usage statistics
• Information related to research, event registrations, or subscriptions to our communications

3. How We Use Your Information
We use your personal data to:

• Provide and improve our website services
• Respond to your enquiries and provide requested information
• Manage event registrations and subscriptions
• Ensure website security and monitor usage trends
• Comply with legal obligations and university policies

4. Legal Basis for Processing
We process personal data under the following lawful bases:

• Your consent (where applicable, e.g., for marketing communications)
• Performance of a contract or service request
• Legal obligations (e.g., compliance with regulatory requirements)
• Legitimate interests (e.g., improving our services and security)

5. Data Sharing and Security
We do not sell or share your personal data with third parties except:

• Where required by law or regulatory bodies
• With service providers assisting in website operation under strict confidentiality agreements
• As necessary for university research, administration, or engagement with partners

We implement appropriate technical and organisational measures to safeguard your data.

6. Cookies and Tracking Technologies
Our website uses cookies to enhance user experience. You can manage cookie preferences via your browser settings. For more details, please refer to our [Cookie Policy].

7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy or to comply with legal obligations.

8. Your Rights
Under data protection law, you have the right to:

• Access, correct, or request deletion of your data
• Withdraw consent for processing where applicable
• Restrict or object to data processing
• Lodge a complaint with the Information Commissioner’s Office (ICO)

9. Contact Us
For privacy-related queries or to exercise your rights, please contact us via the contact page.

This policy was last updated in December 2042. We may update it periodically, so please check for any changes.