London Business School student privacy policy

This statement is intended to provide specific information to students currently enrolled in a degree programme at LBS. This statement needs to be read in conjunction with the LBS’ overarching privacy policy.

The London Business School (LBS) is a graduate business school established in the UK by Royal Charter (RC000721). Founded in 1964, we are a member institution of the University of London.

The Degree Education Directorate of LBS oversees all aspects of your student experience, including the recruitment and admissions process, programme management, timetabling, assessment, and global experiences.

We collect and process student personal data to manage your experience as a student at LBS. The following types of personal data collected and processed include:

• Full name
• Date of birth
• Gender
• Contact details – address, phone number, email address
• Bank and financial information, including funding information (where applicable)
• Country of residence and nationality
• Employment history information
• Education history information, including GMAT, GRE and Executive Assessment scores
• Languages spoken
• Legal status information – Visa information; passport number/copy of passport/Biometric residents permit
• Images and photos (including through lecture capture)
• Dietary requirements.

Special category personal data (otherwise known as sensitive personal data), is also collected and processed when required. These personal data types can include:

• Next of Kin and/or emergency contact information
• Medical and health information
• Information on disabilities and associated reasonable adjustments required
• Details on extenuating circumstances (if applicable)
• Equality data – for equality monitoring and compliance reporting requirements:
  

  • Ethnicity; Religion; Sexual orientation

Certain data is also collected and attached to the person identifiable student record, including:

• Student attendance record
• Student transcript and grades
• Student work product
• Student misconduct record (if applicable)

LBS collects information about how you use LBS mobile apps, websites or other School-related online content, and the device(s) you use to access these services. This includes collecting unique online identifiers such as IP addresses, which are numbers that can uniquely identify a specific computer or other network device on the web. This information is collected in the course of submitting response to surveys. For more information, please see section 10 and 11 of the LBS policy, on LBS’s use of cookies and similar technologies.

LBS collects, stores, processes and shares your personal data to deliver to you the degree programme that you are enrolled on and manage your relationship with LBS during your time as a student and then as an alumni. Your personal data will be used for the following purposes:

• Programme administration, including associated courses and event administration with external partner organisations
• Providing academic and pastoral support and guidance and monitoring progression
• Administering the assessment process (including reasonable adjustments) and your academic record
• Enabling effective communications with you
• Providing you with feedback
• Administering the financial aspects of your relationship with LBS and any funders
• Administering exchange programmes and global business experiences
• Administering career guidance and support
• Meeting compliance reporting requirements e.g. attendance monitoring for UKVI reporting and HESA returns:
  (see https://www.hesa.ac.uk/about/regulation/data-protection/notices)
• Supporting your health, safety and welfare requirements
• Enabling LBS to carry out security, extenuating circumstances, disciplinary, complaint, and quality assurance processes
• Enabling LBS to produce statistics and research for internal quality improvement and statutory reporting purposes
• Enabling LBS to monitor against our responsibilities under equalities legislation
• Continue to support you and maintain a relationship with you as an alumni after you have graduated (for more information, please see Alumni privacy policy).

Whenever processing data for these purposes, we will ensure we always keep your personal data rights in high regard and take account of them. You have the right to object to this processing if you wish. See section 9 of the LBS privacy policy for more details. Please bear in mind that if you object, this may affect our ability to carry out the tasks, mentioned above, for your benefit.

We will notify you before using your personal information for any other means.

We will not normally disclose any other personal information about you to other external enquirers or organisations without your consent unless it is in your vital interests to do so, for example in an emergency situation.

We will hold all personal data collected on our systems for the duration of your studies to enable effective delivery and support is provided to you throughout your programme.

LBS considers its relationship with students, alumni, donors and other friends to be lifelong. After you have graduated, we may hold on to personal data that facilitates that ongoing relationship unless you tell us you no longer wish to hear from us.

Should you request your data be erased after you graduate, we will safely dispose of all information. We will continue to retain a core set of personal data (name, class, year of graduation, unique LBS identification reference, academic transcript and date of birth) to maintain records of your academic qualification(s) and to meet tax, accounting and compliance obligations.

The Data Protection Act 2018, UK GDPR and EU GDPR affords people certain protection in the case of automated individual decision-making (i.e., when a computer makes a significant decision about an individual based on personal information).

LBS strives to attract the best talent from around the globe and promises a truly global learning experience. LBS has automated decision-making procedures built into its processes to support the admissions process and to administer streams and groups to deliver a globally representative experience for each student.

You have the right to information about the reasoning behind any decisions taken by automated means.

See section 6 of LBS privacy policy.

The legal basis for processing your personal data is under contract, whereby the processing is necessary for a contract you have with us. In certain circumstances we may otherwise process your personal data if we have a legitimate interest in doing so and we are not infringing any of your rights and freedoms.

When we process your personal data for our legitimate interests, we will consider and balance any potential impact on you and your rights under data protection and any other relevant law. Our legitimate business interests do not override your interests. We will not use your personal data in circumstances where your rights and freedoms override our legitimate interests, unless we have your consent or are otherwise required or permitted to by law.

Your information may be shared with our educational partners where necessary to deliver aspects of a programme. This would happen when, for example, you request information for or apply to join one of our partnership degree programmes (e.g. EMBA-Global Americas & Europe, EMBA-Global Asia, or Global Masters in Management). When doing this, we will provide further information at the time of collecting your information.

List of our degree programme partners:

EMBA-Global Americas & Europe programme
- Columbia Business School, Columbia University in the City of New York, 3022 Broadway, New York, NY10027, USA

EMBA-Global Asia programme
- Columbia Business School, Columbia University in the City of New York, 3022 Broadway, New York, NY10027, USA
- The University of Hong Kong, Pokfulam, Hong Kong.

Global Masters in Management programme
School of Management, Fudan University. 670 Guoshun Rd, WuJiaoChang, Yangpu Qu, Shanghai Shi, China, 200433.

Your information may also be shared with partner organisations to deliver the global business experiences programme and exchange programmes.

Although most of the information we store and process stays within the UK, some information may be transferred to countries outside the European Economic Area (EEA). This may occur if, for example, one of our partner’s servers are located in a country outside the EEA. These countries may not have similar data protection laws to the UK; however, we will take steps to make sure they provide an adequate level of protection in accordance with UK data protection law. By submitting your personal information to us you agree to this transfer to or storing or processing of data at a location outside the EEA.

LBS sometimes uses third parties to process your information on our behalf, for example to provide services or analysis. We require these third parties to comply strictly with your instructions and that they do not use your personal information for their own business purposes, unless you have explicitly consented to them using your personal information in this way.

You have the following rights:

• To request a copy of the information we hold about you via a Subject Access Request.
• To have your personal data updated or amended if it is incorrect.
• To ask us to remove your personal information from our records (exceptions may apply).
• To ‘block’ or suppress processing of your personal data.
• To obtain a copy of your personal data so that it can be reused for your own purposes in another IT environment.
• To object to processing.

To make a complaint to the Information Commissioner’s Office (ICO)

Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF
United Kingdom
Tel: +44 (0)303 123 1113 (local rate)
Web: ico.org.uk

For more information refer to section 9 of the LBS privacy policy.

We may change this policy from time to time. If there are any significant changes to the way we manage your data, we will notify you.