This privacy notice explains when and why we collect personal information about you if you are required to sit an English language online exam and how we will use this information including the ways we might share this with others. It also explains how we keep your information secure and the rights you have in relation to the information we hold about you.

We collect and use your information for the following purposes.

• Purpose 1: Identify prior knowledge and skills in the English Language

  We collect and use your information to assess whether you reach the required level for English language to meet the entry requirements of your course.

• Purpose 2: Maintain records of participation

  We collect and use your information to maintain records about your participation in an exam for the purposes of administration and reporting:

• Purpose 3: Report on performance

  We collect and use your information to report on your performance in an exam

• Purpose 4: To comply with auditing requirements.

  The data we hold about you may be viewed by BNU staff carrying out internal audits or by staff of external companies or organisations carrying out external audit on our operations. We collect and use your information to:

  • perform audit activities to ensure that we are complying with our documented processes
  • perform audit activities to ensure that we comply with legal or regulatory requirements.

To process your personal data, the University must have a basis in data protection law. We will broadly rely on:

Public Task Article 6 (1)(e). BNU will process your personal data to carry out a task or activity that is within our core purpose as a statutory higher education corporation, to deliver higher education and carry out research. This includes:

• Purpose 1: Identify prior knowledge and skills in the English Language
• Purpose 2: Maintain records of participation
• Purpose 3: Report on performance
• Purpose 4: To comply with auditing requirements.

The personal information we collect may include (as applicable):

• Name
• Contact details (including phone number and email address)
• Student Number
• Course of study
• ID documents such as your photo ID.

The above lists is not exhaustive but is indicative of the main types of personal information processed by the University about you which may be used to facilitate English language assessments.

Most of the information above will have been provided by you and will have been collected through your original application to BNU or a Partner College, and through the work undertaken on your course.

Your personal information will be shared with the organisations listed below. Any information will be disclosed in accordance with the provisions and obligations of the Data Protection Act. Please note this is not an exhaustive list and your data may also be shared in accordance with the wider university privacy notices which can be accessed here.

We may transfer your personal data outside the UK in the following circumstances: 

Where we use a cloud-based IT system which may hold your data, and the data in the cloud is stored on servers located outside the UK in a country which is not subject to an adequacy decision. In these circumstances we safeguard your data through undertaking appropriate checks on the levels of security offered by the cloud provider and entering into a contract with them which applies protections of the same type and level required by data protection laws within the UK.

Your data will be retained in accordance with the Records Retention Schedule a summary of which can be accessed here.

The following rights apply to the personal data collected in this notice. Please contact dpofficer@bnu.ac.uk if you wish to exercise your rights: 

• Right of access to confirmation of processing and copies of your personal data
• Right to rectification if personal data we hold about you is incorrect
• Right to restrict processing of your personal data
• Right to complain to the Information Commissioner’s Office about how we handle your data. 

In some circumstances you also have the following rights: 

• Right to object to our processing of your personal data
• Right to request erasure of your personal data (deletion)
• Right to data portability,

If you have any concerns with regards to the way your personal data is being processed or have a query about this Notice, you can contact the Data Protection Officer directly by e-mail dpofficer@bnu.ac.uk or by post.

Data Protection Officer 
Buckinghamshire New University 
Queen Alexandra Road
High Wycombe 
Buckinghamshire HP11 2JZ 

If you remain unhappy then you have the right to complain to the Information Commissioners Office: 

Information Commissioner’s Office 
Wycliffe House 
Water Lane 
Wilmslow 
Cheshire  SK9 5AF 

BNU is registered as a controller with the Information Commissioner’s Office. Our registration number is: Z772474X
 

This privacy notice will be reviewed on an annual basis or revised more frequently if necessary. 

This notice was last reviewed on 18 June 2025.