Privacy Policy

MCHE Privacy Policy for Students 2020

MCHE College of Law  Manchester and Lahore

Privacy Notice General

This policy is in accordance with Data Protection Law and specifically with General Data Protection Regulations (GDPR), MCHE will only collect and use personal data you have given to MCHE for the purposes of your admission and/or employment MCHE tell you about.

MCHE processes your personal data both directly and on behalf of the Education & Skills Funding Agency. In both cases, MCHE only processes your data where there is a lawful purpose for doing so.  Under GDPR, UK Legislation for Data Protection the lawful purpose/s for which MCHE process your personal data are:-

The data  processing is necessary for a contract the MCHE has with you, or because you have asked MCHE to take specific steps before entering into a contract. For example when you join a course at the MCHE, you provide MCHE with information in order that MCHE can provide you with the course you have requested. This is called your Learning Agreement.

The data processing is necessary for the MCHE’s legitimate interests or the legitimate interests of a third party. For example, MCHE might contact you in relation to other opportunities that you may be interested in or MCHE may keep in touch with you after you leave to see how you are getting on and if your course had been helpful to you.

The data processing is necessary for the MCHE to perform a task in the public interest or for its official functions, and the task or function has a clear basis in law. For example MCHE will process your data and may share it with the Office of Student (Regulatory Body) ASICK, Quality Assurance Agency or other any other Governmental Departments in UK or Pakistan  as they have a statutory obligation under the Education  Act in order to ensure that they have the opportunity to progress into appropriate education, training or employment.

MCHE have a Data Protection Policy that you are welcome to review.

Application to the MCHE

When you make an enquiry or application to the MCHE,  either on paper, by phone or on line, MCHE process the personal information that you have supplied in order to respond to your enquiry and progress your application. Your employment history, qualifications and references provided on the Application Form will be used to help to determine the offer MCHE make to you.

If you don’t choose to join a course of study within 6 years of making an enquiry, or if you tell MCHE that you don’t want MCHE to keep your information anymore, MCHE will remove your details from the system. If you wish MCHE to delete your application information, you can request this by contacting

Enrolment and course delivery

If you go on to enrol MCHE, will collect and use further Personal Data in order to process your enrolment and deliver your chosen course or learning programme.

MCHE will store, use and share the information you have provided on the enrolment form for the lawful purposes referred to above.

Occasionally MCHE may share your data if  required to do so by law e.g. in connection with criminal investigations and/or any investigations by the awarding bodies, universities or Government Agencies, including MCHE lawyers 

All of the information collected at enrolment is required by MCHE to deliver your course to you, to monitor your progress and to provide evidence to funding agencies in order to draw down funding on your behalf or in order to facilitate bursary or other support payments, or the collection of tuition fees.

At enrolment you will also be asked how you prefer to be contacted by MCHE e.g. email, phone, written. MCHE will contact you via your chosen media, unless you decide to opt out of being contacted for surveys, follow up and marketing.

During your course MCHE will process additional data about you including your attendance history, your progress, your grades and any learning support you may require including support during examinations. This information is important in enabling MCHE’s  staff to provide you with a high quality service to meet your individual needs.

At enrolment MCHE will ask you to allow MCHE to take a photo of you to record on our computer system and replicate on your college ID badge. The reason MCHE ask for this is to help us to ensure that only authorised persons gain access to MCHE premises in order that MCHE can provide you with a secure and safe learning environment.  Sometimes during the course of your studies with MCHE  may take photographs of you which will be held in a database of photographs/videos.  These may be used to record learning and within publicity materials such as brochures, prospectuses, advertisements or on the MCHE’s Website, YouTube and social networking pages.  MCHE fully recognises its duties and obligations under GDPR Data Legislation and undertakes that all steps will be taken to ensure that the photographs will be used in an appropriate manner, stored in a controlled location and that personal data regarding identities and locations of the subjects will not be printed.

At, or soon after enrolment MCHE  may request banking details or card details in order to facilitate the collection of tuition fees, or the processing of support payments. These details will be included within MCHE’s finance system and will not be able to be deleted.

CCTV is used in some parts of MCHE for the purpose of safeguarding and crime prevention. Digital images are securely stored with access restricted to specific security staff. CCTV digital images are retained for 3 months and then they are destroyed.

MCHE will normally retain your personal data for six years after you have completed a course at the college. If your course has been funded through the European Social Fund, MCHE are required to retain your data for up to 15 years after you leave us.  Any information that you have stored on MCHE’s email and network will be deleted 90 days after the end of the academic year in which you completed your course.

Security of your personal data

The security of your personal data is of paramount importance to MCHE

At all times the MCHE ensures that technical and organisational measures are in place in order to protect against unauthorised or unlawful processing of your data and to protect against its accidental loss, destruction or damage.

To ensure the confidentiality, integrity and availability of MCHE information, a number of technical and administrative controls are in place; these include the use of software and hardware to monitor network activity to identify unauthorised attempts to gain access to systems, modify information or cause damage and ensuring that information is encrypted following industry best practices.

Unauthorized attempts to modify MCHE’s services and information are strictly prohibited and may be punishable by law.

Shared data

MCHE will share your data with specific other organisations such as the Office of Students , Exam Awarding Organisations, and  sub-contracted partners who may process your data on our behalf.   MCHE will share data with the other organisations, such as your previous school (for young people).

MCHE records and shares information regarding any safeguarding concerns relating to children, young people or vulnerable adults.  This is in line with legislative and statutory responsibilities for safeguarding.

At enrolment, 16-18 year olds students are asked to provide parental contact details including name, address, phone number and email. The reason for this is that MCHE normally provide feedback to parents in relation to your progress and attendance. Similarly, all students are asked for an emergency contact number in case of an emergency situation which risks the health or wellbeing of students. These contact details will be used for no other reason.

The progress and attendance of apprentices is shared with their employers and this data sharing is part of the Apprenticeship Agreement that Apprentices, employers and the college sign together at the outset of training.

When MCHE share data with a partner or 3rd party organisation, a Data Sharing Agreement is in place. This specifies the nature of the data and the purpose of sharing the data. MCHE only share data where there is a lawful reason to do so. Sharing of data is controlled by strict security protocols which are specified in the Data Sharing Agreement.

Subject access

You have the right to make a request for the personal data that the MCHE holds about you so that you are sure we are accurately processing that which MCHE has told you about. If you wish, you can request electronic copies of your personal data. Usually there will be no charge for this but occasionally it may require a nominal administrative charge

If you want to update or remove any of the personal data that you have provided you can make a request to do so by contacting us at

If you require any further information about the content of this Privacy Notice, please contact:-

Data Controller, Tahir Adam

Download this policy