This Notice explains how Leeds Arts University will collect and use personal data relating to individuals who participate in research projects and activities.
Throughout this Notice, “University” "we", "our" and "us" refers to Leeds Arts University and "you" and “your” refers to those individuals who take part in a research project or activity that is being undertaken by the University. When we collect, process or otherwise use your data, we are known as the Data Controller for that data.
This policy, alongside the participant information sheet relevant to the specific project or activity, outlines what information we hold and how we use it. Personal information is information that relates to you and which identifies, or could be used to identify, you. The University is committed to looking after any personal information you provide us in accordance with Data Protection Legislation, including the UK General Data Protection Regulations (UK GDPR) as amended, the EU GDPR and the Data Protection Act.
If you have any questions about your participation in a research project or activity, including how your personal data will be processed, then please contact the University research staff indicated on your participant information sheet.
If you have any other questions, or would like any further information about how the University processes your personal data more broadly, then please contact dpo@leeds-art.ac.uk.
Where do we get your personal data from?
We obtain your personal data from the following sources:
When you sign up to, and participate in, one of our research projects or activities. This may include:
Participant consent forms
Live in-person interviews with you, which may be filmed and/or sound recorded
Live virtual interviews with you, which may be filmed and/or sound recorded
Online surveys
Paper-based surveys
Workshops
Any other meetings, discussions or specific activities which relate to the research projects
What personal data do we hold?
The personal data that we collect and hold about you will depend on the research project or activity that you are participating in. As a minimum, regardless of the research project or activity, we are likely to collect your:
Name
Date of Birth
Address
Phone Number
Consent preferences that you have provided, including information participant consent forms as well as any project specific consents that may apply
Engagement record in the research activity, including attendance at sessions
Information that you submit to us as part of the research project or activity, including any answers to questionnaires or surveys or information disclosed during interview or workshops which may include your personal information
Any specific categories of personal data that may be required to be collected as part of a particular research project or activity will be made clear to you in the participant information sheet.Â
Will we send your data to third party organisations?
Your personal data may be shared with third party organisations that we are collaborating with on a particular research project or activity. We will make it clear to you in the participant information sheet if we are collaborating with any organisations who may also receive or have access to your personal data. We will also make it clear if a research project or activity is being funded by any third parties, who may also have access to personal data as a result.
We do not otherwise sell or transfer personal data to any third parties unless you have consented to this or this is permitted by law. This may include, for example, instances where we believe that you, or someone else, is at serious risk of being harmed. We may also share information with third parties where we are legally required to do so, for example as part of a court case where an Order has been issued to us.
When we use third party service providers, we only disclose to them any personal information that is necessary for them to provide their service. This includes the third party provider we use to send you surveys.
Occasionally we may need to send your personal data outside of the UK. Where this is the case, we will ensure that adequate levels of protection are in place to support the security of the transfer. Adequacy regulations in the UK currently apply to countries in the European Economic Area and countries covered by existing European Union adequacy decisions. Where these regulations do not apply, additional safeguards will be put in place for any necessary restricted transfer of your personal data.
How will we communicate with you?
Once you have signed up to participate in a research project or activity with Leeds Arts University, our staff will communicate with you via email. Any other research project or activity specific communication channels will be outlined to you in the participant information sheet.
We may use third party processor communication platforms to share information which could include your personal data. This will only ever to be to facilitate the University’s standard processing activities in instances where it is necessary for us to do so.
Your rights as a data subject
Data Protection Legislation gives you a number of rights to protect your personal data and its use. You have the right to:
Withdraw consent where that is the lawful basis of our processing. Please see the section later on in this notice as to how consent is used for research projects and activities, and the instances in which it may and may not be withdrawn.
Access your personal data that we process and obtain a copy of your data in a commonly used electronic format
Rectify inaccuracies in personal data that we hold about you
Be forgotten. This means that in certain circumstances you can request that your details be removed from systems that we use to process your personal data
Restrict the processing of your personal data in certain circumstances
Object to certain processing of your personal data by us
If you would like to exercise any of these rights you can contact us at dpo@leeds-art.ac.uk. Please see ico.org.uk for further information on the above rights.
How can I complain?
If you have any concerns or complaints, you can contact the Data Protection Officer at: dpo@leeds-art.ac.uk.
You can also lodge a complaint with the Information Commissioner’s Office. They can be contacted via their website, or at:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline number: 0303 123 1113
ICO website: ico.org.uk/concerns
Legal basis for processing your data under Data Protection Legislation and retention periods
We will only keep your information for as long as is necessary for us to fulfil the purposes we collected it for, including satisfying any legal, accounting or reporting requirements. Sometimes we may anonymise personal information so that you are no longer identifiable by the data. In these cases, we may use this information without further notice to you.
We only process your personal data where we have established a legal basis for processing under Article 6 of the UK GDPR, and Article 9 if we are processing your special category personal data. There are 6 bases for processing that are laid out under Article 6 of the UK GDPR, which we use to support our processing of your personal information. In addition, the UK GDPR requires us to meet an additional legal basis for processing under Article 9 where we are processing your special category personal data. The special category information that we collect will depend on the nature of the specific research project or activity, but may include information relating to your health (for example if you have a disability), your ethnicity or your sexual orientation.
Typically, when Leeds Arts University is undertaking research projects or activity, we will process your personal data under the legal basis of:
Article 6.1(e) of the UK GDPR, which is when processing is necessary for the performance of a task carried in the public interest. Much of the processing we undertake is under this basis, including research activity, within our capacity and core functions as an educational establishment.
In addition, when we are processing your special category personal data as part of research projects or activities, we will do so under the basis of:
Article 9.2(j) of the UK GDPR, which is when processing is necessary for research purposes or statistical purposes. This condition requires measures to be put in place to safeguard your data and your interests, which are described within this privacy notice.
Consent
We do not generally use consent as the legal basis for processing your personal data when we are undertaking research projects or activity. Relying on consent requires that you are also able to effectively withdraw your consent at any time. This would often not be possible without affecting the validity and integrity of the research process, including outputs.
Consent is requested for active participation in research projects or activity, which can be withdrawn at any time. This applies to participation in workshops and interviews, and completing surveys, and means that you can choose not to complete these surveys or attend these sessions if you change your mind. However, for the avoidance of doubt, and as outlined above, withdrawal of your consent from active participation does not mean that we will always be able to withdraw your personal data from the research activity or project completely. We will remove your data wherever it is possible to do so without affecting the validity and integrity of the research activity, but this may not always be possible. The participant information sheet will outline the date from which we would not be able to withdraw your data.
There are very limited circumstances where we may ask for consent for specific uses of your data as part of a research project or activity. If we want to use your personal data in an identifiable way as part of our research outputs, we will always ask for your specific consent before we do so. This includes your name, any photos or footage that you clearly appear in, or any other information that you share with us as part of the research activity or project which clearly identifies you. Consent for usage of this material can be withdrawn at any time prior to it being used in publication, however please be aware that withdrawal of your consent for this specific activity does not affect the legal bases of processing your personal data for the research itself, as described above.
Consent collection for specific use of your data as outlined in this privacy notice will be collected as part of a participant consent form . This form will also ask you to confirm that you have been given access to this privacy notice.
Changes to this Information
We may update this information and we will notify you when we do this where necessary. This document was last updated on 9 July 2025.