Privacy Notice

Student Central Asymptomatic Test Centre

The University is subject to data protection laws such the GDPR and the Data Protection Act 2018. This is a notice which explains what we will do with your personal data in this test centre.

Your health data and the results of your test

The results of your test and any other health data will be collected on NHS machines and managed according to NHS Test and Trace privacy notice. The University will not have access to this information.

You can view the NHS privacy notice.

What data is the University collecting and for what purpose?

We need to collect the information in the form for the purposes of managing your booking for the test. This will include:

  • Name
  • Email address (we will send you an email reminder for your appointment)
  • Place of study
  • Intercollegiate Hall (if you are resident)
  • If you are under 18, you will need to indicate this and provide parental consent to be tested
  • Disability access

We will be collecting anonymised reporting of the number of tests completed by place of study for the purposes of helping the University and its member institutions monitor and plan its response to COVID-19. This reporting will not affect you or identify you in any way. 

How do we ensure the collection of the data is lawful? 

The University has to have a valid legal basis to process your personal data. 

  • The University relies on your consent for managing your booking. 
  • Where you are under 18 the University has a legal obligation to collect evidence of your parental consent. 
  • Where you have a disability with a specific access requirement, we have a legal obligation to store the data so we can make sure you are not disadvantaged in accessing the test centre. 

Who will we give this data to? 

The University will not share any data with the NHS. Anonymised data on take-up of the number of appointments made and tests completed will be provided to each member institution. This reporting will not affect you or identify you in any way. 

The University provide this booking form through its Microsoft environment. Microsoft acts as a ‘data processor’, following the University instructions in collecting, storing and disposing of the data. Data is stored in the UK. In exceptional circumstances MS technical staff may access data in the US under appropriate safeguards for support issues. 

How long will we keep your data for? 

The University will retain a record of your appointment for 21 days. Anonymised reporting figures may be kept for longer for monitoring and planning purposes. This reporting will not affect you or identify you in any way.

What happens when I receive my test result? 

The test centre will not have access or be informed of your test result. If you receive a positive test please follow the existing instructions set out by the NHS, your place of study and your accommodation.

Home testing kits

The University is required to keep a 'Test Kit Log' of all those individuals who are given a home testing kit. The log will be kept only for Department of Health and Social Care (DHSC) purposes and the University cannot use it in any other way.

If there is any requirement for additional communications from the DHSC in regards to the home testing kits it will be done via this test log.
The following data will be retained for about you as the test subject:

  • First name
  • last name
  • telephone number
  • email address
  • batch number / date / location for the Home Test Kits you received.

The University will, on behalf of DHSC, retain this data for a maximum of 12 months unless instructed by the DHSC to delete this information at an earlier time.
The NHS privacy notice is on display at our home test collection points and you can download the notice: Download NHS Privacy notice [PDF]

How can I find out more? 

You can find out more about your rights under data protection law, as well as our policies and the contact details of our Data Protection Officer through our data protection web pages.