Privacy policy

MCL Privacy Policy for Students 2020

MCL College of Law  Manchester and Lahore

Privacy Notice General

This policy is in accordance with Data Protection Law and specifically with General Data Protection Regulations (GDPR), MCL will only collect and use personal data you have given to MCL for the purposes of your admission and/or employment MCL tell you about.

MCL processes your personal data both directly and on behalf of the Education & Skills Funding Agency. In both cases, MCL only processes your data where there is a lawful purpose for doing so.  Under GDPR, UK Legislation for Data Protection the lawful purpose/s for which MCL process your personal data are:-

The data  processing is necessary for a contract the MCL has with you, or because you have asked MCL to take specific steps before entering into a contract. For example when you join a course at the MCL, you provide MCL with information in order that MCL can provide you with the course you have requested. This is called your Learning Agreement.

The data processing is necessary for the MCL’s legitimate interests or the legitimate interests of a third party. For example, MCL might contact you in relation to other opportunities that you may be interested in or MCL may keep in touch with you after you leave to see how you are getting on and if your course had been helpful to you.

The data processing is necessary for the MCL to perform a task in the public interest or for its official functions, and the task or function has a clear basis in law. For example MCL will process your data and may share it with the Office of Student (Regulatory Body) ASICK, Quality Assurance Agency or other any other Governmental Departments in UK or Pakistan  as they have a statutory obligation under the Education  Act in order to ensure that they have the opportunity to progress into appropriate education, training or employment.

MCL have a Data Protection Policy that you are welcome to review.

Application to the MCL

When you make an enquiry or application to the MCL,  either on paper, by phone or on line, MCL process the personal information that you have supplied in order to respond to your enquiry and progress your application. Your employment history, qualifications and references provided on the Application Form will be used to help to determine the offer MCL make to you.

If you don’t choose to join a course of study within 6 years of making an enquiry, or if you tell MCL that you don’t want MCL to keep your information anymore, MCL will remove your details from the system. If you wish MCL to delete your application information, you can request this by contacting

Enrolment and course delivery

If you go on to enrol MCL, will collect and use further Personal Data in order to process your enrolment and deliver your chosen course or learning programme.

MCL will store, use and share the information you have provided on the enrolment form for the lawful purposes referred to above.

Occasionally MCL may share your data if  required to do so by law e.g. in connection with criminal investigations and/or any investigations by the awarding bodies, universities or Government Agencies, including MCL lawyers

All of the information collected at enrolment is required by MCL to deliver your course to you, to monitor your progress and to provide evidence to funding agencies in order to draw down funding on your behalf or in order to facilitate bursary or other support payments, or the collection of tuition fees.

At enrolment you will also be asked how you prefer to be contacted by MCL e.g. email, phone, written. MCL will contact you via your chosen media, unless you decide to opt out of being contacted for surveys, follow up and marketing.

During your course MCL will process additional data about you including your attendance history, your progress, your grades and any learning support you may require including support during examinations. This information is important in enabling MCL’s  staff to provide you with a high quality service to meet your individual needs.

At enrolment MCL will ask you to allow MCL to take a photo of you to record on our computer system and replicate on your college ID badge. The reason MCL ask for this is to help us to ensure that only authorised persons gain access to MCL premises in order that MCL can provide you with a secure and safe learning environment.  Sometimes during the course of your studies with MCL  may take photographs of you which will be held in a database of photographs/videos.  These may be used to record learning and within publicity materials such as brochures, prospectuses, advertisements or on the MCL’s Website, YouTube and social networking pages.  MCL fully recognises its duties and obligations under GDPR Data Legislation and undertakes that all steps will be taken to ensure that the photographs will be used in an appropriate manner, stored in a controlled location and that personal data regarding identities and locations of the subjects will not be printed.

At, or soon after enrolment MCL  may request banking details or card details in order to facilitate the collection of tuition fees, or the processing of support payments. These details will be included within MCL’s finance system and will not be able to be deleted.

CCTV is used in some parts of MCL for the purpose of safeguarding and crime prevention. Digital images are securely stored with access restricted to specific security staff. CCTV digital images are retained for 3 months and then they are destroyed.

MCL will normally retain your personal data for six years after you have completed a course at the college. If your course has been funded through the European Social Fund, MCL are required to retain your data for up to 15 years after you leave us.  Any information that you have stored on MCL’s email and network will be deleted 90 days after the end of the academic year in which you completed your course.

Security of your personal data

The security of your personal data is of paramount importance to MCL

At all times the MCL ensures that technical and organisational measures are in place in order to protect against unauthorised or unlawful processing of your data and to protect against its accidental loss, destruction or damage.

To ensure the confidentiality, integrity and availability of MCL information, a number of technical and administrative controls are in place; these include the use of software and hardware to monitor network activity to identify unauthorised attempts to gain access to systems, modify information or cause damage and ensuring that information is encrypted following industry best practices.

Unauthorized attempts to modify MCL’s services and information are strictly prohibited and may be punishable by law.

Shared data

MCL will share your data with specific other organisations such as the Office of Students , Exam Awarding Organisations, and  sub-contracted partners who may process your data on our behalf.   MCL will share data with the other organisations, such as your previous school (for young people).

MCL records and shares information regarding any safeguarding concerns relating to children, young people or vulnerable adults.  This is in line with legislative and statutory responsibilities for safeguarding.

At enrolment, 16-18 year olds students are asked to provide parental contact details including name, address, phone number and email. The reason for this is that MCL normally provide feedback to parents in relation to your progress and attendance. Similarly, all students are asked for an emergency contact number in case of an emergency situation which risks the health or wellbeing of students. These contact details will be used for no other reason.

The progress and attendance of apprentices is shared with their employers and this data sharing is part of the Apprenticeship Agreement that Apprentices, employers and the college sign together at the outset of training.

When MCL share data with a partner or 3rd party organisation, a Data Sharing Agreement is in place. This specifies the nature of the data and the purpose of sharing the data. MCL only share data where there is a lawful reason to do so. Sharing of data is controlled by strict security protocols which are specified in the Data Sharing Agreement.

Subject access

You have the right to make a request for the personal data that the MCL holds about you so that you are sure we are accurately processing that which MCL has told you about. If you wish, you can request electronic copies of your personal data. Usually there will be no charge for this but occasionally it may require a nominal administrative charge

If you want to update or remove any of the personal data that you have provided you can make a request to do so by contacting us at

If you require any further information about the content of this Privacy Notice, please contact:-

Data Controller, Tahir Adam

Download this policy

Skip to toolbar