Data protection, privacy & cookies

The Royal College of Art (the College) uses personal data of people who come into contact with the College. We use this information to enable us to provide education and associated services.

You can find our Privacy notices below which explain how we use personal data. We write each Privacy notice dependent on the individual’s relationship with the College. Please find the relevant one for you.

The College is registered as a Data Controller, with the Information Commissioner’s Office (ICO).

Registration number: Z5688595

Your rights and how to contact us

When the College processes your persona data, you have the following qualified rights:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object
• Rights in relation to automated decision making

To make a request under any of these rights, or to contact us about your personal data please email dpo@rca.ac.uk. Or by writing to:

Governance team
Royal College of Art
Kensington Gore
London SW7 2EU

You also have the right to make a complaint to the Information Commissioner’s Office at www.ico.org.uk. Or by writing to:

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

The RCA website collects data from website visitors for specific purposes that relate to legitimate interests concerning the College’s core activity, as a world-leading university with academic schools and centres in research, knowledge exchange, executive education and innovation. 

The RCA may also use ‘cookies’ and ‘tracking pixels’ on any of its web sites. A cookie is a small text file that is sent from a web server to your browser and may be stored on your computer, designed to collect data for statistical purposes. A tracking pixel is a marker inserted into a website page that connects your data to other information you have made available on other platforms. 

RCA website cookies  and tracking pixels do not collect any identifiable personal information, but can automatically collect data based on visitor browser settings and context (e.g. location, device, browser, preferences) and the use of our websites. You can configure your own browser or social media platforms to control how much of your data is available through cookies and tracking pixels. 

How will we use the data?

• for analytics purposes – to count the number of unique visits to a page or click patterns, and understand the context in which visitors navigate through the website, so that we can improve the content and navigation
• to provide visitors with a tailored and appropriate experience, when they return to a website
• to match profiling data from third parties, to improve our services to users
• to report statistics internally and to regulatory authorities on request
• to measure website performance
• where such storage or access is strictly necessary for the provision of a service requested by the subscriber, visitor or user.

Links to other websites

The RCA website contains links to other websites. We are not responsible for the privacy practices of other sites. We encourage our visitors to be aware when they leave our website, and to read the privacy arrangements of other sites that collect or use personal data.

Subscribers to newsletters or email lists may be contacted when we promote programmes of study or events that may be of interest. Anyone may at any time request us to stop using their personal data for direct marketing purposes via the opt out included in all emails or by contacting: media@rca.ac.uk

By submitting an application, you are consenting to your data being held by QS Enrolment plc, on behalf of the Royal College of Art. Your data will be used for the purposes of dealing with your enquiry, and to send you relevant information about the College.

Neither QS Enrolment plc nor the Royal College of Art will pass your details on to any third party. If you wish to remove yourself from the Royal College of Art database please contact QS Enrolment plc, IDT House, 44 Featherstone Street, London EC1Y 8RN or email admissions@rca.ac.uk.

What personal information do we hold?

We ask applicants to provide us with the following data during the application process:

• name
• date of birth
• gender
• address
• telephone number
• email
• present nationality
• country of birth
• country of permanent residence
• UK Visa status and details
• passport details (Student Visa applicants only)
• English language qualifications (for applicants whose first language is not English), including certificates of award
• institution name, dates of attendance, programme title, result and thesis title for all higher education qualifications, including certificates of award
• institution name, subject, qualification, result and year of award for all further education qualifications
• details and dates of work experience relevant to the application
• details of previous applications to the RCA
• ethnicity
• disability and learning differences
• financial support plans
• criminal convictions
• programme applied for
• personal statement in support of the application
• referee name, position and contact details
• a portfolio of work relevant to the application.

This information is retained in perpetuity on the College’s secure Student Information System.

What do we use this information for?

The information is used predominantly to support us in considering your application. Specifically, the information is used to:

• consider whether you are likely to have the capacity to successfully complete the programme you have applied to, in accordance with our Admissions Policy
• enable us to organise interviews and communicate with you about your application to the College;
• assess your likely fee and visa status, so that we can advise you on how to proceed if you are made an offer to a programme of the College
• assist with the issue of Confirmations of Acceptance for Study (CAS) documents to students requiring a Student Visa to enter the UK.

We also use the information to monitor and assess our application and student recruitment processes, ensuring that we can reassure applicants and stakeholders that our processes are entirely merit based, and that there are no barriers that discriminate on the basis of protected or other non-academic characteristics. We also use information to inform and improve activities that enable greater access to the Royal College of Art for all potential students.

Finally, we use this information to prepare your student record should you accept your offer, so that we are able to register and induct you speedily to the Royal College of Art at the start of your programme of study.

Who do we share this information with?

The College has engaged QS Enrolment Solutions to support us in the recruitment of students. Non-sensitive personal data is shared with QS Enrolment Solutions, who manage communications with international applicants up to the point at which the student is registered. 

What happens if I do not provide this information?

If we do not receive the information that we request during the application process then we reserve the right not to consider your application.

As an enquirer to study and prospective student, the College will collect and use data relating to personal details. The principle purpose for processing your personal data is for us to respond to your enquiry and provide you with relevant information about applying to study at the College.

For more information, download our Data Protection and Student Data – Fair Processing Notice (PDF).

As a prospective or enrolled student, the College will collect and use data relating to personal details, family and social circumstances, education and training records, employment information, financial details, and services provided. In addition, we may collect and use special category data about you such as information relating to your ethnicity, religion, disability or medical condition for specific purposes. 

The principle purpose for processing your personal data is for us to deliver educational content and to facilitate your education. 

For more information, download our Data Protection and Student Data – Fair Processing Notice (PDF)

Digital Content Submissions

At times, the College may invite current students to submit content for publishing on our digital media channels, including the College website and social media platforms such as instagram.

For digital content submissions the RCA collects information directly from you, so we (the RCA) can share and promote your work and practice on RCA digital platforms. This is only done with your consent (Article 6a) and your explicit consent (Article 9a) if special category data is given. We will only use information provided to us on this form as part of the online post.

For more information, download our Privacy Notice: Digital Content Submissions (PDF)

As a prospective or enrolled delegate of a short course, the College will collect and use data relating to personal details, employment information, financial details, and services provided.

The principle purpose for processing your personal data is for us to deliver educational content and to facilitate your education. For more information, download our Data Protection and Short Course Delegate Data – Fair Processing Notice (PDF)

As an enrolled student, you are automatically part of the Alumni Network when you graduate. The Development & Alumni Relations Office collect and use data relating to personal details, family and social circumstances, education and training records, along with employment information, if you choose to share this with us.

The principle purpose for processing your personal data is for us to deliver alumni services to you. To do this, we process your personal data based on our legitimate interests. We also offer some features including events and promotions based on your consent.

For more information, download our Data Protection and Alumni Data – Fair Processing Notice Summary (PDF)

As a member of staff, the College will collect and use data relating to personal details, family, education and training records, employment information, financial details, and services provided. In addition, we may collect and use special category data about you such as information relating to your ethnicity, religion, sexual orientation, disability or medical condition for specific purposes. 

The principle purpose for processing personal data relating to staff is to facilitate the provision of your university employment, which is undertaken by way of a contract. 

For more information, download our Data Protection and Staff Data – Fair Processing Notice (PDF)

If you are a staff or student Council member you should also refer to the staff or student privacy notices.

Your declarations of interest, expenses and other information may be made available to the public if subject to a Freedom of Information request. An assessment would be made of the extent to which data should be anonymised and whether an exemption can be applied before release.

For more information, download our Governor Privacy Notice (PDF).

We record the name and contact details for everyone who visits the College, to safeguard students, staff and visitors and to support Public Health England and the NHS respond to the pandemic. We are also urging staff and students to let us know if they have tested positive for Covid-19. 

What do we use this information for?

We will process your personal information only when necessary to:

• provide you with essential support;
• notify relevant organisations (see below);
• support efforts to limit exposure, contain outbreaks and ensure the College remains Covid secure.

Who do we share this information with?

If a student, member of staff or visitor tests positive for Covid-19, we will share only applicable personal information with the following organisations for contact tracing purposes:

• Public Health England;
• NHS Test and Trace.