Last Update 10/01/2022


The Centre for Transforming Access and Student Outcomes in Higher Education and its affiliates, subsidiaries and related entities (“TASO”, “we, “our”) is committed to protecting the privacy and security of the personal data we collect about end customers and users of our services (“you/your”).

The purpose of this privacy notice is to explain what personal data we collect about you when you respond to the student voice questionnaire. When we collect this data, we are the data controller.

The student voice questionnaire is not a research project. To develop and design research projects there is a lot of preliminary work that is conducted and this questionnaire falls into this type of preliminary work.

The student voice questionnaire is to understand if it is feasible for research to be conducted in this area. Personal data collected in this questionnaire will never be sold, published or made publicly available.

Please read this privacy notice carefully as it provides important information about how we handle your personal information and your rights. If you have any questions about any aspect of this privacy notice you can contact us using the information provided below or by emailing us at quoting “student voice questionnaire” in the subject or body of the email.

Personal data we collect

  • Your name
  • Your email address
  • Your place of study/University you attend or attended
  • Higher Education course you studied

How we collect information about you

  • From yourself when you voluntarily complete the ‘invitation to participate’ survey (the ‘invitation to participate’ survey is a webform you complete before we can send you the questionnaire which is also via a webform).
  • We shall collect personal data from yourself via an online questionnaire we have send you.
  • From yourself if you have applied for an internship or job at TASO (we have used this data to send you the ‘invitation to participate’ in the questionnaire).

Purposes for which we use personal data and the legal basis

When collecting and reviewing the survey data, we shall use your personal data for the following purposes and on the following lawful bases. The table below is relevant to all data subjects:

PurposeLawful Basis for Processing
To send you a questionnaire if we have specifically identified you as a key stakeholder for this type of information.
(NOTE: Most submissions will be voluntary after you have received a link indirectly from us I.e. we will not have sent you the questionnaire directly and we do hold your personal information before you submit a questionnaire)
The lawful basis we shall be relying on is the legitimate interest of the Data Controller.
To associate your answers with yourself where we would like to make confidential contact with you based upon the answers you have provided which we have identified as useful in our development of this potential research area.
To make confidential contact with you where you have indicated interest in being contacted about the research area or to participate in any research projects associated with this area of potential research.
To invite you to participate in the completion of other similar questionnaires in the future.

Sharing your data

Your data is never made accessible to anyone outside of TASO and is never sold to any outside parties.

Any data shared with the below categories of recipients is the minimum necessary for the task they have been instructed to carry out on our behalf or in conjunction with us. Each category of recipient is subject to pre-approved review to ensure comparative technical and organisational measure for keeping the data secure.

  • Webform data capture platform provider.

There may be scenarios where we are subject to a legal obligation to disclose or share your personal data, such as with law enforcement agencies, regulatory bodies or public authorities in order to prevent or detect crime. We will only ever disclose your personal data to these third parties to the extent we are required to do so by law.

We may also share your personal data if we choose to sell, transfer, or merge parts of our business and/or group, or our assets in the future. Or we may seek to acquire other businesses or merge with them. During any such process, we may share your data with other parties. We will only do this if they agree to keep your data safe and private. If a change to our group happens, then other parties may use your data in the same way as set out in this notice.

It is unlikely that we’ll ever share your personal data outside the UK. If, however, it becomes necessary for the purposes of processing your personal data we will only share it with organisations in countries benefiting from a European Commission adequacy decision (which are recognised by the UK) or on the basis of Standard Contractual Clauses approved by the European Commission or UK recognised International Data Transfer Agreements which contractually oblige the recipient to process and protect your personal data to the standard expected within the EU and the UK.

How long we keep your data

Data shall be reduced, redacted, de-identified and deleted at appropriate times so we retain the minimum amount of data possible throughout the submission process. Where you have indicated to us you would have an interest in being contacted about the research project, we may or may not develop depending on the outcome of this and other activities including this questionnaire, we shall keep your personal data for five years after the date of submission of the questionnaire to us. All personal data from any interactions we have with you including opinions are kept strictly confidential and are never associated with you without your permission.

How we protect your data

We implement appropriate technical and organisational measures to protect data that we process from unauthorised disclosure, use, alteration or destruction. Data protection assessments are conducted for each research project and for all recipients of data used within any research data.

Your information is securely stored on a dedicated drive, and access is controlled by TASO’s secure access policy for the duration of the research study period.

We will always keep these under review to make sure that the measures we have implemented remain appropriate.

Any personal data is not subject to any automated decision-making.

Your rights and options

You have the following rights in respect of your personal data:

  • You have the right of access to your personal data and can request copies of it and information about our processing of it.
  • If the personal data we hold about you is incorrect or incomplete, you can ask us to rectify or add to it.
  • Where we are using your personal data with your consent, you can withdraw your consent at any time.
  • Where we are using your personal information because it is in our legitimate interests to do so, you can object to us using it this way.
  • Where we are using your personal data for direct marketing, including profiling for direct marketing purposes, you can object to us doing so.
  • You can ask us to restrict the use of your personal data if:
    • It is not accurate,
    • It has been used unlawfully but you do not want us to delete it,
    • We do not need it any-more, but you want us to keep it for use in legal claims, or
    • if you have already asked us to stop using your data but you are waiting to receive confirmation from us as to whether we can comply with your request.
  • In some circumstances you can compel us to erase your personal data and request a machine-readable copy of your personal data to transfer to another service provider.
  • You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

If you wish to exercise your rights, please contact us at

How to Complain

You can also lodge a complaint with the Information Commissioner’s Office. They can be contacted using the information provided at:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline number: 0303 123 1113

ICO website:

Contact us

If you have any questions, or wish to exercise any of your rights, then you can contact:

Project: Student voice questionnaire

Organisation: The Centre for Transforming Access and Student Outcomes in Higher Education (TASO)

Address: TASO, Evidence Quarter, 4th Floor, Albany House, Petty France, London, SW1H 9EA

Alternatively, you can email us at

Changes to this privacy notice

We may update this notice (and any supplemental privacy notice), from time to time as shown below. We will notify you of the changes where required by applicable law to do so.

Previously modified 10 January 2022.