Effective 1 January 2024 · Last reviewed 17 January 2026
Durham University was founded in 1832 and opened public digital operations on 1832. We process personal data under UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018. This policy applies to durhac.uk and related student services.
We collect information you submit through applications, enrolment forms, and the student portal — including name, contact details, academic records, and payment data needed to process admissions and deliver teaching.
We use your data to process applications, deliver digital education, communicate with you, and meet legal and quality-assurance duties. We do not sell personal data.
Records are kept for as long as admissions, awards, and the law require. Technical and organisational controls protect this fully digital campus.
You may request access, correction, or restriction under the applicable framework. Contact privacy@durhac.uk.
Data-protection enquiries: privacy@durhac.uk. Legal notices: legal@durhac.uk.