Data protection

Luton Sixth Form College is committed to protecting the personal data it holds and to processing that information in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data (Use and Access) Act 2025 (DUAA).

How we use your information  

For students:  

Most of the data we collect and process is used to provide education and welfare services, which form a necessary part of the agreement you make with us when you enrol. This includes the provision of on-site and remote (offsite) learning and support.  

For staff:  

Most of the data we collect and process is used to provide employment and welfare services, which are a necessary part of the agreement you make with us when you sign your contract of employment.   

 

Our legal basis for processing your data

The law requires us to identify the “lawful basis” for processing personal data. In most cases, this is because the data is needed to deliver the services you expect as part of your contract with us. 

Specifically:  

Contract: Core data is processed to provide the services agreed when you enrol or sign your employment contract. 

Legal obligation: Some data is processed to meet statutory requirements, such as reporting to government agencies (e.g., Department for Education).  

Vital interests: Certain data, such as medical or safeguarding information, is processed to protect your health, safety, and well-being.  

Consent: If we request optional information not covered by the above bases, we will ask for your explicit consent. You can withdraw this consent at any time.  

We only collect and process data that is necessary, and we handle it securely in line with data protection legislation. 

Find out more about our courses

Explore our full range of courses, and discover the right next step for your future at LSFC.