Website & Cookies Privacy Notice

General

This Privacy Notice outlines how Canterbury Christ Church University (the Data Controller) collects, uses, and protects the personal data of visitors to the University’s website at either ‘canterbury.ac.uk’ or ‘cant.ac.uk’. It applies to any visitors to the University’s website.

We are committed to handling your personal data responsibly and transparently, in accordance with the Data Protection Act 2018 and UK General Data Protection Regulations (GDPR) and any other relevant legislation. This notice is intended to ensure you are fully informed about how your personal information is used and the rights you have in relation to it.

You can access our Data Protection Policy here.

1. What personal information do we collect about you?

When you visit the University’s website, we collect and retain relevant personal data. This information is used for the purposes set out in Section 3 of this Privacy Notice.

We may process the following categories of personal data about you:

Your name

Address

Email address

Phone number

In some other areas of the University’s website, where you can register as an online user, you may need to supply further personal data.

2. How do we collect your information?

The University may collect your personal data through a range of methods and sources, depending on your relationship with us and the nature of our interaction. We may collect your personal information:

Directly from you – when you fill in forms, book a place on an open day, request information about a job vacancy, subscribe to an online newsletter or otherwise contact the University through the website.

Through automated technologies – when you visit the University website, your computer may be issued with a small file (a ‘cookie’) for the purposes of managing and improving the services on the website, even if you do not provide us with any personal data.

We use four types of cookies to retrieve information from your browser. These are:

Strictly necessary cookies

Performance cookies

Functional cookies

Targeting cookies

You will always have the option to choose how your information is used. You can choose not to allow some types of cookies using the options on the webpage.

3. How do we use your personal data?

The University may process your personal data for the following purposes:

For the purposes of managing and improving the services on the website. Cookies recognise you, by a unique number allocated to you, when you return to the website and may personalise your return, for example by customising webpages based on areas of the website that were previously of interest to you. If you previously provided your personal data, then cookies may enable the automatic completion of your name and other information when, for example, you complete an online form.

To respond to your request, for example, where you have requested a copy of a prospectus, subscribed to an online newsletter, booked a place on an open day or requested information about a job vacancy.

To enable the University to compile anonymous, aggregated statistics to help understand how the Website is used, and how to make improvements.

It is not possible for cookies to read personal information on your computer or to find out any personal information about you. You can refuse to accept cookies by modifying the settings in your browser, but this may limit the functionality of webpages on, or your access to, the website.

First party cookies

First party cookies: these are our own cookies, set and controlled by us.

Name	Purpose
ASP.NET_SessionId, ASPSESSIONIDASQQQTQC	These session cookies can be used to remember any page changes or item or data selection from page to page.
_evga_38e8	Salesforce Personalization uses this cookie to set an anonymous or persistent UserID.
_sfid_3572	Salesforce Personalization uses this cookie to store the current consent status of the Web SDK.

Third party cookies

Third party cookies: these are cookies found in other companies’ internet tools which we are using to enhance our site, for example Google Analytics and YouTube have their own cookies, which are controlled by them. On the University's website these include:

Name	Purpose	More info
Cookies with names prefixed by __utm	Stores information used by Google Analytics to track user activity on the site.	Policy \| Opt-out
_atuvc, _atshc, bt, di, dt, loc, psc, ssc, ssh, sshs, uid, uvc, uit	Stores information used by AddThis to integrate social media functionality on the site, such as Facebook and Twitter sharing.	Policy \| Opt-out
demographics, VISITOR_INFO1_LIVE, dkv, HSID, SSID, use_hitbox, SID, ACTIVITY, PREF	Used by the YouTube video hosting service to enable videos to be embedded in the site.

You can find out more about cookies at www.allaboutcookies.org, or if you wish to opt out of vendor's use of cookies for interest based advertising, visit www.youronlinechoices.com

4. The lawful basis we use to process your data

Data protection law sets out reasons for collecting and processing your personal data. In this section, we outline the legal bases the University uses.

We will be processing your data under:

Article 6(1)(a) Consent "the data subject has given consent to the processing of his or her personal data for one or more specific purposes"

We may process your data collected through cookies on the basis of your consent. We collect your consent through the use of an opt in tick box when you access the website. We will use this data only for the purposes for which you have consented unless we are required to share the data under a legal obligation. You may withdraw your consent at any time. You need not give a reason. You can withdraw your consent by modifying the settings in your browser.

Article 6(1) (f) Legitimate Interests "processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child"

We may process your data collected through cookies for our legitimate interests in a way that is reasonable to expect as part of running Website.

For example, this could include setting a cookie that helps ensure that the content of the page loads quickly and effectively. This would be considered a strictly necessary cookie.

We may need to process your data in order to ensure we are complying with our statutory obligations and legal requirements.

Article 6(1)(c) Legal obligation "processing is necessary for compliance with a legal obligation to which the controller is subject"

We may be required to share personal data collected through cookies with law enforcement agencies or the Police, for example, when responding to lawful requests such as for the prevention and detection of crime under the Computer Misuse Act.

5. Who do we share your personal data with?

We may share your personal data with trusted third-party service providers who act as data processors on our behalf. Our main partner is Salesforce Personalization who support with the delivery and operation of our client-based personalisation by allowing personalised content to be displayed without identifying you as a person based on usage analysis. All third parties are required to handle your data securely and in accordance with data protection legislation.

We may also disclose your personal data where necessary to meet our legal or statutory obligations under the Data Protection Act 2018 and UK GDPR. This may include sharing information with government departments, regulatory bodies, funding agencies, or law enforcement authorities where disclosure is legally required.

Whoever we share your information with, we will only share what is relevant and necessary to perform the specific task or to meet our legal obligations.

6. How long do we keep your personal data?

We retain personal data only for as long as is necessary to fulfil the purposes set out in this Privacy Notice, including to satisfy legal, regulatory, and contractual obligations. This includes our obligations under the Data Protection Act 2018 and UK GDPR.

In relation to the collection of Cookies, we retain personal data for 12 months. When identifiable records are no longer required for the purposes set out in this Privacy Notice, they are either anonymised or securely disposed of according to our Confidential Waste Policy.

7. How do we protect and store your personal information?

We are committed to safeguarding the personal data we process and have robust internal policies and controls to prevent unauthorised access, accidental loss, destruction, misuse, or disclosure of personal data. Access to personal information is strictly limited to authorised University personnel who require it for the performance of their duties in connection with the management of the website and cookies.

Where personal data is shared with third-party processors, such parties are contractually required to act solely on our instructions, implement appropriate technical and organisational safeguards, and comply fully with the requirements of the Data Protection Act 2018 and UK GDPR.

8. The data controller and further information

Canterbury Christ Church University is the Data Controller for this personal data.

Please click the link below to access further information regarding:

Version control

Title: Website & Cookies Privacy Notice

Process Owner: Head of Digital Channels and Content

Department responsible: Marketing and Communications

Date approved: 19th August 2026

Date of review: 19th August 2028

Date last amended: 19th August 2026

Return to

Privacy Notices

Data Protection