Privacy Policy
Greater Manchester Institute of Technology: Privacy Policy
The Greater Manchester Institute of Technology (GMIoT) is committed to protecting your personal data and being transparent about how we collect, use and store it.
GMIoT operates as a partnership between the University of Salford and Wigan & Leigh College. Depending on the activity, these organisations may act as joint controllers in determining how and why your data is processed.
This notice explains:
• What personal data we collect
• How we use it
• Our lawful basis for processing
• Who we share it with
• How long we keep it
• Your rights under UK GDPR
What personal data we collect
We collect personal data when you:
• Sign up to our newsletter
• Submit a Course Chat enquiry
• Complete an event form
• Submit a lead form through Meta, LinkedIn or TikTok
• Register for access to the Student Portal
• Contact us directly
This may include:
• First name and last name
• Email address
• Phone number
• Subject area of interest
• Enquirer category (e.g. Under 18 student, parent, career changer)
• Free text enquiry details
• Institution and course title (for Portal users)
We do not intentionally collect special category data such as health information, ethnicity, political beliefs or financial details. If such information is provided in free text, it will not be retained unless strictly necessary.
How we use your personal data
We use your data to:
• Respond to enquiries
• Schedule meetings via Calendly
• Provide information about relevant courses and events
• Send newsletters where you have provided consent
• Direct you to the appropriate education partner
• Manage access to the Student Portal
• Analyse engagement in an aggregated, non-identifiable way
We do not use your personal data for automated decision making or profiling that produces legal or significant effects.
The GMIoT operates as a partnership between multiple education providers and industry partners. Where necessary, we may share your personal data with relevant partner organisations to support your enquiry, application, or participation in GMIoT activities.
This may include sharing your information with partner colleges, universities, or employers involved in delivering courses or opportunities you have expressed interest in.
Education partners
• University of Salford
• Wigan & Leigh College
• Bury College
• Tameside College
• Trafford & Stockport College Group
• Ada, National College for Digital Skills
We will only share data where it is necessary, proportionate, and supported by a lawful basis under UK GDPR. All partner organisations are required to process your data securely and in accordance with applicable data protection legislation.
Lawful basis for processing
We rely on the following lawful bases:
• Consent – for newsletter and marketing communications
• Legitimate Interests – to respond to enquiries, schedule meetings and support recruitment and outreach activity
Where individuals are under 18, processing is carried out in accordance with Article 8 UK GDPR and safeguarding frameworks.
Who we share your data with
Your data may be shared with authorised staff within:
• University of Salford
• Wigan & Leigh College
• Bury College
• Tameside College
• Trafford & Stockport College Group
• Ada, National College for Digital Skills
We use trusted third party providers to support our services, including:
• Mailchimp (email marketing)
• Calendly (meeting booking)
• Concept4 (Student Portal)
• We Are Jam (website management)
• Meta, LinkedIn and TikTok (lead generation forms)
• Zapier (automation workflows where used)
• ClickPatrol (advertising fraud prevention)
These organisations act as data processors under contract and are required to protect your data. We will only share your personal data with an education partner if you request a referral or give explicit permission.
International transfers
Some of our service providers may process data outside the UK or European Economic Area, including in the United States.
Where this occurs, appropriate safeguards are in place, including:
• UK–US Data Bridge (where applicable)
• Standard Contractual Clauses
• Data Processing Agreements
We regularly review these safeguards to ensure continued compliance.
How long we keep your data
We retain personal data only for as long as necessary:
• General enquiries and Course Chats – up to 12 months unless you progress to application
• Newsletter subscriptions – until you unsubscribe or withdraw consent
• Student Portal accounts – for the duration of active use
• Marketing engagement data – reviewed periodically and deleted where inactive
Retention periods are reviewed annually.
How we protect your data
We use appropriate technical and organisational measures including:
• Role-based access controls
• Multi-factor authentication
• Secure cloud storage
• Regular system reviews
• Staff data protection training
While we take appropriate security measures, no online system can be guaranteed to be completely secure.
Cookies and tracking
We use cookies and tracking technologies in accordance with our Cookie Policy. Non-essential cookies are only placed with your consent.
Your Rights
Under UK GDPR, you have the right to:
• Access your personal data
• Request correction of inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise your rights, contact: dataprotection@wigan-leigh.ac.uk. We aim to respond within one month.
Use of images and video
Photographs and video recordings taken at GMIoT events may be used for marketing purposes. Where individuals are identifiable, consent will be sought where reasonably practicable.
For large group or public event photography where individuals appear incidentally, written consent may not always be required.
You may withdraw consent for the use of your image at any time by contacting info@gmiot.ac.uk. It may not be possible to recall previously printed materials.
Updating your information
If your personal details change or you wish to update your information, please contact info@gmiot.ac.uk.
Changes to this notice
We may update this Privacy Notice from time to time. The most recent version will always be published on this page.
Last updated: 24/02/2026