Looking after your personal information properly is part of looking after you. This page explains what data protection means at FX Plus, where to find our policies, and how to get in touch if you have a question, a request or a concern.
What data protection means to us
Every day, FX Plus looks after information about a lot of people: students living in our halls, staff, visitors to the Penryn and Falmouth campuses, members of the FLEXSI Sports Centre, families at Little Wonders Nursery, and the many partners we work with. We think you should know what we do with that information, and feel confident it’s in safe hands.
Data protection law (the UK GDPR and the Data Protection Act 2018) can sound complicated, but the ideas behind it are refreshingly simple. In practice, it means we commit to:
- Only collecting what we need, and being clear about why we need it.
- Using it fairly and lawfully, for the purposes we’ve told you about.
- Keeping it accurate and up to date.
- Holding on to it only for as long as we need it, then disposing of it securely.
- Keeping it secure, so that only the right people can see it.
- Respecting your rights, and making it easy for you to use them.
- Taking responsibility: owning what we do with your data, and putting things right if they go wrong.
Got a question? Our Data Protection Officer is always happy to help. Email dataprotection@fxplus.ac.uk and we’ll get back to you.
Our policies
Our policies set out in more detail how FX Plus meets its data protection obligations. Both documents are available below to read online or download as a PDF.
Data Protection Policy
How FX Plus collects, uses, shares, stores and protects personal information, and who is responsible for what.
FX Plus Data Protection Policy Document
Appropriate Policy Document
Some information needs extra care, such as health information or details about criminal offences. The law asks us to explain the safeguards we put in place when we handle it, and this document does exactly that (as required by Schedule 1 of the Data Protection Act 2018).
FX Plus Appropriate Policy Document
Need either document in a different format? Just email dataprotection@fxplus.ac.uk and we’ll be glad to help.
Your rights
It’s your information, so the law gives you a number of rights over it. Depending on the circumstances, you can ask us to:
Give you a copy of the personal information we hold about you (a subject access request).
Correct information that is wrong or incomplete.
Delete your information, or restrict how we use it.
Stop using your information for certain purposes, including direct marketing.
Transfer information you’ve given us to another organisation.
Review any decision about you that has been made by purely automated means.
Subject access requests and Freedom of Information
Individuals have the right to access information about themselves. This is known as a data subject access request. Under a subject access request you may ask us for information we hold that relates to you as an individual, where you are the principal subject of the data. We will normally respond within one month of receiving your request.
As a public authority, FX Plus is also covered by the Freedom of Information Act 2000 (FOIA), which allows you to request access to all the types of information we hold, whether personal or non-personal. A Freedom of Information request must be in writing (which includes email) and must include a name and address to which a response can be sent.
Subject access requests
Freedom of Information requests
Please note: if your Freedom of Information request concerns student information, please contact the relevant university (Falmouth University or the University of Exeter) in the first instance.
Data protection complaints
We are committed to managing your personal data in a fair, transparent and lawful manner. If you are dissatisfied with how your data has been handled, here’s how to let us know and what will happen next.
How to make a complaint
Please contact our Data Protection Officer at dataprotection@fxplus.ac.uk. This allows us to investigate and resolve the issue as quickly as possible. Please give us as much detail as you can, as this helps us to understand the issue and investigate it thoroughly.
What to expect from us
We will acknowledge your complaint within five working days.
Where FX Plus is the data controller, we will investigate and give you a full response within 30 calendar days.
Where FX Plus acts solely as a data processor on behalf of another data controller, we will refer your complaint to that data controller for investigation and response, and give them any reasonable assistance required under our contractual or legal obligations.
Throughout the process, we will keep you updated on our progress, ask for any additional information we need in a timely and proportionate way, and give you a clear and thorough written statement of the outcome of our investigation.
If you are not satisfied
If you are not satisfied with the outcome of your complaint, or feel we have not handled it appropriately, you have the right to complain to the Information Commission (ICO), the UK’s independent regulator for data protection and information rights.
Website: ico.org.uk/make-a-complaint
Email: icocasework@ico.org.uk
Phone: 0303 123 1113
Post: Public Advice and Data Protection Complaints Service, Information Commission, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Contact us
Data Protection Officer
Falmouth Exeter Plus
Penryn Campus, Treliver Road
Penryn, Cornwall
TR10 9FE
Email: dataprotection@fxplus.ac.uk
