How PPFI collects, uses, and protects your personal information during your studies
This privacy notice relates to your personal data as necessary for enrolment and studying at Phnom Penh Fashion Institute. During your time at PPFI you may sign up to other services or programmes for which other privacy notices will apply, e.g. a placement, counselling, a short course, ArtsTemps employment.
Please see the PPFI Privacy Information webpage for PPFI's general information as a Data Controller, details of our Data Protection Officer and your rights.
Please see our cookies notice for further information about what information may be automatically collected when you visit our websites.
PPFI processes personal information taken from your application, enrolment form, agents, referees or other third parties supporting your application, information and documentation you provide in support of your application, and information collected or created during your time with us such as tuition notes and course progression, attendance record, your photograph, correspondence, feedback and other comments, details of payments made and received or debts owed, complaints, enquiries, and information you may choose to provide such as special requirements, health or diversity information and marketing preferences.
We use this information to provide your course and support your studies and welfare, to verify your identity, maintain contact with you (by post, email and phone), offer additional related services and information, monitor and enforce the conditions of our agreement with you, to manage payments, for credit scoring and assessment, debt tracing, to manage your use of facilities (e.g. IT, libraries) and participation at events, to support disciplinary, complaint, and quality assurance processes and arrangements, to fulfil our legal obligations, for internal and external auditing purposes and - in anonymised form - to report on our activities and monitor diversity. We will also store the details of the emergency contacts you have provided in case we need to contact them.
CCTV images, card access data and data recording your interaction with PPFI IT systems (including WIFI and PPFI email) are used to maintain the security of the Institute, its staff and students, prevent and detect crime, identify misuse of systems and investigate health and safety incidents. Data may also be used if necessary to resolve disputes arising during disciplinary proceedings. In exceptional circumstances we may need to analyse your content to help us detect abuse such as spam, malware, and illegal activity.
Information about your health may be recorded to provide reasonable adjustments and other support for those declaring a disability, or to provide counselling or safeguarding support. Information you choose to provide about disabilities, your ethnicity, religion, sexuality etc or will be used to monitor and report on equality and diversity at the Institute. See 'special category (sensitive) data' in the section below.
Your personal data may be used for other purposes in accordance with an appropriate legal basis, for example with your consent or through other agreements you enter into during your time with us, which will be covered on separate privacy notices at the time.
Your personal data will not be used for automated decision making or profiling without your consent.
If you apply to attend a graduation ceremony your first name, initials, surname and degree title will be printed in the souvenir programme and may also appear on some PPFI merchandise. You must inform the graduation team in writing at graduation@arts.ac.uk before the ticket application deadline if you wish to opt out of this.
GDPR 'special category' personal data includes:
This type of data requires an additional legal basis under GDPR Art.9 and has more restrictions covering its use.
Information relating to disabilities, health or dietary requirements provided for the purposes of making reasonable adjustments is processed under GDPR Art.9(2)b where the use of personal information is necessary for carrying out obligations in the field of social protection law.
Information relating to ethnicity, sexuality or religion for the purpose of statistical monitoring of equality and diversity is processed under GDPR Art.9(2)g 'substantial public interest', for the purpose under the Data Protection Act 2018 of reviewing the existence or absence of equality of opportunity or treatment between different groups of people, including differences based on ethnicity, religious beliefs, and sexual orientation. This information is not used to influence decision-making.
Information needed to provide counselling or to support safeguarding activity will normally be processed under the legal basis 9(2)a 'explicit consent' if you agree to provide it. You can withdraw consent at any time by contacting the department which collected it, in which case this data will be deleted.
In circumstances where it is not practical or appropriate to ask for consent – for example if you are considered to be at particularly high risk – information necessary to support counselling interventions or the safeguarding of children or vulnerable adults will be processed 9(2)g 'substantial public interest' as defined under the 'counselling' and 'safeguarding' sections of the Data Protection Act 2018 Schedule 1.
If provided, some special category data will be shared with the Higher Education Statistics Agency (HESA/Jisc) and the Education and Skills Funding Agency (ESFA) under basis 9(2)j 'processing is necessary for…statistical purposes'.
In other circumstance, special category data will only be processed with your recorded consent for the stated purpose under 9(2)a 'explicit consent'.
You can find more information about these lawful bases at the ICO website, or by searching online for the text of GDPR or the Data Protection Act 2018.
Your data will be stored on PPFI-managed systems and databases, which can be accessed by relevant staff employed by the Institute. Your name and PPFI email address will be made available to all staff and students through the PPFI internal online directory service.
We will sometimes need to share or provide access to your personal data with third parties who are engaged as data processors on our behalf. These may include course tutors or support staff working through their own company or organisations outside of PPFI.
Examples of organisations which process data on PPFI's behalf include:
Data will always be processed within the UK, with a territory deemed adequate by the UK Information Commissioner's Office (ICO), or otherwise transferred to another territory with appropriate safeguards in place. or under GDPR derogations if they apply,.
After you complete your studies, core student records will be kept permanently to provide references. Your core student record comprises of your title, official name, name used (if different), date of birth, student ID number, course and dates of study, academic results and award attained.
Your name and contact details will be retained after the end of your studies in order to provide alumni services and contact, including continued library access. Details will be provided by Development and Alumni Services near the point of graduation.
Personal data which relies on your consent as a legal basis will be deleted if you withdraw consent.
Other data will be deleted within 6 years after completion of study.
We share some information with third-parties who act as controllers of data in their own right. You can find their privacy information on their websites.
Under legal basis 6(1)f Legitimate Interests, we will share your name, course and contact details with the Arts Student Union ("Arts SU") to facilitate automatic membership to its services, clubs, societies and events which are available to all students. If you do not want to be a member of Arts SU please opt out in accordance with options provided to you on enrolment or email info@su.arts.ac.uk to cancel your membership.
On completion of your course, your results will be published on a public notice board or on our website, shared with Higher Education Degree Datacheck (HEDD) degree verification and provided to third-parties if references are requested directly.
PPFI may also share your data with third parties to fulfil a legal obligation or for other legal purposes.
Personal data may be shared with the appropriate authorities if necessary for the prevention or detection of crime, the apprehension of offenders, or the collection of taxes.
Other sharing of your information or storage outside of PPFI will be covered in privacy notices at the point you sign up to the service or provide the information for that specific purpose, e.g. surveys, student support services.