Privacy policy

PRIVACY POLICY

Integrated Leadership Assessment Tool (iLAT)

Introduction
The University of Chester is committed to protecting the rights and freedoms of individuals as detailed in relevant Data Protection legislation, including looking after any personal data that it collects, uses or holds. This Data Processing and Privacy Notice describes how and why we collect and use personal information about you. It is issued under your right to be informed about how the University collects, uses and stores your personal data.

The purpose of the Integrated Leadership Assessment Tool (‘iLAT’) is to provide individuals with information about their leadership skills at the point in time they have taken the assessment.

The iLAT system requires limited personal data in order to:

process information to provide access to the tool and take payment
provide automated feedback at the end of the assessment
inform individuals about products and services that may be of interest to them (subject to your consent)

Data Protection Principles
We will comply with data protection legislation, which says that the personal information we hold about you must be:

Used lawfully, fairly and in a transparent way
Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes
Relevant to the purposes we have told you about and limited only to those purposes
Accurate and kept up to date
Kept only as long as necessary for the purposes we have told you about
Kept securely

What Personal Data does the University collect?

Personal data means any information about you from which you can be identified. It does not include anonymous data. The iLAT collects different kinds of personal data about you, which we have grouped together as follows:

Name, email address, user account details, encrypted password only, answer to security question
Payment details
Your responses to the survey questions and resulting scores with the date completed
Your consent or opt-out preference for marketing communications.
No electronic data, such as IP addresses or non-essential cookies, will be stored; however, the website does use functional cookies, and some information may be collected as a result of these.

What Special Category Data does the University Collect?
The iLAT system does not collect any special category data, which includes information about your race or ethnicity, religious or philosophical beliefs, sexual orientation, health and biometric or genetic data.

Why does the University need this data and how will the University use this data?

to register you as a user of our Site, upon receiving payment
to provide you with online testing inventory services as requested by you
to manage queries and complaints via email
for marketing purposes (where you have provided us with your consent)
to comply with a request from you in connection with the exercise of your rights (for example, where you have asked us not to contact you for marketing purposes, we will keep a record of this on our suppression lists to be able to comply with your request)

What is the Legal Basis for processing the data?

The iLAT system will use the following legal basis for processing data.

Performance of a contract with you as a customer of iLAT leadership assessment
Your consent in respect of delivery, marketing, or advertising to you, for which your consent is legally required

For how long will the University keep this Data?

The iLAT system will observe the following schedule for retention and/or deletion of data.

Customer Type	Description of Record	Retention Period	Action at the end of retention period
The iLAT users	Records documenting the handling of data of individuals signing up and using the iLAT system	3 years from the end of the academic year in which the test was taken	Results data will be anonymised once the test assessment has been completed and will no longer be accessible to iLAT users. However, the anonymised data will be stored for research purposes for a period of approximately 3 years, after which it will be destroyed

Who has access to the data and with whom will the University share this data?
Strict access controls are in place for who can access the iLAT database of personal information. A small number of university staff access the iLAT to administer the system, support users and facilitate anonymisation and deletion of records.

The data may be shared with companies providing specific services to, or on behalf of the University, solely in support of the University’s iLAT service provision, such as cloud hosting the database. We ensure our suppliers are subject to strict contractual safeguards, always to protect the confidential processing of data.

How will the University keep this data secure?
The iLAT system uses carefully selected platforms and services to store and process your data. These providers have negotiated Data Processing Agreements with the University to protect the integrity of personal data.

Personal data is only made available to employees who are authorised to use it, and those employees are required to take appropriate security precautions and receive continual training on best security practices.

What Rights do you have as a Data Subject?
As a data subject of the University, under the Data Protection legislation, you have a number of rights with regard to your data, dependent upon the legal basis for processing that data. As such, you have the right to…

Withdraw consent – where the University has used consent as the legal basis for processing
Be informed – about how the University collects and uses your data.
Access your personal data that the University holds and processes.
Rectify or correct any inaccuracies in your personal data that we hold.
Be forgotten by requesting that your details are removed from the University systems.
Restrict the processing of your data whilst it is being verified or corrected.
Port your data in a machine-readable and commonly used format;
Object to certain processing by the University, including direct marketing, automated decision making, profiling, scientific/historical research and statistics;

Who is the Data Controller and who is the Data Protection Officer?
The Data Controller is the University of Chester, Parkgate Road, Chester, CH1 4BJ.

How to raise questions, comments, concerns, or complaints.
Should you have any questions, comments, concerns or complaints regarding the use of your personal data, you should contact the University’s Data Protection Officer at dataprotection@chester.ac.uk. You may also raise any concerns or complaints with the Information Commissioner’s Office, which may be contacted at the Information Commissioner's Office. Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, Tel: 0303 123 1113,
www.ico.org.uk

Changes to this Notice
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.

Version 1 September 2025