Targeted bulk erasure of data

As part of our work to comply with the Data Protection Act 2018, we'll delete some information from our systems that we no longer have a reason to keep.

This includes deleting applications and customer information where:

• no payment has ever been made
• agreed retention triggers and periods have passed

There are some exceptions where we will be keeping the data for longer, such as cases of fraud.

The normal retention triggers are:

• EMA applications that have not been approved – the end of the current academic year (31 August)
  
  
• EMA applications that have been approved – the end of the following academic year (31 August) if no payment has been made

The retention period after the trigger is 6 months for all applications.