Legal & policies
Privacy notice
What personal data the institute holds, why, for how long, and the rights attached to it.
1. Who is responsible
Northgate, as operator of this site and the programmes, is the data controller for the personal data described here. Contact: the admissions address on the contact page.
2. What is collected
- Application data: name, email, country, the statement and work sample you send.
- Enrolment data: contract details, instalments, assessment records and certificates issued.
- Teaching data: attendance at live sessions, submitted work, tutor feedback.
- Site data: pages viewed and basic technical information, used to keep the site working.
3. Why
To assess applications, deliver teaching, assess work, issue certificates, meet accounting and tax obligations, and answer enquiries. The lawful bases are contract performance, legal obligation, and legitimate interest in running the institute.
4. Who sees it
Programme leads and tutors, the external examiner for your final assessment, and service providers who host the site, send email and process payments. Providers act on written instructions. Data is not sold.
5. How long
Applications that do not lead to enrolment: 12 months. Enrolment and assessment records: as long as needed to verify a certificate, plus the accounting retention period required by law.
6. Your rights
Access, correction, deletion, restriction, objection and portability. Write to the admissions address; the institute replies within one month. You may complain to the data protection authority in your country of residence.
7. Cookies
The site sets no advertising or tracking cookies. Any cookie used is strictly necessary to serve the page or keep a session.
Last updated 3 November 2026.