Privacy notice for grant applicants

This policy applies to applicants of ACU-managed grants.

You may also be interested in the ACU's general privacy notice.

Data controller

The data controller is the Association of Commonwealth Universities (ACU), Woburn House, 20-24 Tavistock Square, London WC1H 9HF, UK.

Purpose of processing

The information you provide when applying for a grant will be used in the following ways:

  • To verify that you are eligible for the grant
  • To assess your application for the grant
  • To contact you with the outcome of your application
  • To administer your grant, should you be successful;
  • To maintain contact with you after your grant ends; and
  • To collate statistics and to conduct research (although in these circumstances no information that could identify you as an individual will be published).

If you are not willing to provide all the information requested, we will be unable to process your application.

Legal basis for processing

The legal basis for processing your data is the ACU’s legitimate interests.

Legitimate interests

ACU’s legitimate interests are the provision of membership services and promoting and supporting excellence in higher education for the benefit of individuals and societies throughout the Commonwealth and beyond.

Data recipients

Your data may be shared with staff at ACU’s members, partners, clients (including potential clients) and suppliers. We do not sell personal data to any third parties or use it for commercial purposes. We will never share your contact details with any third parties without asking for consent.

Data transfers

Your data will be processed by the ACU and possibly by other third parties. Your data will be protected in accordance with the General Data Protection Regulation 2016/679 of the European Union.


If your application is unsuccessful your data will be retained for 12 months from the date ACU received it, and then deleted.

If your application is successful your data will be retained indefinitely.

Your rights

You have the following rights:

  • To be informed, which is the purpose of this Privacy Notice
  • To obtain a copy of your personal data. There is no fee for this unless you make repeated requests for the same data.  We will provide your data as soon as possible
  • To have your personal data rectified if it is inaccurate or incomplete - at most within one month
  • To have processing of your data restricted or stopped if you contest its accuracy, or object to its processing.  In such cases processing will be restricted until the matter is resolved.  We will inform you of that resolution
  • To object if you consider you have grounds relating to your particular circumstances
  • To complain about the way we have processed your personal data, you can contact the Information Commissioner’s Office, the statutory body which oversees data protection law – to, email