skip to content | Accessibility Information


Privacy notice for the Photo Upload Site

This Privacy Notice explains who we are, how and why we collect and use personal information about you, our legal basis, relevant retention periods and how you can exercise your privacy rights. Please do read this notice to understand our practices and if you have any questions please contact us using the contact details provided below.
Info Icon

Who we are



The Manchester Metropolitan University (‘the University’) is the Data Controller in respect of the photograph and additional form of identification that you upload. The University is registered as a Data Controller with the Information Commissioner’s Office (ICO). We manage personal data in accordance with the General Data Protection Regulation (GDPR) and the University’s Data Protection Policy.
Processing Icon

The purposes of the processing



Your photograph and additional identification document will be used for identification and security purposes, in particular:
  • To verify your identification and issue a student card.
  • To be used as a form of identification.
  • Required as an aide in learning names, identifying students in lectures.
  • As proof of identification for examinations.
  • As proof of student status when using Manchester Met campus, services and facilities.
  • For the Met Card, which is produced by Finance and distributed to all new full-time undergraduate students.
Law Icon

The lawful basis for the processing



  • University requirements – as a public authority acting in the public interest we rely upon the ‘public task’ lawful basis to process your photograph.
  • Where we process special category data (such as ‘nationality’ if you upload a passport image as your form of ID), we rely on ‘substantial public interest’ as our lawful basis for reasons of fraud and crime prevention.


Recipients Icon

The recipients or categories of recipients of the personal data



Staff and Faculty of the University. Your information will not be shared outside of the institution.


Data Icon

Data retention



The photograph is retained as part of the student record until the end of the current academic relationship plus a period of six years. The form of identification that you provide with your student photo will be retained for no more than two months.


Contact Icon

Contacting us



For questions or concerns about this Privacy Notice, or the use of photograph, please contact the Enrolment & Induction Team at photoupload@mmu.ac.uk in the first instance. Our Data Protection Officer can also be contacted using dataprotection@mmu.ac.uk, by calling 0161 247 3331 or in writing to: Data Protection Officer, Legal Services, All Saints Building, Manchester Metropolitan University, Manchester, M15 6BH.


Complaint Icon

Right to lodge a complaint with the supervisory authority



You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) as the supervisory authority in respect of the processing of your personal data. We would encourage you to expend our internal complaints procedure through our initial contact and the University Data Protection Officer, prior to contacting the ICO. Please contact: casework@ico.org.uk or telephone: 0303 123 1113. For any further contact information please see: https://ico.org.uk/global/contact-us/.


For further information about the processing of your personal data by the University and your data subject rights please see the main Student Privacy Notice.


Updates to this privacy notice


We may update this privacy notice from time to time in response to changing legal, technical or business developments. When we update our privacy notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make.