Reviewed: May 2018, December 2020, July 2021, February 2022, March 2023, September 2023, May 2024, November 2024, February 2025
This policy was significantly changed in February 2022 to include a change of legal basis to Public Task for processing data for some activities following ICO guidance regarding direct marketing for public sector organisations.
Our alumni and supporters are at the very heart of The Open University (OU) community. This privacy policy sets out how the Development Office obtains, manages, uses and protects your data and relates specifically to information held by the Development Office.
This document applies to you if you have achieved a qualification with The Open University, are a member of our Alumni Association, are a supporter or have been identified as a potential supporter of The Open University, including as representatives of a Trust or Company, current and past students.
It details:
For more information, see also other Alumni and Supporter privacy documents, the OU's cookie policy and the OU's main privacy policy.
The Open University Development Office (OUDO) keeps in touch and is responsible for the relationship with University alumni, friends and supporters.
The Open University is the data controller in relation to the processing activities described below. This means that The Open University decides why and how your personal information is processed.
Where this policy refers to “we”, “our” or “us” below, unless it mentions otherwise, it’s referring to The Open University.
If you studied at The Open University and gained a qualification, we use some information from your student record to communicate with you, as a member of the University’s Alumni Association. This includes information such as your name, date of birth, contact details and educational history with the University. This information is copied across from your student record and used to create a record on the University’s alumni database.
Much of the data we hold comes directly from you – this includes information you may have given to the OU when you were a student and subsequently. For example, we add information about any contact we have with you, any donations you make to us, responses to alumni surveys, volunteering your time and any Development Office events you attend.
In the past we have also worked with other companies to screen alumni records, in order to help us segment our audience and to understand appropriate fundraising approaches. We no longer work with these companies but do continue to hold some limited details from these screenings on our database to help inform our data selections.
We also hold records on individuals who are not alumni of The Open University, including some current or past students, but who we have identified as being sympathetic to the mission of the University or have a known affinity to it. This includes supporters who have become actively engaged with the University.
The data we hold on both groups may include:
We use a wide variety of sources either directly or via internet search engines, some on a subscription basis, to augment, update and validate the data we hold on alumni and non- alumni, as well as to help us identify individuals likely to have an interest in the organisation.
These include:
We do not obtain or buy lists of people from other organisations and we do not share or sell your information to other organisations.
We use your data to communicate with you via post, email, SMS, phone and digital channels about The Open University. This includes invitations to events, news and updates from The Open University, fundraising materials and information about how you can continue to support your University.
The Development Office primarily uses your data to communicate alumni activities, to request support for our fundraising programmes and for the promotion of benefits and services.
These can include:
The data is also available to other relevant departments across the University.
We may use your details for the purposes of telephone fundraising. Our telephone fundraising campaigns are managed in-house, and we do not use external agencies. Our callers are current employees of The Open University and are paid for their work. If you would like to opt-out of receiving telephone fundraising calls, please email us at telethon@open.ac.uk.
If you contact us with a question, comment, compliment or complaint then we will keep a record of this correspondence and any associated documents so that we have the information available in the event of a follow-up, dispute or investigation.
If we make significant changes to our policies which may affect you, we will communicate this through our standard communication channels.
If you participate in an event that we have organised, we may ask you to provide information to make sure we can manage the event safely and efficiently. We may also ask you for details of any accessibility need which you may have, so that we ensure our event is inclusive, in line with the provisions of the Equality Act 2010.
We may use your information to invite you to become involved with us in new ways, raise funds and grow our supporter base.
If you participate in a joint OU event with a third party that we have organised, we may share your information with the co-organises or partners to make sure we jointly manager the event safely and efficiently.
In this respect we use your personal data for the following purposes:
As part of this process OUDO may share personal data with other third-party organisations which carry out contracts on behalf of the University (such as a venue hosting a university event). The University will share only the minimum personal data necessary to facilitate these activities. The University’s partners are subject to contractual agreements which help to ensure compliance with Data Protection legislation.
Alumni and fundraising materials that we might share with you include information about our activities and their impact, our news, events and fundraising appeals, and other ways you can become involved with us.
Where you have provided your postal address or telephone number to The Open University, we may send this information to you by post or by calling your telephone where appropriate. We will continue to share news and information where appropriate with you via email. We may also send you direct marketing by email or SMS where appropriate.
We have a duty to make sure that we’re spending your donations wisely, and that means doing some research and analysis to inform our decisions. We want to send the most effective messages that we can in the most efficient way possible. In order to work out who to contact, what to say and when to get in touch, we carry out the following activities:
Analysing how emails are opened and read
We track emails we send to you to see which messages have the highest response rates and whether there are messages that resonate with particular groups of people. We do this by logging whether emails we send have been opened, deleted and interacted with (for example, by clicking on links within the emails). Although we only use this information to look at general patterns, it is still personal information because it is linked to your email address.
Segmentation
This is where we analyse information such as postcodes of supporters, and whether donations have been given regularly. This helps us to tailor appropriate communications to you, as well as improve your experience as an Open University supporter.
Undertaking research to understand who might choose to give higher donations
We undertake in-house research to help us identify people who may be able to support us with a larger gift; using information you have given us (if you’re an alumnus) and publicly available records such as the electoral roll, land records, ‘rich lists’, Who’s Who publications and Companies House records. We may also collect information on your interests, for example board memberships, hobbies, or articles about you in newspapers or magazines. We use this information to inform our approach and develop a clearer understanding of areas of affinity between the University and you. This helps us to tailor our communications, ensuring that we are contacting potential supporters about meetings, events and fundraising opportunities which may be of interest to them.
Due diligence
We may also carry out due diligence on potential donations in line with the Development Office. You can read the Philanthropic Gifts Policy at giving.open.ac.uk/privacy. This includes the use of Xapien, an AI-powered research and due diligence tool. To find out more about the type of Ai used, please see this detailed explanation: AI-Powered Due Diligence: Efficiency, Accuracy, and Trust.
When you make a donation or other payment to The Open University, we will use your payment and contact details, payment amount and date of payment, to process that payment and take any follow-up administrative action needed (for example, sending a receipt).
If you choose to include Gift Aid with a donation to us, then we will also ask for your address and UK taxpayer status as this information is required by law. This information is needed for us to fulfil our obligations under tax (sections 413 to 430 Income Tax Act 2007) and charity law. Information associated with Gift Aid declarations must be retained for 7 years. This information will be shared with HMRC for tax regulation purposes and may also be shared with the Fundraising Regulator and the Charity Commission in the event of an enquiry or investigation.
Your information may be shared with us by an independent organisation, for example websites like Big Give and Eventbrite. You should check their Privacy Policy when you provide your information to understand fully how they will process your data.
We may disclose your information to our third-party service providers, agents, subcontractors and other organisations for the purposes of providing services to us or directly to you on our behalf.
When we use third party service providers, we only disclose to them any personal information that is necessary for them to provide their service and we have a contract in place that requires them to keep your information secure and not to use it other than in accordance with our specific instructions.
Examples of activities we use third party service providers for:
Generally, information you provide to us is held securely on the University’s alumni and supporter database, or on our cloud-based systems which are located within the UK or EEA.
If at any time we transfer your personal information to, or store it in, countries located outside of the UK we use appropriate contractual safeguards, for example the standard contractual clauses for international transfers.
The main establishment of The Open University is in the UK. If your data is collected by our office in the Republic of Ireland, then this will also be processed in the UK.
We believe that the relationship we have with our alumni, supporters and friends is a life-long one and so we retain your data until such time as you request its removal. We will always maintain a record on our database containing at least your biographical and education details for statistical purposes and to ensure we do not inadvertently contact you in the future.
Generally, our legal basis for processing your personal data is that it is in The Open University’s public task of maintaining a relationship with you, and promoting our vision, mission and values.
We will ask for your consent to contact you with certain kinds of communication.
You have a number of rights in relation to your personal information under data protection law.
In order to exercise any of these rights, please contact us using the details in Section 11 of this document.
You have the right to:
In certain circumstances, you have the right to:
You have the right to complain to the Information Commissioners Office (ICO) if you are concerned about the way we have processed your personal information. Please visit the ICO’s website www.ico.org.uk for further details.
All Alumni and Supporters may update their communication preferences and opt-out of receiving some or all communications from us at any time.
If you are an alumnus, you can:
If you are not an alumnus or a supporter you can:
Please direct any queries about the way we process your personal information, or requests to exercise your rights as a data subject, to our Data Protection Officer using the contact details below.
Data subjects within the EU can contact:
To view our fundraising charter, please visit giving.open.ac.uk/privacy
This charter, available at giving.open.ac.uk/privacy outlines the commitment to supporters by The Open University. We have registered with the Fundraising Regulator, and as such we agree to ensure our fundraising is legal, open and honest and respectful. The standards for fundraising are set out in the Code of Fundraising Practice.
Fundraising Regulator
2nd Floor, CAN Mezzanine, 49-51 East Road, London, N1 6AH
0300 999 3407
www.fundraisingregulator.org.uk