Throgmorton
Apply for Cohort 2026/II
The Throgmorton Programme · Legal

Privacy Notice.

Draft — not yet in effect. This privacy notice is a placeholder pending review by qualified legal counsel. It must not be relied upon as a statement of data practices. It will be replaced with a complete, legally reviewed notice before the platform opens to applicants.


I.
Data controller.

[PLACEHOLDER — Identity of the data controller, registered address, and contact details for data protection enquiries. To be completed by qualified legal counsel before launch.]

II.
What data we collect.

[PLACEHOLDER — Full list of data categories collected: name, email address, university, year of study, CV (including all personal data within it), IP address at submission, consent records, application status, platform activity data. To be completed by qualified legal counsel before launch.]

III.
Lawful basis for processing.

[PLACEHOLDER — Lawful basis under UK GDPR Article 6 for each processing activity: consent (marketing), legitimate interest (fraud prevention, platform security), performance of a contract or pre-contractual measures (application review and admission), legal obligation (GDPR compliance records). To be completed by qualified legal counsel before launch.]

IV.
How we use your data.

[PLACEHOLDER — Description of each processing activity: reviewing applications, sending decisions, providing platform access, fraud prevention, aggregate cohort statistics, marketing (where consented). To be completed by qualified legal counsel before launch.]

V.
Retention periods.

[PLACEHOLDER — Retention schedule for each data category: pending applications, admitted applicants (active and inactive), deferred applicants, anonymised records for statistical purposes. To be completed by qualified legal counsel before launch.]

VI.
Recipients and international transfers.

[PLACEHOLDER — List of data recipients: cloud infrastructure providers, email service providers, any third parties. Details of international transfers and safeguards (where applicable). To be completed by qualified legal counsel before launch.]

VII.
Your rights.

[PLACEHOLDER — Rights under UK GDPR: access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent. How to exercise each right: by submitting a request at /data-request or by contacting the data controller. To be completed by qualified legal counsel before launch.]

VIII.
Cookies.

[PLACEHOLDER — Description of cookies used: essential authentication cookies only. No marketing cookies or third-party tracking. Duration and purpose of each cookie. To be completed before launch.]

IX.
Complaints.

[PLACEHOLDER — Right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority. ICO contact details and website. To be completed before launch.]

To exercise your data rights, submit a request below.

Submit a data request →

We use essential cookies for authentication and security. We use no marketing cookies and no third-party tracking. Read our Privacy Notice.

Read more