Policy on privacy and cookie notices

The University is committed to respecting and protecting the privacy of information that is provided to it. This policy has been updated to reflect the General Data Protection Regulation (GDPR) introduced in May 2018.

You must provide a prominent link to a copy of the University privacy and cookies notice on the front page of all University websites. This applies to all websites with URLS containing leeds.ac.uk and any websites that are operated by or for the University. The only exceptions are purely personal webpages and Leeds University Union, as LUU has its own privacy notice.

The privacy  and cookies notice is required in order to meet the requirements of the General Data Protection Regulation (GDPR) 2018 and the University’s Code of Practice on Data Protection. It is the personal responsibility of the registered school, faculty, service, group or department webmaster to make sure privacy notices are updated and adhered to.

If you have any questions about data protection, privacy or the legislation, contact the IT Servicedesk.

Model privacy and cookies notice

Every University website  must display a prominent link to the privacy  and cookie notice on its first page. Since the introduction of the ‘cookie law’, a link at the top of the page rather than the bottom has been suggested, but this may not always be feasible depending on the design or functional constraints of the system used. ‘Privacy and cookies’ is a suitable link.

The University requires that the model used at www.leeds.ac.uk/privacy is used as a template privacy and cookie notice. All of these sections are required, but you may also need to add specific sections of your own. You will need to check for any additional cookies in use on your site and include them in the notice. If the operator of a website asks for any material variation to this model, you will need to obtain permission by emailing the IT Servicedesk

This notice is intended to be as simple and easy to implement as possible. Contact the University Webmaster with any questions or queries.

A template notice will be added to this page in June 2018.

Obtaining consent for cookies

Major websites in Jadu that are supported by IT services will be provided with a way to help users manage consent for cookies. Work is underway to support standard template sites in WordPress. However, other sites – including web applications or web-based systems also involve cookies.

Cookes which are essential to the function of the site

This includes those used for personalisation (ones to remember a user’s cookie settings). Most of these cookies are set as a part of, or after a login process. Thus, this section essentially consists of a short statement to be placed alongside a login button on a website. It also incorporates text which is required where Active Directory (IT login) accounts are taken by the login process.

By logging into this system you consent to us placing [a cookie][cookies] on your device. The purpose of [this cookie][these cookies] is given in our privacy notice [LINK TO IT]

This service is provided by [YOUR FACULTY ETC] for use by [staff][students][define the category carefully] at the University of Leeds. Use of this service must be in compliance with the University’s Use of Computer Systems Policy.

Please note that other similar wording may be acceptable depending on the purpose of the website. It is important to state that a cookie will be set as part of the login process if that is the case, otherwise it may be sufficient to rely solely on your overall privacy notice.

Tracking and analytics

Use of Google Analytics (and Google Tag Manager) and other tracking tools needs to be noted and the notice for www.leeds.ac.uk includes these for reference.

Advertising/re-marketing cookies

If your website is using the University’s main analytics account then cookies which help us use targeted advertising are part of Google Tag Manager for external-facing websites.

Third-party cookies and tracking

If your website includes third-party services, for example YouTube embed files or Twitter feeds, then these will also be using cookies and need to be listed.

Please e-mail itservicedesk@leeds.ac.uk if you require help with or advice on anything relating to privacy notices. Please also contact me if you have more specific requirements within your own privacy notice.