HESA (Higher Education Statistics Agency, or HESA) is the data controller for any personal data that you provide as part of a consultation through Citizen Space. The technology behind this service and its operation is provided by Delib, our data processor.

When you submit information to us using this service, it's treated sensitively in accordance with data protection principles.

How we will use the information we collect about you
HESA will use your personal information to:

  • For purposes of conducting the surveys
  • To contact you to engage further with the consultation process of survey

Your personal data will be held until one year after the closure of the consultation on the Hub.  We will retain survey responses but will ensure that name or email address assigned to them will be removed.
Please note, retention periods may be extended where there is a statutory, regulatory, legal, operational, or security requirement to do so.

Data Sharing
We may share your survey responses with statutory customers, sector bodies or other organisations involved within the consultation.  We will provide additional information on how responses will be used within each consultation.  We will not disclose your name or email address to organisations we share responses with.

On occasion, personal data may be shared with a third party consultant, or independent chairperson who has been appointed to support the consultation process.

Your rights
You have a right to access your personal data to ensure that it is accurate, and to request that it is rectified, blocked, erased or destroyed if it is inaccurate. All contributors will be asked to clarify their permission to publish their response and may agree to publish in full, publish anonymously or not publish at all.  For information on how to exercise your rights, please see our main privacy information on the HESA website.

Privacy - Further Information
Delib's privacy policy explains how Delib will collect, safeguard and process your data on behalf of HESA.

Email addresses are used to send an acknowledgement of response following submission. They may also be used to contact you in the future in relation to the consultation you have responded to.

Where permission is given, we publish responses. We include personal data where permission has been given to do so. We never publish email or postal addresses.

For information on how HESA collects and processes your data please see our main privacy information on the HESA website.

Delib Privacy Information

Delib’s software (this website) enables organisations to set up and operate democratic exercises, through which they will engage with you.

When you access and use this site, your information submitted to these exercises will go to the data controller: the organisation running this site. If you have provided it, this information may include personal data (e.g. your name, age, contact details etc.).

Delib’s role is to process this data on behalf of the controller. Processing means (among other things): making sure this website runs properly, that your data is securely stored and is available to the controller so that they can do their work effectively.

Our primary purpose is in making software platforms that help you to have your say. To do this we need to make sure that when you do, your data is safe, secure, and can be worked with effectively. So that’s what we do. Delib will not access your personal data unless requested to do so by the controller, and only for the purposes of helping them or you.

The data controller will have a privacy policy or other information notice, which sets out how they will hold and use the information you provide, as well as your rights in relation to that information. This policy or notice may be included on this page, or can be obtained by contacting them.

If you have any questions or requests about your personal data, these should be sent to the data controller in the first instance. Delib cannot directly deal with such enquiries as it does not control how your information is used.

Collection of Browser Information

Delib stores information which is provided by your computer when you use the website. For example, your browser type, IP address, language preference, referring site, and the date and time. Delib's purpose in collecting this information is to maintain the security of the website and for the purposes of operating and improving the software.