Last updated: 17/03/2026
Privacy Notice
This Privacy Policy explains how Middlesbrough College and its subsidiaries (“we”, “us”, “our”) collect, use, and protect your personal data when you use our website (https://www.mbro.ac.uk/) and our services.
We are committed to safeguarding your privacy and ensuring compliance with applicable data protection laws, including the UK GDPR and Data Protection Act 2018.
Who We Are
Middlesbrough College is a further education provider offering post-16 full-time, part-time, university courses and apprenticeships.
Registered address: Middlesbrough College, Dock Street, Middlesbrough, TS2 1AD
What Personal Data We Collect
We may collect and process the following personal data:
- Full name
- Contact details (email address, phone number)
- Postal address
- Date of birth
- Gender
- Employment or company details
- Educational background and qualifications
- Photographs (where required for training/certification)
- Course participation and progress data
This information is typically collected when you:
- Register for a course
- Make an enquiry
- Use our website or services
How We Use Your Data
We use your personal data to:
- Deliver training courses and services
- Communicate with you about bookings or enquiries
- Verify your identity
- Issue certificates and qualifications
- Maintain internal records and administration
- Improve our services and user experience
- Prevent fraud and ensure security
Legal Basis for Processing
We process your personal data under the following lawful bases:
- Contractual necessity – to provide training and services
- Legal obligation – compliance with regulators and authorities
- Legitimate interests – improving services, security and analytics
- Consent – where required (e.g. marketing communications)
Sharing Your Information
We may share your data with:
- Internal staff (tutors, administrators, finance teams)
- Awarding bodies for certification
- Subcontracted training providers
- Government bodies (e.g. funding agencies, regulators)
- Law enforcement where required
We only share data where necessary and ensure appropriate safeguards are in place.
Data Retention
We retain personal data:
- Up to 6 years for standard records
- Up to 13 years where required for funded training programmes
Data Security
We implement appropriate technical and organisational measures to protect your data, including:
- Secure IT systems and access controls
- Restricted access to authorised personnel
- Regular security reviews
Data Protection Policy
Middlesbrough College needs to keep certain information about its employees, learners and other people users to allow it to monitor performance, attendance, achievements, and health and safety, for example. It is also necessary to process information so that staff can be recruited and paid, courses organised and legal obligations to funding bodies and government met.
Our use of information is governed by the principles of the General Data Protection Regulation (GDPR). Middlesbrough College and all staff or others who process or use personal information must ensure that they follow the GDPR principles at all times.
Click here to view the Data Protection Policy
Student Privacy Statement
Why do we collect personal information?
Middlesbrough College collects and processes your personal data to effectively manage your learning, facilitate, support and deliver your education and to meet its statutory obligations as a Further Education college. Middlesbrough College is committed to being transparent about how it collects and uses data and protects your privacy.
Click here to view the Student Privacy Statement
Unsubscribe
To unsubscribe from further communications and marketing information please email unsubscribe@mbro.ac.uk with your name, date of birth and email address and we will remove your details from our records within five working days.
Accessibility Statement
This website is run by Middlesbrough College. We want as many people as possible to be able to use this website. We have made the appropriate adjustments to the website to be compliant with the Web Content Accessibility Guidelines version 2.2 AA Standard, and continue to address and improve any accessibility issues on the website.
Click here to view the full Accessibility Statement
Cookies and Website Data
Our website may collect limited technical data such as:
- IP address
- Browser type
- Website usage data
This helps us:
- Improve website functionality
- Analyse user behaviour
- Maintain security
Cookies may be used to enhance your browsing experience.
Our Cookie Policy can be read here.
Your Rights
Under UK data protection law, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion (where applicable)
- Restrict or object to processing
- Withdraw consent at any time
- Lodge a complaint with the UK Information Commissioner’s Office (ICO)
Legal Status
The Corporation was established under the Further and Higher Education Act 1992 for the purpose of conducting Middlesbrough College. Middlesbrough College was incorporated in June of 1995. The College is an exempt charity for the purposes of the Charities Act 1993 as amended by the Charities Act 2006.
Click here to find out more about our legal status
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.
Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last updated” date.
Contact Us
If you have any questions or wish to exercise your rights, please contact:
Email: dpo@mbro.ac.uk
Complaints
We welcome views and concerns to allow us to improve our services for the future. All correspondence is treated in confidence. Please contact complaints@mbro.ac.uk.
Further information regarding complaints and compliments can be found here.
If you are not satisfied with how we handle your data, you can contact the Information Commissioner’s Office (ICO) https://www.ico.org.uk