Skip to main content
report-a-data-breach-1-zp162074

Student privacy notice

Student privacy notice

This notice applies to all students who enrol at the University of Pretoria.

Our students and alumni are at the heart of everything we do. That is why we have created this privacy notice to help you understand how we collect, use, and protect your personal information.

We may need to update it periodically, but we will inform you when we do.

If you have any questions about this notice, please email us at [email protected].

(PLEASE DO NOT USE THIS EMAIL ADDRESS FOR APPLICATION OR REGISTRATION ENQUIRIES. YOU MAY CONTACT THE STUDENT SERVICE CENTRE AT [email protected].)

1. What personal information we collect and generate

We collect personal information that helps us register you as a student and communicate with you while you are a student.

We collect:

  • Your contact information (name, home address, telephone numbers, fax numbers, email addresses, emergency contact information)
  • Your nationality
  • Your ethnic group
  • Your gender
  • Your background information (education, employment, criminal and credit history)
  • Your date of birth
  • Your identity document, passport, or permanent residence number
  • Study permit, visas and travel documentation
  • Your driver's licence
  • Information relating to any disability you may have
  • Your medical information (e.g., treatment at Student Health Services, allergies)
  • Photographs and other visual images (e.g., CCTV footage)
  • Your academic information
  • Your banking details
  • Your biometric information
We generate personal information about you in the form of records.

We generate records about:

  • Your attendance
  • Your academic performance
  • Your academic appeals and disciplinary matters
  • Your acknowledgement and compliance with safety rules and codes of conduct when you use our facilities

2. When and why we collect and process your personal information

2.1. To conclude a contract with you and meet our obligations

We need your personal information to provide educational and related services to you.

We use your personal information when:

  • You pay application, student, residence, and other fees
  • We use your banking details to make payments to you (e.g., NSFAS allowances)
  • We monitor your progress, engagement, and attendance to improve learning outcomes
  • We track access to premises or facilities via access cards or fingerprints
  • We investigate, consider, and monitor your fitness to study, academic appeals, and academic conduct
  • We investigate instances of misconduct and conduct disciplinary proceedings
  • We verify your past academic record with third-party agencies
  • If you are accepted as a student, we keep your online application profile
  • You use University support services (medical care, residences, TuksSport)

2.2. Because of legitimate interest, legal requirement, or consent

We process your personal information because it is in your or our legitimate interest.
  • When you contact us via social media, email, phone, or chat, we use your information to respond and resolve queries
  • To protect your health and safety, we may share information with police and security services when there are protests
  • For virtual academic assessments in remote learning
  • Including your academic achievements in graduation ceremonies and related publications (contact [email protected] to opt-out)
We process your personal information because we are legally required to do so.
  • Producing reports for funding agencies and government departments
  • Monitoring health, safety, and security
  • Disclosing alleged criminal offences to South African Police Services
  • Reporting unprofessional or illegal conduct of health practitioner students to the HPCSA
  • Participating in accreditation evaluations with professional/statutory bodies
We process your personal information with your consent.
  • Verifying your UP qualifications to external parties (e.g., employers)
  • Using your personal information for research
  • Email newsletter subscription (unsubscribe anytime)
  • Sharing academic performance with parents/legal guardians if older than 18; permissions via Student Consent Centre

2.3. Special personal information

Health information for accommodationsWhen you register with the UP Disability Unit
UP Healthcare workers process your health information for proper careWhen you access UP clinics or Student Counselling services

2.4. Further processing

For historical, statistical, or research purposesContacting you for surveys and analyzing results

3. Sharing your personal information with trusted parties

We only use trusted service providers with contracts ensuring security

They help us:

  • Communicate with you
  • Manage academic transcripts, events, and career services
  • Monitor service effectiveness
  • Manage business (accountants, advisors)
  • Provide IT services
  • Deliver teaching and learning services
  • Provide counselling services

Some service providers may be abroad; contracts ensure similar protection standards

Sometimes law requires sharing, e.g., Higher Education Act, Engineering Profession Act, Health Professions Act, NQF Act

4. Minimising the impact of a breach

We have reasonable security measuresMeasures protect your personal information from loss, misuse, unauthorized access, alteration, or destruction
Security measures based on sensitivity of information 
We regularly monitor systemsCannot guarantee no breach, but we monitor vulnerabilities
We notify you of breachesIf personal information is compromised, we inform you and advise how to minimise impact
You can help keep information secureAvoid sharing sensitive information via email; use phone or online forms

5. Your rights regarding your personal information

If you have questions, email [email protected]. Response may take up to a month, and some requests may be refused.

You may ask about your personal informationRight to know what we collect and how we use it
You may access your personal informationSend email to [email protected]. May take up to one month; fee may apply
You have control over your personal informationRequest updates, completion, deletion, structured data export, reuse across services, restrict processing, or human review of automated decisions
You have the right to unsubscribeUnsubscribe from direct marketing communications

Published on 30 November 2022