The University of Westminster supports the NHS Test and Trace asymptomatic testing scheme to help contain the spread of the COVID-19 virus in England. We do so by offering to students and staff colleagues the opportunity to book and attend a COVID-19 asymptomatic test at two of our University sites, Marylebone and Harrow.

For more information on how the University’s asymptomatic test booking and test site attendance systems uses your personal data, please see below.


The University of Westminster takes its data protection obligations very seriously. Access to any personal information you give us when booking and attending an asymptomatic test at our sites is subject to a staff confidentiality agreement. Access to your personal information is limited by permissions to only those staff and administrators who need access to manage our support of the booking and test attendance processes.

Your personal data

To enable you to book and attend an COVID-19 asymptomatic test at one of our sites, we will ask you to submit personal data in our booking system. This information will enable you to select a site and attendance time of your choice.

It will also be used to check you in to your appointment when you attend. You may be asked to prove your identity on attendance with your student or staff identity card.

Your attendance record will be kept as evidence your attending your booked test and for the University to gather aggregated statistics to monitor the on-going use of our test sites and the effectiveness of any COVID-19 asymptomatic testing opportunities we organise and run.

Use of personal data and legal basis of processing

To help us manage and prioritise test opportunities to those individuals who may benefit most from an asymptomatic test at any particular time, we may use personal data we already hold about you to create specific cohorts for test invitations. We process your personal data in this way as a matter of substantial public interest in the legal area of public health. Processing of this kind is in line with the Public Health (Control of Disease Act) 1984 and the Coronavirus Act 2020 and is needed to protect the welfare and wellbeing of our students and staff colleagues.

When you choose to take the opportunity to book and attend a test at one of our sites, we will gain and record your explicit consent to process your personal information to enable you to confirm the booking time and place of attendance.

We may also create aggregated anonymous reports for management purposes, where no individual will be recognisable, to help us monitor and improve what we do.

Data retention

Where your personal data has been collected in our booking and attendance records, the University will only hold this data for up to three months, after which it will be securely deleted.

Aggregated anonymous data may be kept for a longer period for management and comparative purposes.

Data transfers and sharing

The University will not share the information you give us to book and attend a test at our sites with any other organisation.

When you attend to take an asymptomatic COVID-19 test, you will need to register your personal details with Department of Health and Social Care (DHSC).

For how the DHSC process your personal data, please see the DHSC Data Privacy Notice.

Where any data captured and held in our booking system involves applications and services supplied by a third-party, these services will be covered by contracts and safeguards to protect your data. You are encouraged to read any privacy or terms of use relating to a third-party service or application prior to use.

Your rights

If you have any questions relating to the use of your personal information in the University’s COVID-19 asymptomatic test booking and attendance processes, please contact the University’s Test Booking Team at .

If you have any questions or concerns about your personal information and your information rights, please see the University’s data protection web pages or contact the Information Compliance Team at [email protected].

You can also contact the Information Commissioner’s Office with any concerns or complaints you may have with the processing of your personal data.

This statement was last reviewed and updated in November 2020.