Privacy Notice

London Universities Purchasing Consortium (LUPC) is committed to protecting your privacy, providing clear information about how your personal data is processed and complying with data protection law. This Privacy Notice sets out how LUPC collects and uses your personal information. Please read this Privacy Notice carefully.


About Us

In this Privacy Notice references to "we" or "us" or "our" are to: London Universities Purchasing Consortium (LUPC), is a company limited by guarantee reg. no. 04784719, registered address is Shropshire House, 179 Tottenham Court Road, London, W1T 7NZ. We act as data controller in respect of the personal information that we process. If you have any questions about how we collect, store or use your information, or you would like to update the information we hold about you, you may contact us through the following email address

About this Privacy Notice

This Privacy Notice tells you what personal information we collect, and why we need it, how we use it and what protections are in place to keep your personal information secure. This Privacy Notice applies to

  • visitors to our website, (website);
  • staff members, contractors and subcontractors of LUPC members;
  • and staff members, contractors and subcontractors of suppliers appointed to framework agreements available to LUPC members.

A list of LUPC members is available The type of personal information we collect about you – and the personal information we obtain from third parties - depends to some extent on your circumstances, your role within a member or a supplier (if applicable) and our legal obligations. This Privacy Notice was last updated on 19 February 2018. Any changes to this Privacy Notice will be highlighted to you in an updated Privacy Notice.

What is 'personal information'?

Your 'personal information' means information about you, and any information from which you can be identified - either by reference to an identifier (for example your name, location data or online identifier (IP address)) or from factors specific to your physical, cultural or social identity.

Who do we collect personal information from?

We may collect personal information:

  • From you, where you visit our Website, complete one of our online forms or contact us;
  • From LUPC members;
  • When you attend an LUPC or LUPC partners event; and
  • From suppliers appointed to Framework Agreements available to LUPC members.


How do we collect personal information?

Information provided to us by you

Personal information is provided to us by you:

  • when you enter information into our Website or online forms; and
  • when you contact us by email, by telephone or by post.

Information collected automatically by us

Personal information is collected by us automatically, when you visit our Website.

Information provided to us by third parties

Personal information provided to us by third parties such as LUPC members and suppliers may include:

  • your name and contact details;
  • your employment details; and
  • your CV.

What do we use your personal information for?

What your personal information is used for

We use your personal information for the following purposes:

Information you give to us

We will use this information:

  • to provide you with any information or assistance requested by you.
  • to send you emails regarding LUPC events, training and other membership benefits. We may pass your details on to framework suppliers so that they may contact you about their products and services.

In these circumstances, the legal basis for processing the data is your consent. Please note that you have the right to withdraw your consent to this processing at any time by contacting us using the details set out in the Introduction section above. If you choose to withdraw your consent, this will not affect the lawfulness of the processing that occurred prior to the withdrawal.

Information collected automatically by us

We will use this information:

  • to administer our Website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
  • to improve our Website to ensure that content is presented in the most effective manner for you and for your computer;
  • to allow you to participate in interactive features of our Website, when you choose to do so; and
  • as part of our efforts to keep our website safe and secure.

In these circumstances, the legal basis for processing the data is our legitimate interest in administering and improving our Website and its features, and keeping our Website secure.

Information provided to us by third parties

We will use this information:

In these circumstances, the legal basis for processing the data may be the legitimate interest of LUPC, its members and third party suppliers to conduct business operations.

Who do we share your personal information with?

Your personal information

We may share your personal information with the following third parties, where relevant:

  • approved suppliers (only those on consortia framework agreements);
  • other Members, only where relevant;
  • and mailing fulfillment suppliers for distribution of materials.


We may also share your information with third parties such as Member benefit providers (Creditsafe and Electronics Watch) and regulatory authorities, or where we are under a legal obligation to disclose your information (for example where we are required to share information in accordance with legislation, to prevent fraud and other criminal offences, or because of a court order). We may disclose your information in order to enforce our legal rights or to protect the legal rights of our members or others.

How do we keep your personal information safe?

What we do

We have security measures in place to restrict access to personal information, to guard against unauthorised or unlawful processing of personal information and against damage to, accidental loss or destruction of, your personal information.

The security measures applied include:

  • hard copy records and manual files are kept to a minimum but those kept are in locked filing cabinets; and
  • electronic records are kept in an electronic filing system with access restricted to LUPC staff.

Third parties

The terms of our contracts with third party contractors include obligations on them in relation to what personal information they can process and what they can do with that information. Our third party contractors include:

How long do we keep your personal information for?

We keep your personal information only for as long as is reasonably necessary for the purposes for which we process your personal information. These purposes are listed at section 5 of this Privacy Notice What do we use your personal information for?

Your personal information is kept for as long as your institution remains a member of LUPC. In the case of suppliers, bidder information will be held in line with the requirements of the Public Procurement Regulations, whilst marketing contacts will be deleted at the end of the contract term.

Automated decision-making and profiling

What we do

No automated decision making or profiling is carried out by LUPC.

International data transfers

We do not transfer your personal data outside of the EEA. Where our third party contractors process your personal data outside of the EEA they are required to ensure the adequate protection of your personal data.

Your rights

You have certain rights under data protection legislation in relation to the personal information that we hold about you. These rights apply only in particular circumstances and are subject to certain exemptions such as public interest (for example the prevention of crime). They include:

If you would like to contact us about your rights, please see the contact details in section 1 Introduction.


Remember, to contact us about your data, please email: