Writtle University College and ARU have merged. Writtle’s full range of college, degree, postgraduate and short courses will still be delivered on the Writtle campus. See our guide to finding Writtle information on this site.

ARU Biometrics privacy notice

We are ARU Biometrics and we are part of Anglia Ruskin University (ARU) Higher Education Corporation. You can contact us at [email protected]. If you're using our services, this page explains why we may need your personal data.

Why do we need your personal data?

We need your personal data for the following purpose: to contact you in order to discuss services in which you have expressed an interest or have purchased and to contact you about the same or similar services in the future unless you have asked us not to.

What personal data do we need from you?

Personal data

  • Name/contact details
  • Address/location data

Special category data

  • We will not ask you for any special category data

What allows us to use your data in this way?

The Data Protection Act 2018 allows us to use your data under the following condition(s).

Personal data (follow links for guidance)

Special category data

  • Not applicable as we are not using your special category data

Who else will be able to see your data?

Individuals (people who don’t belong to an organisation)

  • Not applicable

Data processors (types of organisation we use to help us deliver our service to you)

  • Not applicable

Other data controllers (organisations that will also use your data for their own purposes)

  • The Human Tissue Authority under their powers of audit

What are your rights over our use of your data?

Our use of your data for this purpose will allow you to exercise the following rights (follow links for further details):

How long will we keep your data?

For more information about our approach to retaining information please visit our Records Management page.

We will delete or destroy the personal data you give us for this purpose:

  • financial records – six years after the financial year in which an order was placed
  • customer database – six years after the financial year in which your last order was placed
  • statutory traceability – six years after the financial year in which an order was placed.

You can find out more about our use of personal data on our website.

Use of your data for this purpose is addressed in the following corporate privacy notices:

  • Other Processing and is referenced under the title 'What is the legal basis for using your personal data?' under section G1-3
  • Cookie information (Website Use) Concerns or Complaints.

If you have concerns over how your data will be used by ARU or by another organisation working with or for us, please contact [email protected] with details.

The Data Protection Act 2018 gives you the right to make a complaint to a regulator about our use of your personal data. The regulator is the Information Commissioner’s Office (ICO) and they can be contacted at:



Privacy notice ref: PN013. Current as at November 2019.