Data retention policy
Updated May 2026
The Learning Resource Centre (LRC) maintains certain user information for operational, administrative, security, and statistical purposes in accordance with University policies and applicable data protection requirements.
Access to user information is restricted to authorised LRC staff and relevant University personnel where necessary.
Electronically Held User Information
Information relating to LRC users and borrowing transactions is stored electronically within authorised University systems and library management platforms.
Such information is used for:
- Managing library services and access
- Processing borrowing and returns
- Providing user support
- Statistical reporting and service improvement
- Security, audit, and operational purposes
Access to this information is limited to authorised staff with appropriate responsibilities.
Student Records
Student records are normally imported automatically from the University student records system.
- Records are updated regularly through authorised institutional systems
- Expired student records are normally removed within one month of account expiry
- Records relating to withdrawn or non-enrolled students may be removed following official notification from the relevant University department
Staff Records
Staff membership records are maintained for the administration of LRC services and borrowing privileges.
- Staff records may be created manually or through authorised University systems
- Records are normally retained for up to six months after expiry of employment or membership access, unless a longer retention period is required for administrative purposes
Transaction Records
Borrowing and transaction records may be retained for operational, statistical, audit, security, and service management purposes.
This information assists the LRC in:
- Producing usage statistics
- Managing service operations
- Supporting investigations where necessary
- Maintaining appropriate audit trails
Retention periods may vary according to operational or legal requirements.
Paper-Based User Information
Paper records relating to staff, academic visitors, or external users may be retained for administrative and verification purposes.
Application forms and related documentation are normally retained for up to one year following the expiry of membership access, after which they are securely disposed of in accordance with University procedures.
Data Protection and Confidentiality
The LRC is committed to handling personal data responsibly and in accordance with applicable data protection legislation and University policies.
Personal information will only be used for legitimate University and LRC operational purposes and will not be disclosed to unauthorised individuals or external parties except where required by law or University regulations.