Canvas Privacy Statement

This Privacy Notice sets out how we use your personal data and your rights regarding that information.

Who will own my data once I submit it?

The University of Liverpool.

Why do you need my information?

The University may your use your personal data as you interact with Canvas to:

  • Provide targeted information, guidance and support.
  • Monitor student attendance, participation, engagement and task completion.
  • Adapt teaching plans.
  • Review student progress.
  • Maintain academic integrity.
  • Help diagnose problems and provide technical support.
  • Process inquiries and respond to requests.
  • Improve services and optimise the course.
  • Inform academic research activity approved by the university ethics committee

The data we collect and use includes:

  • Personal information
    • Name, student email address, student username.
  • Interaction data
    • Technical information about your equipment, including the Internet Protocol (IP) address of your device, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
    • Information about your digital activity, including Uniform Resource Locator (URL) clickstreams (including access dates and times), pages you viewed or searched for, page response times/errors, length of time spent on certain pages, page activity (such as scrolling, clicks, and mouse-overs), your contributions to systems (e.g. Canvas discussion forums, assessment submissions, feedback and results).

What allows you to use my information?

Public task.

Who will my information be shared with?

Your personal information will be accessed by:

  • Authorised staff involved with course management and administration, teaching, communications, and learning and IT support activity.
  • System suppliers involved with the provision of services. (See ‘Additional privacy notices for Canvas and third-party platforms’ below).

Note: Some information you provide via Canvas (such as discussion forums or chat threads) can be accessed by all users of those tools, including student peers.

The following third-party privacy policies relate to the Canvas platform used within the University of Liverpool:

  • Instructure (Instructure is the supplier of Canvas).
  • Anthology Ally
  • Atomic Jolt (relating to the Search tool in Canvas).
  • Badgr (relating to badging in Canvas)
  • Blackboard Ally (relating to the accessibility tool in Canvas).
  • Buddycheck (relating to the peer moderated-marking tool in Canvas).
  • H5P(relating to interactive H5P content).
  • JISC Online Surveys (relating to surveys).
  • Evasys (relating to module evaluation and other surveys).
  • Kortext (relating to the smart study platformthat gives access to online university books anywhere and at any time)
  • Libguides (relating to reading lists and library services)
  • LinkedinLearning (relating to the tutorials and resources via LinkedinLearning)
  • MATLAB coding problem (programming and numeric computing platform)
  • Microsoft (relating to Teams, OneNote and Office365).
  • Mobius (relating to mathematics and STEM)
  • Panopto (relating to recorded content, e.g. lectures).
  • PebblePad (relating to E-portfolio activity).
  • PollEverywhere(relating to interactive content, e.g. questions polls in lectures)
  • Respondus Lockdown Browser
  • Talis Aspire (relating to Reading Lists @ Liverpool).
  • Turnitin (relating to Turnitin-enabled assignments).
  • University Attendance and Absence Systems (relating to registering attendance via the University Timetable app).
  • Zoom (relating to online meetings, teaching, group study and tutorials).

Do I have to provide this information and what will happen if I don’t?

We use a number of suppliers who process personal information on our behalf. These include suppliers of software services. These act strictly on our instructions and must not use the information for their own purposes. In exceptional circumstances we may be asked to share your information with police or other investigators if it would prevent or detect crime or safeguard a person’s wellbeing. Each instance will be judged on its own merit and any sharing of information will be done within the law.

How long will you keep this data for and why?

Student records are kept for 6 years after the point of leaving the programme in line with the University’s retention schedule.

How will my information be stored?

The data will be kept via our VLE, Canvas, or if you have used any embedded, 3rd party tool within Canvas (e.g. PebblePad, Panopto, Turnitin), then within 3rd party tool.

Will this information be used to take automated decisions about me?

No.

Will my data be transferred abroad and why?

In some circumstances the University may need to transfer your personal data outside the European Economic Area (EEA). If this is the case the University will ensure that there are adequate levels of protection and safeguards in place so that your data is handled appropriately and securely in accordance with data protection laws.

What rights do I have when it comes to my data?

Under the UK General Data Protection Regulation, you may have the following rights with regards to your personal data:

  • The Right to subject access – you have the right to see a copy of the personal data that the University holds about you and find out what it is used for.
  • The Right to rectification – you have the right to ask the University to correct or remove any inaccurate data that we hold about you.
  • The Right to erasure (right to be forgotten) you have the right to ask the University to remove data that we hold about you.
  • The Right to restriction – you have the right to ask for your information to be restricted (locked down) on University systems.
  • The Right to data portability – you have the right to ask for your data to be transferred back to you or to a new provider at your request.
  • The Right to object – you have the right to ask the University to stop using your personal data or to stop sending you marketing information, or complain about how your data is used.
  • The Right to prevent automated decision making – you have the right to ask the University to stop using your data to make automated decisions about you or to stop profiling your behaviour (where applicable).

Please note that not all rights apply in all situations. To find out more about your rights under the UK GDPR, please visit the Information Commissioner’s website.

To request a copy of your data or ask questions about how it is used, contact the University Data Protection Officer.

  • Email: legal@liverpool.ac.uk
  • Post: Legal & Governance, University of Liverpool, Foundation Building, 765 Brownlow Hill, Liverpool L69 7ZX

Who can I complain to if I am unhappy about how my data is used?

You can complain directly to the Data Protection Team by writing to the University Data Protection Officer.

  • By email: legal@liverpool.ac.uk
  • Post: Legal & Governance, University of Liverpool, Foundation Building, 765 Brownlow Hill, Liverpool L69 7ZX

You also have the right to complain to the Information Commissioner’s Office using the following details:

    • The Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
    • Telephone: 08456 30 60 60 or 01625 54 57 45
    • Website: ico.org.uk

Version: 1 01_06_2023
Last update: 30 August 2023

Back to: Legal & Governance