Skip to main content Skip to footer

Privacy Policy

The Higher Education Outreach Network (HEON) is a partnership of 9 educational partners (University of Surrey; Royal Holloway; University of Creative Arts; NESCOT; Guildford College; Farnborough College of Technology, University of Law, Brooklands College, The Academy of Contemporary Music), and 2 other partners (Surrey County Council, and the Surrey Sports Park) working together as part of the Uni Connect programme to support the government’s aims of increasing participation of underrepresented groups in Higher Education.

How we handle personal data

As per UK data protection legislation the Higher Education Outreach Network (HEON) which is hosted at the University of Surrey is legally responsible for the personal data we collect and hold about you. One of our responsibilities is to tell you about the different ways we collect and use your personal data. This statement provides details about these uses. In addition to this statement, you may be given further information about the uses of your personal data when you use certain services offered by HEON.

Personal data is data relating to a living individual who can be identified from that data or from that data and other information in HEON’s possession. It includes data such as name, address, id number etc. Sensitive personal data is defined in the Data Protection Act and is data relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, health, sex life, criminal convictions.

You have the right to ask HEON whether we hold your personal information and to see a copy of this information. If you would like to submit a subject access request, please contact us at in the first instance.

For what reason do we collect and process personal data?

HEON processes personal data in accordance with the Data Protection Act as well as the University of Surrey’s Data Protection Policy.

HEON collects only the data we need and we keep that data up to date. We collect data from students or their parents themselves through demographic forms and application forms. These forms will always explicitly state the reason for the data being requested, and also ask for you to provide consent for its use.

Within HEON, personal data, including sensitive personal data may be shared between colleagues who legitimately need the information to carry out their normal duties to support the data subject during our programme of activities.

HEON needs to process certain personal data for a number of purposes:

How long do we hold personal data?

Your data will be retained for 2 years after the close of the programme or until 25 years of age (whichever comes first). After this time, your data will be anonymised and identifiable data securely deleted.

How do we share your data with third parties?

Higher Education Access Tracker (HEAT) –

HEON partners with HEAT to help determine whether our activities are helping participants move on from school into further education, higher education and employment it is important that we collect information about the students who take part in them.

We use the HEAT service and database ( to record information about our outreach activities and the students who take part in these activities.  HEAT gives us the ability to track the educational journey of our outreach participants into university and beyond into employment. To find out more about how HEAT does this please go to 

Personal identifiable data is only shared with HEAT with your consent.

CFE Research –

CFE Research has been commissioned by the Office for Students to evaluate the overall impact of the Uni Connect. CFE will be collecting their own data, and using data collected by HEON and HEAT to carry out this evaluation.

The Office for Students (OfS) (

HEON will provide regular reports to OfS on the effectiveness of the programme. This data will be summarised in reports, and will be shared anonymously.

HEON may share personal data, including sensitive personal data, outside of the partnership in certain other exceptional circumstances, for example if it is needed to protect your vital interests or the vital interests of another person; or for certain other reasons where it is not possible or appropriate to gain your consent such as disclosures to the police for prevention or detection of crime and apprehension or prosecution of offenders, if it is required by a Court Order, or to obtain legal advice.


This privacy statement describes how The Higher Education Outreach Network (HEON) uses and protects any information that you give HEON when you use this website.

HEON is committed to ensuring that your privacy is protected. If you choose to submit any information on this website, it will be stored securely on University of Surrey servers, and only used to keep you informed of activities run by HEON and our partners. HEON will not sell or distribute your information to third parties unless you have given permission or there is a legal requirement to do so.

HEON may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 01/01/2017.


We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

How we use cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.