Data Privacy

As part of the Oxford Learning Link registration process, the only data we collect is your institutional email address. This is solely to validate that the requests to access content, e.g. from your VLE/LMS are coming from a valid purchaser. We do not retain any other user information.

Please refer to OUP’s Privacy Policy for broader data privacy information.

Yes - a copy of our policy can be provided for your review on request by sending an e-mail to our Data Privacy Officer at privacy@oup.com.

Colleagues from our Information Security and Data Privacy team carry out annual penetration testing on Oxford Learning Link. The report cannot be shared due to confidentiality, however we can summarise of the nature of the testing completed if desired. Please contact privacy@oup.com for this summary.

The HECVAT, or Higher Education Community Vendor Assessment Tool, is a questionnaire framework designed to help institutions of higher education measure vendor risk. Vendors like OUP complete an Excel template and supply to institutions on request. NB. HECVATs are a North American invention, as such the language within our copy refers to US legislation. Please contact he.onboarding@oup.com for a copy.

OUP has not yet gained Cyber Essentials certification and we are not ISO 27001 certified as an organisation, however our ISDP team will be seeking this in due course.

OUP seek to gain IMS certification by Fall 2022. Certified products listed in the Global IMS directory are guaranteed to meet the 1EdTech standards, which are vetted for student data privacy.