Data Privacy

As part of the Oxford Learning Link registration process, the only data we collect is your institutional email address. This is solely to validate that the requests to access content, e.g. from your VLE/LMS are coming from a valid purchaser. We do not retain any other user information.

Please refer to OUP’s Privacy Policy for broader data privacy information.

Yes - a copy of our policy can be provided for your review on request by sending an e-mail to our Data Privacy Officer at privacy@oup.com.

Colleagues from our Information Security and Data Privacy team carry out annual penetration testing on Oxford Learning Link. The report cannot be shared due to confidentiality, however we can summarise of the nature of the testing completed if desired. Please contact privacy@oup.com for this summary.

The HECVAT, or Higher Education Community Vendor Assessment Tool, is a questionnaire framework designed to help institutions of higher education measure vendor risk. Vendors like OUP complete an Excel template and supply to institutions on request. NB. HECVATs are a North American invention, as such the language within our copy refers to US legislation. Please contact he.onboarding@oup.com for a copy.

OUP has not gained Cyber Essentials certification, however we are ISO 27001 certified as an organisation. With ISO 27001, our controls are significantly more stringent and advanced than controls under Cyber Essentials. Customers can see proof of ISO 27001 certification on the BSI directory .

OUP seek to gain IMS certification by Fall 2022. Certified products listed in the Global IMS directory are guaranteed to meet the 1EdTech standards, which are vetted for student data privacy.