Data Privacy


As part of the Oxford Learning Link registration process, the only data we collect is your institutional email address. This is solely to validate that the requests to access content, e.g. from your VLE/LMS are coming from a valid purchaser. We do not retain any other user information.

Please refer to OUP’s Privacy Policy for broader data privacy information.

Yes - a copy of our policy can be provided for your review on request by sending an e-mail to our Data Privacy Officer at

The HECVAT, or Higher Education Community Vendor Assessment Tool, is a questionnaire framework designed to help institutions of higher education measure vendor risk. Vendors like OUP complete an Excel template and supply to institutions on request. NB. HECVATs are a North American invention, as such the language within our copy refers to US legislation. Please contact for a copy.

OUP has not gained Cyber Essentials certification, however we are ISO 27001 certified as an organisation. With ISO 27001, our controls are significantly more stringent and advanced than controls under Cyber Essentials. Customers can see proof of ISO 27001 certification on the BSI directory .

Back to top