Privacy Notices for LCRC Research

Information you need to know

The Leicester Cancer Research Centre (LCRC) is part of the University of Leicester. Further information on the institution can be found on their website.

The University of Leicester is the Data Controller for your information. The Data Protection Officer is: Parmjit Gill, who can be contacted by email: dpo@leicester.ac.uk.

What is ‘personal information’?

‘Personal information’ means any information which relates to you and can be used to directly or indirectly identify you.

What information are we collecting or using?

If you have participated in the ExPAT study, we may process your data for the further research in ExMORE. You will have been informed of this prior to the research.

The personal data we process about will be:

• Medical history relevant to your cancer diagnosis
• Tumour pathology results
• Records of previous treatments

Your data will be stored securely on University systems.

Why are we processing your data?

We process your personal data to support scientific research into cancer treatment and response.

Specifically, we use your data to:

• Analyse tumour pathology in relation to your medical history and treatment outcomes
• Monitor the results of your treatments
• Contribute to our goal of identifying more effective treatments going forwards

This research may support future advances in the treatment of cancer.

What is our legal basis for using your data?

The legal basis for the processing of participant information that we are collecting and using for the study is that it is ‘necessary for the performance of a task in the public interest (Public Task)’ as set out in the Data Protection Act 2018 and UK GDPR Article 6.1.(e). Research is a task that is performed in the public interest.

Our additional conditions for processing special category information are:

that it is necessary for ‘archiving in the public interest, scientific research or statistical purposes’ as set out in the Data Protection Act 2018 and UK GDPR Article 9.2.(j).

Who will my personal information be shared with?

Your identifiable information will only be accessible to approved researchers from the University of Leicester and University Hospitals of Leicester involved in this study.

Regulatory bodies that may need to audit the study or verify it’s accuracy.

Where did the University of Leicester source my data from?

We collect your data from information provided for the ExPAT study.

How long will the University of Leicester keep my data?

We will retain your identifiable data for 5 years after the end of the research study to meet our legal and reporting obligations. After this period, your personal data will be destroyed. Any fully anonymised data stored in research repositories will not be identifiable.

What rights do I have regarding my data?

You have the right to access, correct, or delete your personal data, to object to or restrict how it is used, to request its transfer to another organisation, and to avoid decisions made solely by automated processes.

Some of the above rights are not absolute. If you want to exercise any of the rights described above, please contact the University’s Information Assurance Team via on the email at the end of this notice.

We will do our best to respond quickly and within the timeframes set out by data protection law. To help us handle your request and improve our services, we may keep a record of our communications with you.

Complaints to the University

If you are dissatisfied with the way the University have used your information, you should complain to the University’s Information Assurance Team via the email at the end of this notice.

Complaints to the ICO

If you are not satisfied with the way the University has handled your complaint, you also have the right to raise your concerns with the Information Commissioner’s Office (ICO). The ICO is an independent authority which oversees how personal data is used. Guidance on how to contact the ICO can be found on the ICO website.

Changes to this privacy notice

This privacy notice was published in November 2025. We may change this privacy notice from time to time and will communicate these changes directly to you where appropriate. If you have any questions about this privacy notice or if you would like to access any of your rights, please contact Information Assurance Services: ias@leicester.ac.uk.