This privacy notice explains how the Institute of Contemporary Performance (“ICMP”, "we", "our", "us") collects, uses, and shares your personal data, specifically your health data regarding Covid-19. This privacy notice concerns our processing of personal data of people who interact with ICMP ("you", "your").

ICMP is the data controller of your personal data and is subject to the UK’s General Data Protection Regulation 2021 (UK GDPR 2021).


We collect your personal data directly from you.


We will collect the following types of personal data about you:

  • your name, email address and telephone number.
  • Health information, such as symptoms and medical diagnosis.

We will ensure that all personal data you supply is held in accordance with the UK GDPR. We do not sell or otherwise transfer this personal data to any third parties unless this is permitted by law.


The purposes for which we may use personal data is:

  • Reduce the risk of an outbreak
  • To trace contacts and advise others
  • For members of staff, to process payroll and statutory sick pay
  • For students, to support your academic activities

We are required to send some of the information we hold on staff and students to Public Health England. This data is typically anonymised but in the case of an outbreak, we may have to submit personal records.  Please see PHE’s privacy notice for more information.


Your personal information is protected by us in a number of ways.

It is stored on computer systems that have been tested to make sure they are secure and which are kept up-to-date to protect them from viruses and hacking. Where we share your personal information with other organisations, we only ever do so using secure computer systems or encrypted email.

We store your personal information in the UK only.

Your information used by us can only be seen by staff who have been specifically trained to protect your privacy.

No information that could identify you will ever be published by us.


For members of staff your personal data will form part of your general staff record. We are required by HMRC to retain staff records for seven years after the termination of your employment contract.

For students your personal data will form part of your academic record and we may retain your personal data for a period of six years after your association with us has come to an end.


Under the UK GDPR you have the following rights:

  • to obtain access to, and copies of, the personal data that we hold about you;
  • to require that we cease processing your personal data if the processing is causing you damage or distress;
  • to require us not to send you marketing communications.
  • to require us to correct the personal data we hold about you if it is incorrect;
  • to require us to erase your personal data;
  • to require us to restrict our data processing activities (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal);
  • to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller;
  • to object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights.

Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply.


If you have any queries about this privacy notice, how we process your personal data or to request access to the personal data that we hold about you, you can contact our Data Protection Officer by email: dataprotection@icmp.ac.uk;  by telephone: +44 020 8038 2399;  or by post: Data Protection Officer, ICMP, 1B Dyne Road, Kilburn, London NW6 7XG.

If you are not satisfied with how we are processing your personal data, you can make a complaint to the Information Commissioner.

You can find out more about your rights under data protection legislation from the Information Commissioner's Office website available at: www.ico.org.uk.

 If you would like more details about how we use and store your personal data, you can view our Data Protection Manual on our Policies Page.