Sutton Scholars Evaluation

NFER is evaluating the Sutton Trust’s Sutton Scholars programme, which gives young people an early opportunity to find out what university is like and to make choices about their future education. The Sutton Trust wants to assess whether the programme is meeting its aims. To help them do so, NFER is investigating:

Young people participating in the programme are asked to complete questionnaires and interviews are being conducted with a sample of programme staff and students.

Privacy Notice

1. Why are we collecting this data?

The Sutton Trust (‘The Trust’) has commissioned NFER to evaluate its Sutton Scholars programme for the 2016-19 cohort, to assess whether the programme is meeting its aims. The Trust needs to evidence the effectiveness of its programmes to funders, donors and trustees. As a social mobility charity, The Trust also aims to demonstrate the impact of its programmes on social mobility over time.

To help them do so, NFER is investigating:

Your data will be treated confidentially. We will not say anything in our reports that could identify you and will not use your data in a way that would affect you individually. We will not use the data you provide for marketing purposes or pass it on to any third party not involved with the delivery or evaluation of the programme.

2. Who is this research project sponsored and funded by?

The NFER is undertaking this research on behalf of the Sutton Trust (the Data Controller). NFER is the data processor.  

3. What is the legal basis for processing activities?

The legal basis for processing personal data is covered by:

GDPR Article 6 (1) (f) which states that ‘processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party except where such interest are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of the personal data’. 

The study contributes to The Trust’s work improving social mobility in the UK through evidence-based programmes, research and policy advocacy and is therefore in its legitimate interests   You have the right to object to this processing if you wish, please see who to contact in Section 10 below.

4. How will personal data be obtained?

Students’ personal data is obtained by the universities running the Sutton Scholars programme and then sent to The Trust.

The Trust then sends personal data to NFER via secure portal, unless students or their parents have specifically requested for their data not to be included in the evaluation.  

5. What personal data is being collected by this project?

The personal data being collected is:

6. Who will the personal data be shared with?

The data will be shared between the university providing the programme, The Trust and NFER.  All data will be shared via secure portal and will be held securely.

7. Is personal data being transferred outside of the European Economic Area (EEA)?


8. How long will personal data be retained?

Most of your data will be held for one year following the completion of the evaluation. Some data is however required for longer, to track your future education outcomes and university and career destinations. We will then delete all identifiable information in accordance with NFER’s internal policy. 

9. What rights do individuals have over their personal data?

NFER handles your personal data in accordance with the rights given to individuals under data protection legislation.  If at any time you wish us to withdraw your data or correct errors in it, please contact the Sutton Trust at

In certain circumstances, data subjects have the right to restrict or object processing, please contact our Compliance Officer.  They also have the right to see information held about them.  NFER will cooperate fully when a subject access request (SAR) is made.

10. Who can I contact about this project?

NFER is responsible for the day-to-day management of this project.  Contact Asma Ullah at NFER on 01753 637432 with any queries.

You can contact the Sutton Trust at

If you have a concern about the way this project processes personal data, we request that you raise your concern with us in the first instance (see the details above). Alternatively, you can contact the Information Commissioner’s Office, the body responsible for enforcing data protection legislation in the UK, at