Last updated 6 October 2026.
01Who we are
The Lancaster Ghosal Fund (the Ghosal Investment Fund) is a student society at Lancaster University. The fund is the controller of the personal data described in this notice.
The fund has not appointed a statutory data protection officer. Privacy requests go to enquiries@ghosal.fund.
02What this notice covers
This notice covers:
- the public site at ghosal.fund
- quant applications at quant.ghosal.fund (opens in a new tab)
- interview links and offers at interviews.ghosal.fund (opens in a new tab)
- the officer console at admin.ghosal.fund (opens in a new tab)
A short notice for applicants, the cookie notice, privacy requests, the terms, and the terms of service are separate pages. They are linked under Other notices.
03The data we collect
For an application, the fund collects:
- name, email address, degree, and year
- choices and written answers
- web addresses the applicant types for a portfolio or CV
- an email verification code
- the interview time, once an interview is arranged
- the response to an offer
On the quant form, the applicant pastes those addresses, and the fund stores them.
For officers, the fund collects the sign-in details used to open the officer console. Those accounts are for sign-in to the restricted admin area.
The fund's API logs record the request method, path, status, and duration. The fund does not log application answers, verification codes, or the applicant's email address.
04Why we use it
The fund uses this personal data to:
- recruit members
- arrange interviews
- send the messages the applicant asked for: a verification code, confirmation that the application was received, the interview time, and an offer
- run the officer console
A booked interview and an accepted offer each produce a further confirmation email. Messages are sent from no-reply@ghosal.fund.
Applications and recruitment records are steps towards membership, and they serve the fund's legitimate interest in choosing members.
The verification email is necessary for that request. It is how the fund checks the email address before it keeps the application answers.
Officer accounts are needed to run the society. Officers use them to read applications, arrange interviews, and send offers.
The fund does not use this personal data for advertising, and it does not sell personal data.
05Equity applications
Until the end of Sunday 11 October 2026 (UK time), equity applications on ghosal.fund/apply go to an external application form. That form provider is a separate processor for those responses. The fund does not control how long that provider keeps them. The fund remains the controller, and privacy requests about those applications still go to enquiries@ghosal.fund.
After that date, the apply page on this site says that applications are closed.
06Who handles the data
Quant applications, interview links, and offers are processed by the fund's API.
The fund's hosting provider hosts that system in the European Union. Email is sent from no-reply@ghosal.fund. Officers sign in to a restricted admin area.
The external application form described above is operated by a separate form provider.
07Where the data is held
Personal data in this system is hosted in the European Union, outside the United Kingdom.
The fund relies on the United Kingdom's adequacy regulations for the European Economic Area for that hosting.
Responses on the external application form are processed by that form provider. The fund does not control how long that provider keeps them.
08How long we keep it
These periods are the fund's rule.
- An unsuccessful application is kept for 12 months after the role closes.
- A successful member's application is kept for the time they are in the fund, and for 12 months after they leave.
- A verification code is kept for 15 minutes.
- Server logs that do not contain application answers are kept for a short operational period.
The fund does not log application answers.
09Your rights
You can ask the fund for:
- access
- correction
- deletion
- restriction
- objection
- portability
Requests go to enquiries@ghosal.fund. Writing from the email address on the application helps the fund find the record. How to ask is set out on the privacy-request page. The fund will handle the request under UK data protection law.
10Complaints
You can complain to the Information Commissioner's Office:
Information Commissioner's OfficeWycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
ico.org.uk (opens in a new tab)
You can also write to the fund at enquiries@ghosal.fund.
11Children
The sites are for university applicants, not children.
12Special category data
The fund does not ask for special category data, such as health, ethnicity, religion, or political opinions.
