— Legal & Compliance

Privacy Policy

This Privacy Policy explains how EduSuccess.io ("EduSuccess", "we", "us", or "our") collects, uses, stores, and protects personal information provided by students, prospective students, and visitors who use our website and international education advisory services.

We are committed to handling personal information responsibly and transparently. Where applicable, we process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Collection & Lawful Processing

1.1 Personal Data We Collect

1.2 Lawful Bases for Processing

We collect personal information that you provide directly when registering for advisory sessions, completing qualification assessments, or requesting university application guidance. This includes your name, email address, phone number, nationality, academic history, qualifications, course preferences, and visa documentation details.

Under Article 6 of the UK GDPR, we process personal data under the following lawful bases: (a) Consent for marketing communications and analytics cookies; (b) Contractual Necessity to perform admissions advisory and student placement agreements; and (c) Legitimate Interests in evaluating service quality, preventing fraud, and optimizing platform performance.

We also automatically capture technical usage data when you navigate our site, such as IP addresses, browser types, device information, and interaction timestamps.

1.3 Cookies & Tracking Technologies

We use essential cookies required for core site operation and optional analytical cookies to assess visitor traffic patterns. You can manage your preferences at any time via your browser settings or our cookie consent manager.

2. Data Sharing, Transfers & Retention

2.1 Data Sharing

2.2 International Transfers

2.3 Security & Retention

We share personal information strictly with partner universities, education institutions, visa advisory partners, and cloud service providers necessary to fulfill your study pathway requests. We do not sell personal data to third parties.

When personal data is transferred outside the UK to overseas educational institutions, we enforce appropriate safeguards including Standard Contractual Clauses (SCCs) and UK International Data Transfer Agreements (IDTA) to protect your rights.

We maintain encryption protocols, role-based access controls, and secure server standards. We retain personal data only as long as necessary to fulfill advisory purpose requirements or legal compliance mandates, after which records are deleted.

Email Privacy Team

3. Your Rights & Contact Details

3.1 User Rights under UK GDPR

Data Controller Details

Under UK data protection laws, you have the right to request access to your personal data, request correction of inaccurate records, request deletion of data, object to or restrict processing, and request data portability.

Legal Name: [INSERT LEGAL ENTITY NAME] Privacy Contact: [INSERT PRIVACY EMAIL, e.g. privacy@edusuccess.io] Registered Address: [INSERT REGISTERED ADDRESS] ICO Registration: [INSERT ICO REGISTRATION NUMBER]

3.2 Children's Privacy & Complaints

Our website and advisory services are directed at individuals aged 16 and older. If you believe a young person under 16 has submitted personal data without parental consent, please notify our privacy officer immediately.

You also have the right to lodge a formal complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters (www.ico.org.uk). ICO Registration Details: [INSERT ICO REGISTRATION NUMBER].