UK Bright Education Limited

1. Introduction

UK Bright Education Limited is committed to protecting the privacy and personal information of prospective students, enrolled students, clients and website visitors.

This policy explains how we collect, use, store, share, retain and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.

Data Controller: UK Bright Education Limited
Company Registration Number: 09430409
Address: 82 London Road, Leicester, LE2 0QR, United Kingdom
Website: https://ukbrighteducation.com
Email: info@ukbrighteducation.com

For questions about this policy or the handling of personal information, please contact us using the details above.

2. Personal Information We Collect

Depending on the services requested, we may collect the following information:

• Full name, date of birth, nationality and contact details.
• Passport and identification information.
• Academic qualifications, transcripts and certificates.
• English language qualifications and examination results.
• Employment history, CVs, references and personal statements.
• Information about intended courses, universities and study preferences.
• Immigration history and visa-related documentation.
• Financial information relevant to university admissions or visa requirements.
• Records of consultations, correspondence and application progress.
• Website enquiries and marketing communication preferences.

We aim to collect only the information reasonably necessary to provide our services.

Where information requires additional protection under data protection legislation, we will identify an appropriate lawful basis and any additional legal conditions before processing it.

3. How We Collect Personal Information

Personal information may be collected through:

• Website enquiry and consultation forms.
• Email, telephone and WhatsApp communications.
• Online consultations.
• Documents submitted directly by students.
• University application and admissions processes.
• Authorised representatives or third parties acting on behalf of students.

Where information is received from another individual or organisation, it will be handled in accordance with applicable data protection requirements.

4. How We Use Personal Information

We process personal information for educational consultancy and related business purposes, including:

• Responding to enquiries and arranging consultations.
• Assessing academic eligibility and course suitability.
• Preparing and submitting university applications.
• Supporting personal statements and research proposals.
• Communicating with universities regarding applications, admissions and offers.
• Providing credibility interview preparation.
• Providing CAS and student visa guidance.
• Supporting pre-departure arrangements and university enrolment.
• Maintaining necessary business and compliance records.
• Sending educational information and marketing communications where permitted by law.

We do not sell personal information to third parties.

5. Lawful Basis for Processing Personal Information

UK Bright Education Limited processes personal information under one or more lawful bases provided by UK GDPR, depending on the purpose and circumstances.

Contract: Where processing is necessary to provide requested consultancy services or take steps before entering into a service agreement.

Legitimate Interests: Where processing is necessary for legitimate business activities, including responding to enquiries, managing applications and maintaining appropriate service records, provided these interests are not overridden by individuals' rights and freedoms.

Legal Obligation: Where processing or retention is necessary to comply with applicable legal requirements.

Consent: Where consent is required, including for certain marketing communications or specific uses of personal information.

Where processing relies on consent, individuals may withdraw their consent at any time. Withdrawal does not affect processing lawfully undertaken before consent was withdrawn.

6. Sharing Personal Information

We may share relevant personal information with:

• Universities and educational institutions selected by the student.
• University admissions and compliance departments.
• Authorised service providers supporting our business operations.
• Professional advisers or regulatory authorities where legally required.

Only information reasonably necessary for the relevant purpose will be shared.

Where third-party service providers process personal information on our behalf, appropriate confidentiality, security and data protection arrangements will be maintained.

Where personal information is transferred outside the United Kingdom, we will comply with applicable international data transfer requirements and implement appropriate safeguards where necessary.

7. Information Security and Governance

UK Bright Education Limited operates a fully online educational consultancy.

We take appropriate organisational and technical measures to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.

These measures include:

• Restricting access to authorised personnel.
• Using appropriate security measures for electronic accounts and systems.
• Limiting the sharing of personal information to legitimate business purposes.
• Maintaining confidentiality when handling student records.
• Reviewing data handling arrangements as appropriate.

Personnel who handle student information are expected to maintain confidentiality and comply with applicable data protection requirements.

8. Data Retention and Secure Deletion

UK Bright Education Limited retains personal information only for as long as necessary for the purposes for which it was collected, subject to applicable legal, regulatory and contractual requirements.

8.1 Students Who Enrol

Personal information and application documents will normally be securely deleted or anonymised 12 months after the student commences their course.

8.2 Prospective Students Who Do Not Enrol

Personal information and application documents will normally be securely deleted or anonymised 12 months after the application is closed or the last substantive contact, whichever is later.

This includes unsuccessful, withdrawn and discontinued applications, as well as enquiries that do not proceed to a formal application.

8.3 Financial and Statutory Records

Certain information may be retained for longer where required by law, including accounting, taxation, regulatory or contractual obligations.

Such information will be retained only for the period necessary to satisfy the relevant requirement.

8.4 Marketing Information

Contact information used for marketing will be retained only while there is a valid lawful basis for its use.

Individuals may unsubscribe from marketing communications at any time.

Where necessary, minimal information may be retained on a suppression list to ensure that individuals who have opted out are not contacted again for direct marketing.

8.5 Secure Deletion and Disposal

When the applicable retention period expires, personal information will be securely deleted, destroyed or anonymised.

This includes information held in relevant electronic systems, email accounts and cloud storage, subject to applicable legal obligations and necessary backup arrangements.

Where immediate deletion from backup systems is not technically possible, the information will remain protected from routine use pending deletion in accordance with the relevant backup arrangements.

Requests for earlier deletion will be considered in accordance with applicable data protection legislation.

9. Individual Data Protection Rights

Under UK GDPR, individuals may have the following rights, subject to applicable legal conditions and exemptions:

• Right of access: To request a copy of personal information held about them.
• Right to rectification: To request correction of inaccurate or incomplete information.
• Right to erasure: To request deletion of personal information in applicable circumstances.
• Right to restrict processing: To request that the use of personal information be restricted in certain circumstances.
• Right to data portability: To request transfer of personal information where applicable.
• Right to object: To object to certain types of processing, including processing based on legitimate interests.
• Rights relating to automated decision-making: To exercise applicable rights concerning solely automated decisions that have legal or similarly significant effects.

Individuals have the right to object to the use of their personal information for direct marketing at any time.

Where processing is based on consent, individuals may withdraw that consent.

To exercise any applicable data protection rights, please contact:

info@ukbrighteducation.com

We will respond within the timescales required by applicable data protection legislation, normally within one calendar month.

We may request appropriate information to verify an individual's identity before responding.

10. Marketing Communications

UK Bright Education Limited may provide information about university courses, admissions, educational opportunities and related services where permitted by applicable law.

Where consent is required for electronic marketing, we will obtain it before sending communications.

Individuals may unsubscribe from marketing emails or request removal from marketing communications by contacting us.

Withdrawing marketing consent or objecting to direct marketing will not affect information that must be retained for other lawful purposes.

11. Website Cookies and Analytics

Our website may use cookies and similar technologies to support website functionality, understand website usage and improve visitor experience.

Where consent is legally required for non-essential cookies or tracking technologies, these will not be activated before appropriate consent has been obtained.

Information about the cookies used, their purposes and available choices will be provided through our website's cookie information or consent controls.

12. Third-Party Websites and Services

Our website may contain links to universities, educational organisations and other third-party websites.

UK Bright Education Limited is not responsible for the privacy practices of independently operated third-party websites.

We recommend reviewing their privacy policies before submitting personal information.

13. Complaints and Contact Information

If you have concerns about how we collect, use or protect your personal information, please contact us so that we can investigate and respond.

UK Bright Education Limited
82 London Road
Leicester, LE2 0QR
United Kingdom

Email: info@ukbrighteducation.com

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

ICO Website: https://ico.org.uk

14. Changes to This Policy

UK Bright Education Limited may update this policy periodically to reflect changes in legislation, business practices or the services provided.

The latest version will be published on our website with its updated revision date.

Where changes materially affect how personal information is used, additional notice will be provided where required by law.