Data Processing
Consultancies store sensitive student information on the platform: passports, financial statements, academic records. This page sets out how we process that data on your behalf.
01Scope
We process student personal data only to provide the features your consultancy uses, and only on your documented instructions. We do not use it for our own purposes.
02Data categories
Typical data includes:
- Identity and contact details
- Academic records and test scores
- Passport and visa documents
- Financial documents for funds evidence
- Application, offer and enrolment records
- Counsellor notes and communications
03Security measures
Measures include:
- Encryption in transit and at rest
- Role-based access limited to the assigned counsellor and admins by default
- An audit log of every document view and download
- Expiring, student-specific upload links
- Remote sign-out of mobile devices by admins
- Regular backups and access reviews
04Sub-processors
We use a small number of sub-processors for cloud hosting, encrypted file storage and email delivery. Each is bound by written obligations at least as protective as these. Admins can request the current list through the Connect with us page.
05International transfers
Where data is processed outside the country it was collected in, we use appropriate safeguards required by applicable law.
06Incidents
If we become aware of a personal data breach affecting your students, we will notify your account admins without undue delay with the information you need to meet your own obligations.
07Return and deletion
You can export your data at any time. When your subscription ends, or on request, we delete student data from active systems promptly and from backups on their normal rotation.