Privacy policy

1. Introduction

EduForYou Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, store, and share your personal data when you use our website, platform, and services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

EduForYou Ltd is the data controller responsible for your personal data. We are registered in England and Wales under company number 13861059, with our registered office at 59 Union Street, Dunstable, England, LU6 1EX.

2. What Data We Collect

We may collect and process the following categories of personal data:

Category	Examples
Identity Data	Full name, date of birth, nationality
Contact Data	Email address, phone number, postal address
Education Data	Qualifications, course preferences, university applications, Student Finance details
Financial Data	Payment information (processed securely via Stripe), Student Finance eligibility data
Technical Data	IP address, browser type, device information, login data, cookies
Usage Data	Pages visited, features used, quiz results, time spent on platform
Marketing Data	Communication preferences, newsletter subscriptions, referral data

3. How We Use Your Data

We use your personal data for the following purposes:

Purpose	Lawful Basis (UK GDPR)
To provide our educational consultancy services	Performance of a contract (Art. 6(1)(b))
To process university applications on your behalf	Performance of a contract (Art. 6(1)(b))
To assess your eligibility for Student Finance	Legitimate interest (Art. 6(1)(f))
To process payments via Stripe	Performance of a contract (Art. 6(1)(b))
To send marketing communications (with consent)	Consent (Art. 6(1)(a))
To improve our platform and services	Legitimate interest (Art. 6(1)(f))
To comply with legal obligations	Legal obligation (Art. 6(1)(c))

4. Who We Share Your Data With

We may share your personal data with the following categories of recipients, only where necessary and with appropriate safeguards:

• Partner Universities — to process your application and enrolment
• Student Finance England (SFE) — to assist with your funding application
• Payment Processors — Stripe Inc., for secure payment processing
• Email Service Providers — for transactional and marketing communications
• Analytics Providers — anonymised data for platform improvement
• Legal and Regulatory Authorities — where required by law

We do not sell your personal data to third parties.

5. International Transfers

Some of our service providers (such as Stripe and analytics tools) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the Information Commissioner's Office (ICO), or reliance on adequacy decisions.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Student records: 6 years after the end of your course (in line with HMRC requirements)
• Marketing data: Until you withdraw consent or unsubscribe
• Website analytics: 26 months (anonymised)
• Account data: Until you request deletion of your account

7. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of Access — Request a copy of the personal data we hold about you
• Right to Rectification — Request correction of inaccurate or incomplete data
• Right to Erasure — Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing — Request limitation of how we use your data
• Right to Data Portability — Receive your data in a structured, machine-readable format
• Right to Object — Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent — Where processing is based on consent, withdraw it at any time

To exercise any of these rights, please contact us at privacy@eduforyou.co.uk. We will respond within one month, as required by law.

8. Cookies

Our website uses cookies to enhance your experience. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit (TLS/SSL), secure password hashing, role-based access controls, and regular security reviews.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.

11. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated notice on our website with a revised "last updated" date.

12. Contact & Complaints

If you have any questions about this Privacy Notice or wish to exercise your data protection rights, please contact our Data Protection Officer:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):