1. Introduction
We respect your privacy and are committed to protecting your personal data in line with:
- ✔ UK GDPR
- ✔ Data Protection Act 2018
- ✔ Privacy and Electronic Communications Regulations (PECR)
2. Data We Collect
| Data Type | Examples | When Collected |
|---|---|---|
| Identity Data | Name, title, job role | Accreditation applications |
| Contact Data | Email, phone, institution address | Enquiries or sign-ups |
| Professional Data | Qualifications, CVs, institutional records | Accreditation processes |
| Technical Data | IP address, browser type, cookies | Website visits |
| Financial Data | Payment details (processed via secure gateways) | Service purchases |
3. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Processing accreditation applications | Contractual necessity |
| Verifying institutional/professional credentials | Legal obligation |
| Sending service updates (non-marketing) | Legitimate interest |
| Marketing communications (e.g., newsletters) | Explicit consent |
| Improving our services | Legitimate interest |
Marketing opt-outs available in all communications.
4. Data Sharing & Transfers
We only share data with:
- ✓ Accreditation panels (under confidentiality agreements)
- ✓ UK regulators (where legally required)
- ✓ Trusted processors (e.g., cloud storage providers with GDPR-compliant contracts)
International transfers:
- ✓ Data stored primarily in the UK/EEA
- ✓ Extra safeguards (Standard Contractual Clauses) for transfers outside EEA
5. Your Rights
| Right | How to Exercise |
|---|---|
| Access your data | Submit a Subject Access Request Form |
| Correct inaccuracies | Email privacy@ukeducationbridge.com |
| Request deletion | Where no legal retention requirement applies |
| Object to processing | For direct marketing or legitimate interests |
| Data portability | For automated, consent-based data |
Response time: 30 days (free of charge unless excessive).
6. Data Security
- ✓ Encryption: SSL/TLS for all online transactions
- ✓ Access controls: Role-based staff permissions
- ✓ Breach protocol: ICO notification within 72 hours if risk identified
7. Retention Periods
| Data Type | Retention Period |
|---|---|
| Accreditation records | 6 years post-decision |
| Financial transactions | 7 years (HMRC compliance) |
| Website analytics | 26 months |
| Unsuccessful applications | 2 years |
8. Cookies & Tracking
See our detailed Cookies Policy for opt-out options.