The Data Controller, UK College Admissions Ltd, a company registered in the United Kingdom (Registered No. 12138795) at 1 Sharples Close, Bristol, BS16 1AQ, UK is committed to protecting your privacy in accordance with the Data Protection Act 1998 (the ‘Act’) and the General Data Protection Regulation (the ‘GDPR’). If you have any questions about this policy, the representative responsible for Data Protection, the Data Protection Officer, can be contacted by sending an email to firstname.lastname@example.org
UK College Admissions Ltd is an independent online information source. Our services include online information and consultancy services. Our websites is www.ukcollegeadmissions.com
Information We Collect
To use some of our services, you must provide your name, address, email address and in some instances your company name, job title and telephone number. In order to make payments, you must provide credit card, debit card or bank account information. We do not collect any special category data such as information on your racial or ethnic origins, political opinions, trade union affiliations, sexual life or criminal history.
When you access our services online using any device, we collect and store device data including but not limited to geolocation data to provide offers relevant to your region (using cookies). We also collect information such as which pages of our website you visit, IP addresses, the type of browser you use, details of the transactions you have made, time spent on the website, the type of device you are using, and the times you access our website.
We will only keep your information for as long as is necessary for the purpose of providing you with the service you have requested from us or to meet specific anti-fraud and legal requirements. If you would like more information, please contact the Data Protection Officer.
The provision of the information detailed above is a requirement necessary to provide our services. By providing your information and using our service you are entering a contract for the term of the service. If you object or are not willing to provide this information, please do not register or use these services.
How We Use the Information We Collect
Our primary purpose in collecting your information is to provide you with a service. You agree that we may use your personal information to:
• Provide the service to you
• Notify you about your service
• Carry out internal administration and analysis
• Monitor and improve the performance of, and products & services available via, our website
If you subscribe to our website, you will enter into a contract with us. This means that during the contractual period we will communicate with you about this contract. In this respect ‘performance of a contract’ is our legal basis for processing your data.
Similarly, advertiser data will be processed under ‘performance of a contract’ if the third party enters into a commercial contract i.e. pays for advertising on our website.
For client prospect data, we will use ‘Legitimate Interest’ as our legal basis for contacting prospective clients. An opt out for these types of communication will be offered on the channel used, for example, via email or telephone call.
How We Use the Information for Marketing
We will only send you direct marketing communications in circumstances where we have your specific consent or where we believe we can demonstrate a legitimate interest.
When you sign up to any of our services, we ask for your consent to send you direct marketing communication over a variety of channels. We will honour your right to withdraw your consent at any time.
When you enquire about or request a service from us, we may rely on our legitimate business interests to send you marketing communications (via post, email or telephone). This relates to individual customers as well as clients e.g. advertisers. These communications will always be related to our services and we believe will be of interest to you. We will always provide you with the opportunity to opt-out of marketing communications when you provide your information to us.
If you want to stop receiving direct marketing from us, you can use the unsubscribe mechanism on any email you receive, tell us when we call you, or alternatively you can contact the Data Protection Officer using the details available in the Privacy Summary.
We use web beacons in our emails to track the success of our marketing campaigns. If you open an email from us, we can see which of the pages of our website you visited. Our web beacons communicate with our cookies on your computer and they can tell us when you have opened an email from us. We keep track of the emails that we send you. We also keep a record of what communications you have selected to receive or not to receive. We will only send you marketing emails if you have consented to receive these. You are able to access your preference centre from any marketing email that we send you and update your preferences through this mechanism. You may also unsubscribe by clicking on the ‘unsubscribe’ link in any of our emails to you.
Data Profiling and Remarketing
Periodically we conduct data profiling on the information we collect to better understand our customers in order to provide targeted communications which suit your needs. We rely on ‘legitimate interests’ as our lawful basis for processing this data.
In order to serve adverts on our websites and report on their performance, we use an advertising management system. This system gathers information using IP addresses. This allows us to target adverts by geo-location and device in order to make adverts from third parties more relevant to the user. We also serve targeted adverts for our own products based on user behaviour on our own websites.
Legitimate interest is used as the lawful basis for data profiling and remarketing. However, if we target email data for this activity we will use opted in data where the user has consented to marketing.
If you wish to stop your information being used for data profiling and remarketing, please contact the Data Protection Officer.
How We Share Information with Third Parties
We will not sell or rent your information to third parties for their marketing purposes without your consent. However, just like most service providers, UK College Admissions Ltd works with third parties who administer important functions for us that allow us to offer and enhance the services we provide. These providers are covered by an appropriate agreement. Sometimes it will be necessary for us to disclose information required for the specific purpose to them so that the services can be performed.
We reserve the right to disclose to third parties your information to comply with applicable laws including but not limited to disclosure in accordance with the Act, the Regulation of Investigatory Powers Act 2000 and lawful authority requests, to safeguard the proper operation of our systems and to protect ourselves and the companies we work with.
The third parties we work with are;
• Google Analytics for website analysis and data analysis & profiling
• Google AdSense to serve interest-based adverts
• Payment processors (e.g. PayPal) for processing credit card payments
UK College Admissions Ltd is committed to handling your information with high standards of information security. We collect, store and process your information on servers primarily located in the United Kingdom. We use safeguards such as firewalls and data encryption, we enforce physical access controls to our buildings and files and we authorise access to personal information only for those employees who require it to fulfil their job responsibilities. Our site uses industry standard Secure Sockets Layer (SSL) technology to allow for the encryption of information during transmissions to our servers. These security measures mean that we may occasionally have to ask you for proof of identity before we are able to disclose personal information to you.
Accessing, Deleting or Updating Your Information
Accessing Your Information
You can access the personal information you have provided us by making a Subject Access Request to the Data Protection Officer using the details available in the Privacy Summary. Upon receipt and following any necessary proof of identification checks, Subject Access Requests will be responded to within one calendar month.
Deleting Your Information
A request to have the personal information you have provided to us removed from our systems can be made to the Data Protection Officer using the details available in the Privacy Summary. Your information will be removed from our systems except in circumstances where we are required to retain this information for compliance with legal obligation or for future suppression purposes, where the minimal amount necessary will be retained in order to honour an individual’s right.
Updating Your Information
You can review the personal information you have provided to us and make any desired changes or rectifications at any time either online or by contacting the Data Protection Officer using the details available in the Privacy Summary.
The Right to Object
The GDPR gives individuals the right to object to the processing of their personal data in certain circumstances. Individuals have an absolute right to stop their data being used for direct marketing. An individual can make an objection verbally or in writing. We will respond to an objection within one calendar month.
What are Cookies?
Our websites may place small text files, called cookies, on your computer to distinguish you from other users of this website. These cookies monitor how you use this website so that we can make improvements, and are also used to give you the best user experience (for example by remembering your login details so that you do not have to enter them each time). Some cookies may also be placed by third parties, for example Facebook and Google, if you use their services via this website to monitor how you use their services and also to target relevant advertising to you when you visit other websites on which they advertise.
In most cases, cookies do not contain personally identifiable data.
What cookies may be placed?
Our websites may use the following types of cookies:
• Strictly necessary cookies (Type 1): these cookies are essential in order to enable you to move around this website and use its features, such as accessing secure areas of this website. Without these cookies, certain services you have asked for cannot be provided.
• Analytical/performance cookies (Type 2): these cookies allow us to recognise and count the number of visits to our websites and to see how visitors move around the websites when they are using it, so that we can improve how the websites work. These cookies do not collect personally identifiable information.
• Functionality cookies (Type 3): these cookies remember choices you make to improve your experience; for example, your username, language or region.
• Targeting cookies (Type 4): these cookies are placed by third parties to collect information about your browsing habits when you elect to use their services, in order to make advertising relevant to you and your interests.
How do I opt-out of cookies?
Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org. You should note that deleting certain cookies may prevent you from accessing certain parts of our websites and/or may affect your user experience.
To opt out of being tracked by Google Analytics across all websites, and not just our websites, visit: http://tools.google.com/dlpage/gaoptout.