PRIVACY POLICY

Last Updated: 20 June 2026

Welcome to the Privacy Policy for GET INTO UNI LTD. We respect your privacy and are committed to protecting your personal data.

This privacy policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you in the United Kingdom.

This privacy policy is issued on behalf of GET INTO UNI LTD, so when we mention “we”, “us” or “our” in this privacy policy, we are referring to the relevant company responsible for processing your data.

1. Important Information and Who We Are

GET INTO UNI LTD is the data controller and is responsible for your personal data.

We have not appointed a formal Data Protection Officer (DPO), as our processing activities do not meet the thresholds that require one under Article 37 of the UK GDPR. The contact details below are responsible for handling all data protection enquiries on our behalf.

If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us using the details set out below:

Entity Detail	Contact Information
Full Name of Legal Entity:	GET INTO UNI LTD
Company Registration Number:	15480055
Email Address:	info@getintouniversity.co.uk
Postal Address:	Piccadilly Business Centre, Unit C Aldow Enterprise Park, Blackett Street, Manchester, United Kingdom, M12 6AE
Telephone Number:	+44 7356 274790

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk).

We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

Age requirement: Our services are intended solely for individuals aged 18 and over. By submitting any personal data to us via our website, booking forms, or otherwise, you confirm that you are at least 18 years old. We do not knowingly collect or process personal data from anyone under the age of 18, and our enquiry and booking forms may ask you to confirm your age before proceeding. If we become aware that we have inadvertently collected personal data from someone under 18, we will delete it as soon as reasonably possible.

If you are a parent or guardian and believe a minor has provided us with personal data, please contact us using the details above so that we can address this.

2. The Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Identity Data: Includes first name, last name, username or similar identifier.
Contact Data: Includes email address, telephone numbers, and billing address where applicable.
Academic & Professional Data: Includes school transcripts, CVs, academic records, and statement of purpose drafts uploaded by you via our website forms to evaluate your profile.
Technical Data: Includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
Usage Data: Includes information about how you use our website and consulting services.
Marketing and Communications Data: Includes your preferences in receiving newsletters and marketing updates from us.

3. How Your Personal Data Is Collected

We use different methods to collect data from and about you including through:

Direct interactions: You may give us your Identity, Contact, and Academic Data by filling in booking or contact forms on our WordPress website, or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you apply for our consulting services, book an initial consultation, or subscribe to our newsletters.

Automated technologies or interactions: As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. Please see our Cookie Policy for further details.

4. How We Use Your Personal Data (Lawful Bases)

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Purpose/Activity	Type of Data	Lawful Basis for Processing
To register you as a new applicant and book initial consultations	Identity, Contact	Performance of a contract with you
To assess university eligibility (evaluating transcripts, CVs, and statements)	Identity, Contact, Academic & Professional	Performance of a contract with you, and our Legitimate Interests (to provide tailored consultancy advice)
To manage our relationship with you (notifying you about changes to our terms or privacy policy)	Identity, Contact, Marketing and Communications	Necessary to comply with a legal obligation, Necessary for our legitimate interests
To send newsletters and informational updates (once this service is introduced)	Identity, Contact, Marketing and Communications	Consent (opt-in), or, for existing clients being offered similar services, the ‘soft opt-in’ exception under the Privacy and Electronic Communications Regulations (PECR) — always with a clear right to opt out
To administer and protect our business and website (troubleshooting, data analysis, testing, system maintenance)	Identity, Contact, Technical	Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security)

The assessment of university eligibility described above is carried out personally by our qualified, experienced consultants. It does not involve any solely automated decision-making or profiling that produces legal or similarly significant effects on you within the meaning of Article 22 of the UK GDPR.

5. Disclosures of Your Personal Data

We may share your personal data with the parties set out below for the purposes set out in the table above:

Partner Universities: As an education consulting agency, we pass student details, applications, transcripts, and drafts to partner universities and higher education institutions to facilitate your application assessment and admissions process.

Internal Third Parties: Our administrative and service delivery teams who assist in processing student files.

External Service Providers:

Our Customer Relationship Management (CRM) provider, Close (Close.io, Inc.), a United States-based company used to store student profiles securely. Close hosts data using Amazon Web Services (AWS) infrastructure and provides a Data Processing Agreement incorporating Standard Contractual Clauses to safeguard this transfer (see Section 6 below).
Website hosting and analytical providers running on our WordPress platform.
Email communication platform providers, once our newsletter service is introduced.

6. International Transfers

We store and manage most of your data using secure systems within the UK and the European Economic Area (EEA). However, some of our service providers are based outside the UK/EEA. In particular, our CRM provider, Close, is a United States-based company that hosts data using Amazon Web Services infrastructure. This transfer is safeguarded through Close’s Data Processing Agreement, which incorporates Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, ensuring a degree of protection equivalent to that guaranteed within the UK.

If we transfer information to partner universities or other recipients situated outside the UK/EEA, we similarly ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTAs) or the UK Addendum to the European Commission’s Standard Contractual Clauses. You may request further details of these safeguards by contacting us using the details in Section 1.

7. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

8. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. Our standard retention periods are as follows:

General enquiries that do not proceed to a booked consultation: deleted or anonymised 12 months after your last contact with us.
Client files for active or completed consulting engagements (Identity, Contact, and Academic & Professional Data): retained for the duration of the engagement and for 6 years following its conclusion, to meet our contractual, accounting, and tax obligations under UK law.
Marketing and newsletter data: retained until you unsubscribe or withdraw your consent, and reviewed at least annually to confirm continued relevance.
Technical and usage data (cookies, analytics): retained in line with our Cookie Policy, typically for no longer than 14 months.

We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect of our relationship with you.

9. Your Legal Rights

Under UK data protection laws, you have rights in relation to your personal data. These include the right to:

Request access to your personal data (commonly known as a “data subject access request”).
Request correction of the personal data that we hold about you.
Request erasure of your personal data.
Object to processing of your personal data where we are relying on a legitimate interest.
Request restriction of processing of your personal data.
Request the transfer of your personal data to you or to a third party.
Withdraw consent at any time where we are relying on consent to process your personal data.
Opt out of marketing communications at any time, by clicking ‘unsubscribe’ in any marketing email or by contacting us directly. This will not affect service-related communications necessary for delivering our consulting services.

If you wish to exercise any of the rights set out above, please contact us via email at info@getintouniversity.co.uk.