Privacy Policy

1. Overview

Welcome to UKCoSA Global ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

Key Points:

✓ We only collect data necessary for our educational services
✓ Your data is never sold to third parties
✓ You have full control over your personal information
✓ We comply with UK GDPR and international data protection laws

UKCoSA Global is a leading Study Abroad Consultancy and EduTech Company based in the United Kingdom, helping students achieve their dreams of studying abroad through innovative technology solutions and expert guidance. Our registered office is located at 85 Great Portland Street, First Floor, London, England, W1W 7LT, United Kingdom.

2. Information We Collect

Types of Data We Collect:

Personal Information:

• Full name, email address, phone number
• Date of birth, nationality, passport information
• Home address and contact details
• Emergency contact information

Educational Information:

• Academic transcripts and certificates
• Previous educational institutions attended
• English language test scores (IELTS, TOEFL, etc.)
• Course preferences and study destinations
• Scholarship and financial aid requirements

EduTech Platform Data:

• User account information and login credentials
• Online consultation booking and scheduling data
• Digital document uploads and submissions
• Platform usage analytics and user interactions
• Virtual meeting recordings and chat transcripts
• Mobile app usage data and push notification preferences

Study Abroad Specific Data:

• Destination country preferences and visa status
• University application tracking and status updates
• Accommodation and travel arrangement details
• Insurance information and emergency contacts
• Pre-departure and post-arrival support communications

Technical & Platform Data:

• IP address, browser type and device information
• EduTech platform usage analytics and user interactions
• Mobile app data and push notification preferences
• Cookies and similar tracking technologies
• API integration data from partner universities

Financial Information:

• Financial statements and bank details (when required)
• Scholarship application information
• Payment information for our services

3. How We Use Your Data

We use your personal information for the following purposes:

Study Abroad Consultancy

• University application assistance and tracking
• Scholarship opportunity matching and applications
• Visa application support and documentation
• Course and institution recommendations
• Pre-departure and post-arrival support services

EduTech Platform Services

• Online consultation booking and scheduling
• Digital document management and submissions
• Virtual meeting and webinar delivery
• Mobile app functionality and notifications
• AI-powered university matching algorithms

Communication

• Responding to your inquiries
• Sending service updates
• Educational newsletters (with consent)
• Appointment scheduling

Legal Compliance

• Meeting regulatory requirements
• Fraud prevention and security
• Record keeping obligations
• Government reporting requirements

Service Improvement

• Website analytics and optimization
• Service quality enhancement
• Market research and surveys
• Customer feedback analysis

Legal Basis for Processing:

We process your data based on: (a) your consent, (b) contractual necessity for our services, (c) compliance with legal obligations, and (d) legitimate business interests that don\'t override your privacy rights.

4. Data Sharing and Disclosure

We may share your information with the following parties under specific circumstances:

Educational Institutions

We share necessary information with universities and colleges for application processing, admission decisions, and enrollment procedures. This includes academic records, personal statements, and supporting documents required for your applications.

EduTech & Study Abroad Partners

We work with trusted partners including visa consultants, education loan providers, accommodation services, travel agencies, technology vendors, and API integrations with university systems. Data is shared only when necessary for service delivery and under strict confidentiality agreements and data processing agreements (DPAs).

Legal Requirements

We may disclose information when required by law, court orders, government agencies, or to protect our rights, property, or safety of our users and the public.

We Never:

✗ Sell your personal data to third parties
✗ Share data for marketing without explicit consent
✗ Transfer data to unsecure or non-compliant services
✗ Use your data for purposes beyond our stated objectives

5. Your Privacy Rights

Under UK GDPR and applicable data protection laws, you have the following rights:

Right to Access

Request a copy of all personal data we hold about you, including how it\'s being used and who it\'s shared with.

Right to Rectification

Correct any inaccurate or incomplete personal information we have about you.

Right to Erasure

Request deletion of your personal data when it\'s no longer necessary or you withdraw consent.

Right to Restrict Processing

Limit how we use your data while we address any concerns or disputes about accuracy or usage.

Right to Data Portability

Receive your data in a machine-readable format to transfer to another service provider.

Right to Object

Object to processing based on legitimate interests, direct marketing, or profiling.

Exercise Your Rights

To exercise any of these rights, contact our Data Protection Officer:

Email: privacy@ukcosaglobal.org.uk

Phone: +44-2033930576

Response Time: Within 30 days

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience and provide personalized services.

Essential Cookies

Required for website functionality, security, and remembering your preferences.

Always Active

Analytics Cookies

Help us understand how visitors use our website to improve user experience.

Optional

Marketing Cookies

Used to deliver relevant advertisements and track campaign effectiveness.

Optional

Cookie Management:

You can control cookie settings through your browser preferences or our cookie consent banner. Note that disabling certain cookies may affect website functionality.

7. Data Security

We implement comprehensive security measures to protect your personal information:

Technical Safeguards

• SSL/TLS encryption for data transmission
• AES-256 encryption for data storage
• Multi-factor authentication systems
• Regular security audits and penetration testing
• Secure cloud infrastructure with ISO 27001 certification

Administrative Safeguards

• Role-based access controls
• Staff privacy training and awareness programs
• Confidentiality agreements with all employees
• Regular privacy impact assessments
• Incident response and breach notification procedures

Data Breach Response:

In the unlikely event of a data breach, we will notify relevant authorities within 72 hours and affected individuals without undue delay, in accordance with GDPR requirements.

8. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

Active Study Abroad Services

Duration: While you are actively using our consultancy and EduTech platform services
Purpose: University applications, visa support, platform functionality, and ongoing consultation

Post-Service & Alumni Support

Duration: Up to 7 years after service completion
Purpose: Legal compliance, dispute resolution, reference letters, and alumni network services

EduTech Platform Data

Duration: Account data retained while account is active, usage analytics for 2 years
Purpose: Platform optimization, user experience improvement, and technical support

Marketing Data

Duration: Until you unsubscribe or withdraw consent
Purpose: Educational newsletters and service updates

Secure Deletion:

When retention periods expire, we securely delete or anonymize your data using industry-standard methods to ensure it cannot be recovered or reconstructed.

9. International Data Transfers

As part of our global educational services, we may transfer your data internationally:

Study Abroad Applications

Data is transferred to universities and educational institutions in your chosen study destinations (UK, US, Canada, Australia, Germany, etc.) for application processing, admission decisions, and enrollment procedures.

EduTech Cloud Services

We use secure cloud services and API integrations that may store data in multiple jurisdictions, all with adequate protection levels or appropriate safeguards for our technology platform operations.

Transfer Safeguards:

• Standard Contractual Clauses (SCCs) approved by EU Commission
• Adequacy decisions for countries with equivalent protection
• Binding Corporate Rules for multinational partners
• Regular monitoring of international data protection standards

10. Children\'s Privacy

We are committed to protecting the privacy of children and young people:

Age Requirements and Parental Consent:

Ages 16-18: Can use our services with parental/guardian consent

Under 16: Require explicit parental/guardian consent and involvement

Over 18: Can independently consent to data processing

Special Protections for Minors

• Enhanced privacy notices in clear, age-appropriate language
• Parental involvement in major decisions
• Additional security measures for sensitive data
• Right to have data erased when reaching adulthood
• Regular review of consent and data processing purposes

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable laws. When we make changes:

How We Notify You

• Email notification to registered users
• Prominent notice on our website
• Updated "Last Modified" date at the top of this policy
• For material changes: 30 days advance notice

Version History:

Version 3.0 - January 15, 2025: Enhanced GDPR compliance and data security sections

Version 2.1 - September 2024: Added international transfer safeguards

Version 2.0 - March 2024: Comprehensive update for new services

12. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

Data Protection Officer