PRIVACY POLICY (UK GDPR COMPLIANT)
Effective Date: October 7, 2026
Data Controller: International Group of Education LTD
Introduction
Welcome to International Group of Education LTD. We are fully committed to safeguarding your privacy and ensuring your personal data is handled securely, fairly, and transparently. This document outlines our practices regarding the collection, utilization, storage, and protection of your personal information when you access our website, inquire about our programs, or utilize our education counseling, admissions, and visa assistance services.
Our core services revolve around international student recruitment and admissions assistance for higher education institutions in the study in UK, Germany, Europe, Canada, Australia, and various other global destinations. We mandate that all data processing operations strictly adhere to the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the standards set by the UK Visas and Immigration (UKVI) Agent Quality Framework (AQF).
Data Controller & Contact Information
Under the UK GDPR framework, International Group of Education LTD operates as the Data Controller, meaning we are responsible for determining how and why your personal information is processed.
Our official contact and registration details are:
- Data Controller Name: International Group of Education LTD
- Registered Address: 167-169 Great Portland Street, 5th Floor, London W1W 5PF
- Email Address: info@igeoverseas.com
- Telephone Number: +44 203 8349639
- Data Protection Officer (DPO): Muhammad Ahmad
- Website: https://igeoverseas.com
Categories of Data, Processing Purposes, and Lawful Basis
To process your data under the UK GDPR, we must establish a valid lawful basis (Article 6, and Article 9 for special categories). The table below details the data we collect, our collection methods, our purposes, and the specific legal grounds we rely upon:
| Data Category | Collection Method | Processing Purpose | Legal Basis (UK GDPR) |
|---|---|---|---|
Identity & Contact Details (Name, DOB, gender, nationality, passport, address, phone, email) |
Obtained directly through website forms, emails, CVs, and client meetings. |
To verify identity, establish international study eligibility, and maintain correspondence. |
Article 6(1)(b) (Contract Performance) & Article 6(1)(f) (Legitimate Interests for enquiry management). |
Academic & Employment Records (Transcripts, CVs, test scores, personal statements, references) |
Submitted directly by the applicant, official referees, or testing centers. |
To evaluate academic standing and manage university applications on your behalf. |
Article 6(1)(b) (Contract Performance to facilitate university submissions). |
Immigration & Financial Information (Bank statements, CAS, share codes, visa history) |
Sourced from the applicant, financial sponsors, or banking institutions. |
To assess funding capability and ensure compliance with UKVI and partner university regulations. |
Article 6(1)(b) (Contract Performance) & Article 6(1)(c) (Legal Obligation compliance). |
Special Category Data (Health/accessibility needs, required criminal disclosures) |
Voluntarily provided during medical assessments or specialized application phases. |
To arrange necessary university accommodations or fulfill mandatory health/background checks. |
Article 9(2)(a) (Explicit Consent) & Article 9(2)(b) (Social Protection Law). |
Technical & Website Analytics (IP addresses, browser details, usage logs, cookies) |
Gathered automatically via tracking technologies when navigating our site. |
To monitor system performance, optimize user experience, and ensure digital security. |
Article 6(1)(a) (Consent for non-essential tracking) & Article 6(1)(f) (Legitimate Interests for security). |
Additional Information About How We Use Your Data
Legal or contractual requirement
- Providing your identity, academic, immigration and financial information is necessary for us to provide our services and is required by universities and UKVI.
- If you do not provide it, we may be unable to process your application or offer visa support.
- Providing health or accessibility information is voluntary.
Legitimate interests
Where we rely on legitimate interests, these are:
- Managing and responding to enquiries from prospective students, and keeping our website, systems and records secure.
- We have considered these interests against your rights and freedoms and they do not override them.
Data Retention Framework
We do not retain personal information indefinitely. Data is kept only as long as necessary to achieve its original purpose, or to satisfy legal, accounting, and institutional compliance requirements. Our retention timelines are influenced by the lifespan of our service agreement, statutory limitation periods (generally 6 years in the UK), and the auditing demands of UKVI and university partners.
| Data Type | Retention Timeline | Rationale for Retention |
|---|---|---|
General Enquiries |
2 Years following the last interaction. |
To facilitate ongoing academic cycle follow-ups and admissions support. |
Successful Admissions & Visas |
6 Years post-contract completion or course start date. |
Required for potential legal claims, partner audits, and AQF/UKVI compliance. |
Withdrawn/Unsuccessful Files |
2 Years post-target academic intake. |
Held briefly to manage appeals and maintain institutional tracking logs. |
Financial & Audit Data |
7 Years from the close of the relevant financial year. |
Mandated by national corporate accounting and tax legislation. |
Digital Analytics (Cookies) |
Up to 12 months after the website visit. |
Maintained in accordance with standard industry cookie lifecycles. |
Who We Share Your Data With
We share your personal data only where necessary with: universities and colleges you apply to (who act as separate data controllers for the data they receive); UKVI/Home Office and other immigration authorities; English-language and other testing centres; banks and financial sponsors (to verify funding); our IT, cloud hosting and website analytics providers; and professional advisers, auditors and regulators where required by law.
Global Data Transfers and Security Measures
Given the international scope of our recruitment network, it may be necessary to route your personal information to educational institutions or service partners located outside the UK or the European Economic Area (EEA). We employ robust legal mechanisms to guarantee your data retains UK GDPR-level protection overseas, including:
- UK Adequacy Decisions: Routing data to jurisdictions recognized by the UK Government as maintaining adequate security standards.
- Standard Contractual Clauses (SCCs): Applying approved SCCs paired with the UK Addendum to legally bind international recipients.
- International Data Transfer Agreements (IDTAs): Utilizing ICO-sanctioned IDTAs for specific overseas institution transfers.
- Explicit Derogations (Article 49): Securing your informed consent when a transfer is strictly necessary to process your international application.
Automated Decision-Making
Automated Decision-Making
As per Article 22 of the UK GDPR, you are protected against decisions made entirely by automated processes that have significant or legal impacts. International Group of Education LTD does not rely on automated profiling for admissions or visa evaluations; all critical assessments are conducted with meaningful human oversight by our expert counseling team.
Your Statutory Data Rights
The UK GDPR grants you comprehensive rights over your personal data. We facilitate the following requests:Right of Access: You may request a Subject Access Request (SAR) to receive a copy of your data and processing details.
- Right to Rectification: You can ask us to promptly correct any inaccurate or incomplete records.
- Right to Erasure: You can request the deletion of your data (the “Right to be Forgotten”) if it is no longer needed or if consent is withdrawn without another lawful basis existing.
- Right to Restriction: You may pause our processing of your data while disputes or inaccuracies are resolved.
- Right to Object: You can object to processing based on Legitimate Interests, which we will honor unless overriding legal grounds apply.
- Right to Data Portability: You may request your data in a structured, machine-readable format to transfer to another controller.
Withdrawing Consent
If your data processing relies on explicit consent (e.g., marketing or special category data), you possess the absolute right to revoke this consent at any moment. To do so, simply contact our DPO, Muhammad Ahmad, using the details in Section 2. Processing for that specific purpose will halt immediately upon receipt, provided no alternative legal basis applies.
Registering a Complaint with the ICO
While we are dedicated to managing your information with the highest standards, you retain the legal right to file a complaint with the Information Commissioner’s Office (ICO) if you feel your UK GDPR rights have been breached.
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- Telephone: 0303 123 1113
- Website: https://ico.org.uk/
Information Security
We utilize strict organizational and technical protocols to shield your information. These protections include SSL encryption, secure cloud infrastructure, multi-factor authentication, robust password policies, and restricted access rights. However, no digital transmission is entirely foolproof, despite our rigorous safeguards.
Cookie Policy
We deploy cookies on igeoverseas.com to enhance functionality, log preferences, and track site analytics. You retain full control to disable cookies via your browser, though this may restrict certain website features.
Processing Minors' Data
Some applicants utilizing our services may be under 18 years of age. We strictly require and obtain verified parental or guardian consent prior to processing the personal data of any minor.
UKVI Agent Quality Framework (AQF) Standards
As a certified recruitment agency, International Group of Education LTD operates in strict alignment with the UKVI Agent Quality Framework. We pledge to deliver transparent advice, secure all applicant data, maintain precise records, prevent fraudulent documentation, and consistently act in the best interests of our students.
Dedication to GDPR Principles
Our operational framework is built upon the core UK GDPR principles. We ensure all processing is lawful, fair, and transparent; limited to specific purposes; minimized to what is necessary; accurate; stored no longer than required; and maintained with strict integrity, confidentiality, and accountability.
Policy Updates
We reserve the right to modify this policy to adapt to shifting legal requirements or operational changes. Any revisions will be published directly on our website, accompanied by an updated effective date.
Contact Details
To exercise your legal data rights or inquire further about this privacy framework, please reach out to us at:
- Company: International Group of Education LTD
- Address: 167-169 Great Portland Street, 5th Floor, London W1W 5PF
- Email: info@igeoverseas.com
- Phone: +44 203 8349639
- Website: https://igeoverseas.com/