Privacy policy for students

Important info

Ready4education is committed to protecting the privacy and security of your personal information. This privacy policy outlines how we collect, use, and protect your data in compliance with the General Data Protection Regulation (GDPR). It applies to all students enrolled with Ready4education.

As the data controller, Ready4education determines how personal information is processed and utilised. We are obligated by data protection laws to inform you about the content of this privacy policy.

This policy applies to both current and former students. Please note that this privacy policy does not constitute part of any offer made by Ready4education to you. We reserve the right to update this policy as necessary, and we will notify you of any significant changes that may affect your rights.

You must read and understand this privacy policy and any additional policies provided on specific occasions when we collect or process your personal information. If you have any questions or concerns about our privacy practices, please don’t hesitate to contact us.

How do we protect your data?

At Ready4education, we uphold data protection laws to safeguard your personal information. Here’s how we ensure compliance with these regulations:

  1. Lawful, Fair, and Transparent Use: Your personal data is always used lawfully, fairly, and transparently.
  2. Valid Purpose: We collect your information solely for valid purposes communicated to you, ensuring no usage deviating from these intentions.
  3. Relevance and Limitation: Your data is relevant to the purposes we’ve disclosed and is strictly limited to those purposes.
  4. Accuracy and Updates: We maintain the accuracy of your information, ensuring it’s kept up to date as necessary.
  5. Necessity: Your data is retained only for as long as necessary for the purposes disclosed to you.
  6. Security: We employ robust security measures to protect your personal information from unauthorised access or disclosure.

 

What info of yours do we hold?

Personal data, often referred to as personal information, encompasses any details pertaining to an individual that can lead to their identification. This definition excludes data where the identity has been anonymised or removed.

Additionally, “special categories” of personal data are considered more sensitive and necessitate heightened protection.

At Ready4education, we handle various categories of personal information, including:

  • Personal contact details include name, title, telephone numbers, and email addresses.
  • Gender.
  • Date of birth.
  • Next of kin and emergency contact information.
  • Parent/Guardian contact information.
  • Visa, nationality, police registration, and identification documents.
  • Bank account details.
  • Course information, including duration, location, and study plans.
  • Educational information, including copies of right-to-study documentation, certificates, and other details, is included during the application process.
  • Information regarding your usage of our information and communications systems.
  • Photographs.

Furthermore, we may collect, store, and utilise “special categories” of more sensitive personal information, such as:

  • Information about your race, ethnicity, and religious beliefs.
  • Information about your health, including any medical conditions, health records, and sickness records.
  • Information about criminal convictions and offences.

 

Personal information we collect

At Ready4education, we gather personal information about students throughout the application process, either directly from students or occasionally from agents or sponsors. Additionally, we may acquire supplementary information from third parties, including former educational institutions.

During your study period, we may gather further personal information as necessary.

Basis for Using Your Information

We utilise your personal information only when permitted by law. Typically, we use your personal information under the following circumstances:

  1. Contractual Necessity: We use your personal information to fulfil our obligations under the study program agreement, as outlined in the Ready4education Terms and Conditions.
  2. Legal Compliance: We use your personal information to comply with legal obligations imposed upon Ready4education.
  3. Legitimate Interests: We may use your personal information when necessary for the legitimate interests of Ready4education or third parties, provided that your interests and fundamental rights do not override these interests. This may include activities such as fraud prevention or ensuring a safe environment.

Additionally, we may utilise your personal information in rare situations where:

  • It is necessary to protect your interests or the interests of others.
  • It is required in the public interest or for official purposes.

 

How do we use the information?

At Ready4education, we collect various categories of information to fulfil our contractual obligations, meet legal requirements, and pursue legitimate interests. We may also seek your consent in certain situations, such as for processing photographs and videos, without placing you at a disadvantage for refusal. Here’s how we may use your personal information:

  • Assessing your application or appointment to an educational establishment.
  • Establishing study terms.
  • Verifying your legal entitlement to study.
  • Providing study materials.
  • Administering agreements with you.
  • Fulfilling education, training, and development needs.
  • Ensuring compliance with health and safety standards.
  • Preventing fraud.
  • Monitoring information and communication system usage.
  • Safeguarding network and information security.
  • Conducting data analytics for student progression.
  • Equal opportunities monitoring.
  • Managing our social media profile.
  • Communication and marketing purposes.

Should you fail to provide the requested information, we may be unable to fulfil agreements or comply with legal obligations, potentially impacting your access to educational opportunities.

Change of Purpose

We will only utilise your personal information for the purposes intended initially unless a compatible reason arises. If we need to use your information for an unrelated purpose, we will notify you and explain the legal basis.

How do we use your sensitive information?

Your consent may not be required to process special categories of your personal information if it aligns with our written policy to fulfil legal obligations or exercise specific rights. However, we may seek your written consent to process particularly sensitive data in certain circumstances. Should we request your consent, we will provide comprehensive details regarding the information needed and the purpose for its use. Your agreement to such requests is not mandatory for your agreement with us.

Use of information relating to criminal convictions

We may only utilise information regarding criminal convictions where permitted by law, typically for fulfilling our obligations and by our data protection policy.

We may occasionally use such information to make legal claims or protect interests when consent cannot be obtained or the information is already public.

Additionally, we may process this information as part of legitimate business activities with appropriate safeguards.

We will collect information about criminal convictions only when necessary and legally permissible, usually as part of the application process or directly provided by you during your studies.

This information will be used to provide relevant details to the educational establishment to which you have applied.

Automated decision-making

Automated decision-making occurs when an electronic system uses personal information to make decisions without human intervention. We employ automated decision-making in the following circumstances:

  1. Necessity for contract performance: When essential for fulfilling our contract with you, measures are in place to protect your rights.
  2. Limited circumstances with consent: In rare cases, with your explicit written consent and appropriate safeguards, after notifying you of the decision and providing 21 days for reconsideration.
  3. Special categories of data: An automated decision involving sensitive personal data must be based on explicit consent.

 

You will not be subject to significant decisions solely based on automated means without a lawful basis and prior notification.

Although we do not anticipate utilising automated decision-making currently, any changes will be promptly communicated to you in writing.

Sharing your personal information

At Ready4education, we may share your data with third parties, including universities and colleges, for admission purposes, with your consent. We ensure third parties adhere to data security laws and treat your information lawfully.

Your data may be shared for legal compliance, administration of our relationship with you, or other legitimate interests.

Third-party service providers processing your information include:

  • United Kingdom Visa and Immigration (UKVI) for attendance, immigration status, and police registration.
  • National Health Service for legal requirements.
  • Child Protection Services for legal obligations.
  • College Guardians (UK) and Godsil Education Dublin for under-18s guardian services.
  • Homestay Families and landlords for accommodation services.

 

Security of your information with third-party providers and partners

At Ready4education, we ensure stringent security measures are in place to protect your personal information when shared with third-party service providers and partners. They are obligated to comply with our policies and are prohibited from using your data for their purposes. Your information is only processed for specific purposes and according to our instructions.

When might your information be shared with group entities?

Your personal information may be shared with other entities within our group for various reasons, including regular reporting activities, business reorganisation, system maintenance support, and data hosting.

Other third-party sharing

We may share your personal information with external third parties in scenarios such as business sale or restructuring, regulatory compliance, or as required by law.

Sharing with sponsors, agents, and parents/guardians

Your enrollment, attendance, and academic performance data may be shared with your parents, guardians, sponsors, or designated agents to fulfil contractual obligations and their legitimate interest in monitoring your progress. This sharing extends to educational establishments you’ve applied to as well.

Transferring information outside the EU

At Ready4education, we may transfer your personal information to countries outside the EU to fulfil our contractual obligations with you. These countries include:

  • Australia
  • Canada
  • New Zealand
  • Republic of Ireland
  • USA

 

The European Commission has made an adequacy decision for specific countries, including those listed above, indicating that they provide adequate protection for personal information. This ensures that your data is safeguarded when transferred to these countries.

We have implemented appropriate measures to maintain consistent protection for your personal information across all transfers within Ready4education. These measures ensure that third parties handling your data adhere to EU and UK data protection laws.

Security measures for your information

At Ready4education, safeguarding your information is paramount. We’ve implemented robust measures to ensure its security, with details available upon request.

Third-party processing

Third parties handle your personal information strictly under our instructions, maintaining confidentiality and security agreements.

Prevention of unauthorised access

We employ appropriate security measures to prevent unauthorised access, loss, or alteration of your personal information. Access is limited to authorised personnel who process data solely under our instructions and are bound by confidentiality obligations.

Data security breach protocols

Procedures are in place to address any suspected data breaches. We are committed to notifying you and relevant regulators in compliance with legal obligations.

For further information on our security measures, contact our Data Protection Officer (DPO) or refer to our Data Protection Policy.

Duration of information usage

At Ready4education, we retain your personal information only for necessary periods to fulfil our intended purposes or to meet legal, accounting, or reporting obligations. Post-course completion, we may retain data with your consent, as required by law (e.g., tax purposes), or to safeguard our legitimate interests. We assess retention periods based on data volume, nature, sensitivity, potential risks, processing purposes, and legal requirements. Following this, we endeavour to destroy your personal data securely.

Rights regarding personal information

You have rights concerning your personal information:

  • Access: Request access to your data to verify its accuracy and lawful processing.
  • Correction: Ask for corrections to incomplete or inaccurate data.
  • Erasure: Request deletion of personal data when no longer necessary or lawful.
  • Objection: Object to processing based on legitimate interests or for direct marketing.
  • Restriction: Ask for processing suspension to establish accuracy or reasons.
  • Transfer: Request transfer of your data to another party.

 

To exercise these rights or inquire about your information, please write to our Data Protection Officer (DPO).

No fee required

There’s no fee for accessing your personal information or exercising your rights. However, in exceptional cases of unfounded or excessive requests, we may charge a reasonable fee or refuse to comply.

Verification of identity

At Ready4education, we may require specific information to confirm your identity and ensure your rights to access information or exercise other rights. This is a security measure to prevent unauthorised disclosure of personal information.

Right to withdraw consent.

If you’ve provided consent for specific processing of your personal information, you can withdraw it anytime. To do so, simply contact our Data Protection Officer (DPO). Upon withdrawal, we’ll cease processing your information for the specified purpose unless another lawful basis exists.