Kingston Education Service Data Privacy Policy
Last Updated: 22 December 2025
1. Introduction
This Data Privacy Policy explains how Kingston Education Service Ltd collects, uses, stores, and protects personal information of prospective students applying to universities. We are committed to safeguarding personal privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable data protection laws.
2. Personal Information We Collect
We collect and process the following categories of personal data to support university applications:
- CV , academic and professional qualifications
- Passport or other legal ID document
- Proof of address document
- Email address
- Telephone number
- Date of birth and Gender
- Postal address
- Job Title and Profession
- Personal and professional interests
3. Purpose of Processing
We use personal information for the following purposes:
- University application support: Preparing, reviewing, and submitting applications to universities.
- Identity verification: Ensuring authenticity of documents and compliance with admission requirements.
- Communication: Contacting you regarding your application status, deadlines, and updates.
4.Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
- Consent: When an individual provides explicit permission for us to process their data.
- Contractual necessity: Processing personal information is required to fulfil our services in assisting with university applications.
- Legal obligation: Compliance with UK law and University requirements.
- Legitimate interests: Ensuring efficient and secure application processing.
5.Data Sharing
We may share your personal information with:
- Universities to which you are applying.
- Accredited third-party service providers (e.g., IT support, secure document storage) who assist us in delivering services.
- Associate companies that may assist with university applications. This includes subsidiaries and/or our holding company and its subsidiaries.
- We ensure all third parties comply with UK GDPR and maintain appropriate safeguards.
- Providing and managing your access to our Web Site.
- Personalising and tailoring your experience on our Web Site and supplying our products and services to you.
- Personalising and tailoring our products and services for you.
- Communicating with you. This may include responding to emails or calls from you.
- Supplying you with information by email and/or post for which you have opted-in ; you may unsubscribe or opt-out at any time by clicking the unsubscribe button in our email or by contacting us via email.
- Analysing your use of our Web Site and gathering feedback to enable us to continually improve our Site and your user experience.
With your permission and/or where permitted by law, we may also use your personal data for marketing purposes, which may include contacting you by email and/or telephone and/or text message and/or post with information, news, and offers on our products and/or services. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the UK GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003, and you will always have the opportunity to opt-out.
6. Data Retention
7. Rights Under UK GDPR
You have the following rights regarding their personal data:
- Right to information: about our collection and use of your personal data. This Privacy Policy should tell you everything you need to know, but you can always contact us to find out more or to as any questions.
- Right to access: Request a copy of the personal data we hold about you.
- Right to rectification: Correct inaccurate or incomplete data.
- Right to erasure: Request deletion of your data where legally permissible
- Right to restrict processing: Limit how we use your data.
- Right to data portability: Obtain and reuse your data across different services.
- Right to object: Object to processing based on legitimate interests.
- • Rights relating to automated decision-making and profiling: we do not use your personal data in this way.
8. Data Security
We implement robust technical and organisational measures to protect personal data, including:
- Secure storage of physical documents.
- Access controls ensuring only authorised staff handle your data.
- Regular audits to maintain compliance.
- Regular staff training.
9. Contact Information
Address: Tower Bridge Business Centre, 46-48 East Smithfield, London, E1W1AW
E-mail: gdpr@kingstoneducationservice.co.uk
Telephone: +44 (0) 2034356517