Privacy Policy

Privacy Notice (UK GDPR)

Last updated: 27 March 2026

1) Who we are

AVG Education is the trading name of AVG EDUCATION SERVICES LIMITED.

Company number: 11258964

VAT number: 402 4957 10

Registered/office address: 28 Beaufort Court, Admirals Way, London, England, E14 9XL

Email: info@avgeducation.com

Phone: (+44) 7916 208 666 / (+44) 020 8491 1296

We are committed to protecting your personal data and complying with the UK GDPR, the Data Protection Act 2018, and PECR (Privacy and Electronic Communications Regulations).

2) Controller and how to contact us

For data protection purposes, AVG EDUCATION SERVICES LIMITED is the data controller.

To contact us about privacy:

Email: info@avgeducation.com

Subject line: Data Protection

Post:

AVG EDUCATION SERVICES LIMITED

28 Beaufort Court, Admirals Way

London, England, E14 9XL

3) What this notice covers

This notice explains what personal data we collect, why we use it, the lawful bases we rely on, who we share it with, how long we keep it, international transfers, security, cookies, and your rights.

4) Personal data we collect

4.1 Data you give us

Depending on your interaction with us, including making an enquiry or requesting support, we may collect:

Identity and contact data: Name, address, email address, phone number, date of birth, nationality, and gender if you choose to provide it.

Education and admissions data: Course interests, preferred institution, education history, qualifications, transcripts, certificates, references, CV, personal statement, English language results, and related admissions information.

Application and compliance data: Copies of identity documents, such as passport or ID card, immigration or visa-related documents where relevant, right-to-study information, and other supporting documents needed for your application.

Communication data: Emails, phone call notes, WhatsApp messages, contact form submissions, online application form submissions, and meeting notes.

Marketing preference data: Your preferences about receiving updates, promotions, event information, or service-related communications.

4.2 Data we collect automatically when you use our website

When you browse our website, we may collect:

Technical data: IP address, browser type, device type, operating system, pages visited, date and time of access, and basic website usage information.

Cookie-related data: Preferences, consent choices, and analytics data where cookies are accepted.

4.3 Data we receive from third parties

We may receive personal data from:

universities, colleges, and education partners where you ask us to communicate with them on your behalf
referral or lead partners where data is shared lawfully
referees or representatives where relevant to your application or enquiry

5) Special category data

We try to avoid collecting special category data unless it is genuinely necessary.

In some cases, we may need information such as health or disability details, for example where reasonable adjustments are required during the admissions process or study support process.

Where we process special category data, we will:

explain why we need it
apply extra safeguards
identify both the Article 6 lawful basis and the relevant Article 9 condition before processing the data
normally rely on your explicit consent where health or disability information is provided for reasonable adjustments, unless another valid Article 9 condition clearly applies

6) Why we use your data and our lawful bases

We only use personal data where we have a lawful basis to do so. The table below explains the main purposes for which we process personal data and the legal basis we normally rely on for each purpose.

Purpose of processing	Examples of data used	Lawful basis
Responding to enquiries	Name, contact details, enquiry details, messages and notes.	Legitimate interests; and where you ask us to take steps before entering into a contract, Article 6(1)(b).
Assessing your request before services begin	Identity data, education history, course interests, supporting documents, and communications.	Steps at your request before entering into a contract, Article 6(1)(b).
Providing counselling, admissions support, and related services	Identity and contact data, education and admissions data, application documents, and communications.	Performance of a contract, Article 6(1)(b).
Communicating with universities, colleges, partners, referees, or representatives on your behalf	Application details, supporting documents, and relevant communications.	Performance of a contract, Article 6(1)(b), or steps at your request before entering into a contract, Article 6(1)(b).
Carrying out identity, right-to-study, immigration, or compliance checks where required	Identity documents, visa-related documents, right-to-study information, and related records.	Compliance with a legal obligation, Article 6(1)(c), where a legal requirement applies. Where a check is not legally required but is necessary to deliver the service safely and properly, legitimate interests, Article 6(1)(f).
Managing ordinary service communications by email, phone, forms, or WhatsApp	Contact details, messages, call notes, meeting notes, and service records.	Performance of a contract, Article 6(1)(b), where the communication relates to services; otherwise legitimate interests, Article 6(1)(f).
Operating, securing, and improving our website and systems	Technical data, IP address, device and browser data, pages visited, and security logs.	Legitimate interests, Article 6(1)(f).
Using analytics cookies and similar tools	Cookie-related data, consent choices, and website usage information.	Consent, Article 6(1)(a), where consent is required.
Sending direct marketing by email, SMS, or WhatsApp	Name, contact details, and marketing preferences.	Consent, Article 6(1)(a), or where permitted, our legitimate interests in promoting our services together with PECR soft opt-in rules.
Maintaining records, handling complaints, defending legal claims, and dealing with regulators or authorities	Correspondence, account records, complaint files, financial records, and compliance records.	Compliance with a legal obligation, Article 6(1)(c), and/or legitimate interests, Article 6(1)(f).

Where we rely on legitimate interests, we consider and balance any potential impact on your rights and freedoms before processing your personal data.

Where we rely on consent, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.

7) Marketing and your choices

We may send marketing communications about:

our services
events
promotions
relevant updates

We will only send marketing communications by email, SMS, or WhatsApp where we are allowed to do so under PECR, usually:

with your consent, or
under the soft opt-in rule where it applies

You can opt out at any time by:

clicking the unsubscribe link where available
replying to ask us to stop
emailing info@avgeducation.com

8) Cookies

Cookies are small files placed on your device when you visit a website.

We use:

Strictly necessary cookies: These are essential for website functionality and security and do not require consent.

Analytics cookies: These help us understand how people use the website. We only use these where required consent has been given.

Marketing or other non-essential cookies: These are only used where you have given consent.

You can manage cookies through your browser settings and, where available, through our website cookie banner or consent tool.

9) Who we share your data with

We may share your personal data with:

Universities, colleges, and education partners: Where you ask us to support your enquiry or application. These organisations will usually act as independent data controllers and will have their own privacy notices.

Service providers acting as processors: Such as website hosting providers, email systems, CRM tools, cloud storage providers, document management systems, analytics providers, and IT support providers.

Professional advisers and authorities: Including legal advisers, accountants, regulators, law enforcement, or other public authorities where required by law or where necessary to protect rights, safety, or prevent fraud.

We do not sell personal data.

10) International transfers

Some of the universities, colleges, partners, or IT service providers we work with may be located outside the UK.

Where personal data is transferred outside the UK, we will use appropriate safeguards, such as:

the UK International Data Transfer Agreement
the UK Addendum to the EU Standard Contractual Clauses
adequacy regulations
other lawful transfer mechanisms recognised under UK data protection law

11) How long we keep your data

We only keep personal data for as long as necessary for the purpose it was collected.

Typical retention periods are:

General enquiries with no further engagement: Up to 24 months from last contact.

Student and application files: Up to 7 years after the last interaction or completion of services, where this is needed for support, record keeping, audits, or legal issues.

Marketing records: Until you opt out or after a reasonable period of inactivity. We may keep a minimal suppression record so we can respect your opt-out request.

Accounting and finance records: Usually 6 years, or longer where legally required.

We may also retain information longer where needed to establish, exercise, or defend legal claims.

12) Automated decision-making

We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

13) Security

We use appropriate technical and organisational measures to protect personal data, including:

restricted access to systems and records
staff confidentiality obligations
secure systems and account controls
document handling procedures
measures designed to reduce the risk of loss, misuse, or unauthorised access

No method of storage or transmission is completely secure, but we take data protection seriously and work to safeguard your information.

14) Children

Our services are generally intended for individuals aged 16 and over.

Where we knowingly process the personal data of younger individuals, we will do so only where appropriate and lawful. If we become aware that personal data has been collected improperly, we will take steps to delete it.

15) Your rights

Under the UK GDPR, you have the right to: