Privacy Policy

Last updated: 01.11.2026

1. About this policy

Educarte Ltd (“Educarte”, “we”, “us”, “our”) is a student recruitment consultancy. We help students choose courses and apply to universities and colleges in the United Kingdom, Ireland, Canada and Australia.

This policy explains how we collect, use, share and protect personal data when you visit www.educarte.co.uk, contact us, or use our services. It applies to students, applicants, parents and guardians, and anyone else who gets in touch with us.

We are the controller of your personal data. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

2. The personal data we collect

Depending on how you use our services, we may collect:

• Identity data: name, date of birth, gender, nationality, photograph.
• Contact data: email address, phone and WhatsApp number, postal address, country of residence.
• Education data: qualifications, grades, transcripts, certificates, English language test results, references, personal statements.
• Employment data: CV and work experience.
• Application data: your course and university preferences, applications, offers, CAS details and enrolment status.
• Identity and immigration documents: passport details and copies, previous visa applications and refusals, where a university needs them to assess your application.
• Financial data: information about how you will fund your studies (for example sponsor details or bank statements) where a university or the visa process needs it, and limited payment references for our accounts. We do not take card payments from students.
• Parent or guardian data: name, relationship to the applicant and contact details, where the applicant is under 18 or asks us to involve a family member.
• Communications: emails, messages (including WhatsApp and social media messages), call notes and form submissions.
• Technical data: IP address, browser and device type, pages visited and cookie data when you use our website.
• Marketing preferences: whether you want to hear from us about events and opportunities.

Special category and criminal offence data. We do not ask for health information, but you may choose to tell us about a disability or health condition so that a university can support you. Some universities ask applicants to declare relevant criminal convictions. We only collect this information if it is needed for your application and you give it to us, and we handle it with extra care (see section 4).

3. How we collect your data

We collect data:

• directly from you, through our website forms, by email, phone, WhatsApp, social media or in person, including at events;
• from your parent, guardian or sponsor, if you ask them to contact us for you;
• from universities, colleges and application systems (such as UCAS) about the progress of your application;
• from our regional representatives and partner agents, if you first contact them;
• automatically, through cookies and similar technologies when you use our website (see section 11).

4. How we use your data and our lawful basis

Special category data (for example health or disability information) is processed only with your explicit consent (Article 9(2)(a)) or where it is necessary to establish, exercise or defend legal claims (Article 9(2)(f)). Criminal offence data is processed only where an institution requires it for your application and a condition under Schedule 1 of the Data Protection Act 2018 applies.

Where we rely on legitimate interests, we have balanced our interests against your rights. You can ask us for details of this assessment.

Where we rely on consent, you can withdraw it at any time. This does not affect anything we did before you withdrew it.

If you do not give us information we need to process an application, we may not be able to provide our service.

We do not make decisions about you based solely on automated processing.

5. Applicants under 18

Our website is aimed at adults and their families. We do not knowingly collect personal data directly from children under 16 through our website. If you believe a child under 16 has sent us their details, please contact us and we will delete them.

We can help applicants aged 16 or 17 (for example for foundation courses) only with the involvement of a parent or legal guardian. When an applicant tells us they are under 18, we will:

• ask for the name and contact details of a parent or guardian;
• ask the parent or guardian to confirm that they consent to the applicant using our services and to us processing the applicant’s data as described in this policy;
• copy the parent or guardian into important communications about the application, unless there is a good reason not to.

We will not send marketing to anyone under 18 without a parent’s or guardian’s consent.

6. Who we share your data with

We share personal data only where necessary and only with:

• Universities, colleges and education providers you choose to apply to, in the UK, Ireland, Canada and Australia, and the application systems they use (such as UCAS). This is the core of our service.
• Our regional representatives and partner agents who help us support you, under written agreements requiring them to protect your data.
• Service providers who support our business, such as website hosting, email, cloud storage, form and CRM tools, messaging services (for example WhatsApp, operated by Meta) and IT support. They act on our instructions.
• Professional advisers such as accountants, auditors, lawyers and insurers.
• Government bodies, regulators, law enforcement or courts, where the law requires it or to protect our legal rights.
• A buyer or successor if our business is sold or restructured, under the same protections.

We will share your data with other organisations for their own marketing only with your explicit consent. We do not sell your personal data.

7. International transfers

Because we help students from many countries apply to institutions in several countries, your data may be transferred outside the UK. This includes transfers to:

• our regional representatives in Bangladesh;
• universities and colleges in Ireland, Canada and Australia;
• service providers who store data outside the UK.

When we transfer personal data outside the UK, we make sure it is protected by:

• UK adequacy regulations, where the country has been found to provide adequate protection (for example the EEA, including Ireland); or
• an International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses; or
• where neither is available, a transfer that is necessary to perform our contract with you or to take steps you have asked for, such as sending your application to a university you have chosen.

Contact us for more information about the safeguards we use.

8. How long we keep your data

We keep personal data for 6 years after our last contact with you or the end of our services to you, whichever is later. This allows us to deal with questions, complaints, claims and commission or audit queries from universities, and to meet our tax and accounting obligations.

After this period we securely delete or anonymise your data, unless the law requires us to keep it longer. If you ask us to stop sending marketing, we keep a record of that request so we do not contact you again.

9. How we protect your data

We use appropriate technical and organisational measures to protect your data. These include access controls, secure passwords, encrypted connections to our website and limiting access to staff and representatives who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach is likely to result in a high risk to you, we will tell you without undue delay.

10. Your rights

Under data protection law you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to erase your data in certain circumstances;
• ask us to restrict how we use your data;
• object to our use of your data where we rely on legitimate interests, and to direct marketing at any time;
• ask us to transfer data you gave us to you or another organisation (data portability);
• withdraw consent at any time where we rely on consent.

Some rights have exceptions. For example, we may need to keep certain records to meet legal obligations.

To use any of these rights, email info@educarte.co.uk. We may need to confirm your identity. We will respond within one month, or tell you if we need longer because your request is complex. There is normally no charge.

11. Cookies

Our website uses cookies. Essential cookies make the site work. We only set analytics or other non-essential cookies with your consent, which you can give or change using the cookie banner and the “Consent Preferences” button on our website.

12. Links to other websites

Our website contains links to other websites, including GOV.UK and university websites. We are not responsible for their content or privacy practices. Please read their privacy policies.

13. Complaints

If you have a concern about how we use your data, please contact us first and we will try to resolve it.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

• Website: ico.org.uk/make-a-complaint
• Telephone: 0303 123 1113
• Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

14. Changes to this policy

We may update this policy from time to time. The latest version will always be on our website with the date it was last updated. If we make significant changes, we will tell you where appropriate.

15. Contact us

Educarte Ltd
Office 12483, 182-184 High Street North, East Ham, London E6 2JA
Email: info@educarte.co.uk
Telephone: +44 20 3432 1186
WhatsApp: +44 7564 811089
Company number: 15053738 · ICO registration number: ZC225061