Privacy Policy

Last Updated: 29/11/2025

1. Introduction

Welcome to uniaway.org (the "Website"). We are committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and share information when you use our services as an international student consultancy.

This policy is written in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are (Data Controller)

For the purposes of data protection laws, the "Data Controller" responsible for your personal information is:

Company Name: Creedor Ltd

Trading As: Uniaway

ICO Registration Number: ZB773062

Contact Email: info@uniaway.org

3. The Data We Collect

We collect personal data to assist you with university applications, visa guidance, and relocation support. This includes:

Identity Data: Name, date of birth, gender, passport details, and nationality.

Contact Data: Email address, phone number, and residential address.

Academic Data: Transcripts, CVs/resumes, English language test results (e.g., IELTS/TOEFL), and personal statements.

Technical Data: IP address, browser type, and usage data when you visit our Website.

Sensitive Data (Special Category): We may collect information about your health or disabilities only if required for university accommodation requests or visa applications, and only with your explicit consent.

4. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:

Purpose

Lawful Basis for Processing

To assess your eligibility for universities

Performance of a Contract (Service Agreement)

To submit applications to universities on your behalf

Performance of a Contract

To assist with visa and immigration advice

Performance of a Contract / Legal Obligation

To communicate with you about your application

Legitimate Interests

To send you marketing (newsletters, offers)

Consent (you can opt-out at any time)

5. Sharing Your Data

To provide our services, we may share your data with third parties. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

Educational Institutions: Universities and colleges you have chosen to apply to.

Service Partners: Visa consultants, accommodation providers, or English language testing centers (only where you have requested these services).

Technology Providers: Cloud storage providers and CRM systems used to manage your application safely.

Regulatory Authorities: We may share data with government bodies (such as UKVI) if legally required.

6. International Data Transfers

As an international consultancy, we often transfer your data outside the UK and the European Economic Area (EEA)—for example, when applying to a university in [USA, Canada, Australia, etc.].

When we send data to universities: This transfer is necessary for the performance of the contract between you and us (i.e., to process your application).

Safeguards: Where we use service providers outside the UK, we ensure your data is protected by using UK-approved International Data Transfer Agreements (IDTAs) or ensuring the country has "adequacy status."

7. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Standard Retention: We generally keep student application records for 5 years after our services end to handle any future queries or legal claims.

8. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. Access to your personal data is limited to those employees, agents, and partners who have a business need to know.

9. Your Legal Rights

Under the UK GDPR, you have the following rights:

Right to Access: Request a copy of the personal data we hold about you.

Right to Rectification: Request correction of inaccurate data.

Right to Erasure: Request that we delete your data ("Right to be forgotten").

Right to Object: Object to processing of your data for marketing purposes.

Right to Withdraw Consent: Where we are relying on consent to process your data.

To exercise any of these rights, please email us at info@uniaway.org. We usually respond to all legitimate requests within one month.

10. Third-Party Links

Our website may include links to third-party websites (e.g., university portals, UCAS). Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

11. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us:

Email: info@uniaway.org

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO.