Privacy policy

This policy explains how Uniaway ("we", "us") collects and uses personal data when you use uniaway.org or contact us. We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where it applies, the EU GDPR.

Who we are

Uniaway is the data controller for the personal data described here. Contact: uniaway@opaldale.com.

What we collect

• Details you give us in forms, by email or by WhatsApp: name, email, phone/WhatsApp number, country of residence, study preferences, and anything you write in your message.
• Documents you choose to share with us later (e.g. transcripts, test results, passport), only when needed to support your application.

Why we use it, and our lawful basis

• To reply to your enquiry and give you guidance (legitimate interests, and steps taken at your request before entering a contract).
• To support your applications (contract/your request, and your consent for sharing with universities).
• To meet legal obligations (legal obligation).

We do not sell your data or use it for advertising.

Sharing your data

• Universities and education providers: only with your consent, and only for the applications you ask us to support.
• Service providers (processors): our website form is handled by FormSubmit (formsubmit.co), which forwards form submissions to our email; our email is hosted by Google Workspace; our website is hosted by Cloudflare. These providers may process data outside the UK/EEA, under appropriate safeguards such as standard contractual clauses or adequacy decisions.
• Authorities, where the law requires it.

How long we keep it

Enquiries are kept for up to 24 months after our last contact unless you become a client, in which case we keep records for as long as needed for the service and legal requirements (usually up to 6 years), then delete them.

Cookies

We do not use tracking, analytics or advertising cookies. We store one small setting in your browser's local storage (ua_cookie_ok) to remember that you closed the cookie notice. Our form provider may use strictly necessary cookies for spam protection (captcha). Fonts are hosted on our own website.

Your rights

You have the right to access, correct, delete or restrict use of your data, to object, to data portability, and to withdraw consent at any time. Email uniaway@opaldale.com. If you're unhappy, you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local EU data protection authority.

Security

We use reputable providers and limit access to your data to people who need it. No internet transmission is completely secure, so please don't send sensitive documents through the website form.

Changes

We may update this policy and will post the new version here.