1. Introduction & Scope

This Privacy Policy explains how THE EDUCATION GROUP (OXFORD) LTD (“TEGO”, “we”, “us”, “our”) collects, uses, stores, shares and protects personal data.

This policy applies to:

• learners, applicants, clients, sponsors and corporate customers;
• website and platform users;
• prospective learners making enquiries;
• visitors, suppliers and professional contacts; and
• individuals whose data we process in connection with our education and education-related support services.

This Privacy Policy should be read together with our:

• Terms & Conditions / Terms of Business
• Cookie Policy
• Website Terms of Use

2. Data Controller

For the purposes of UK data-protection law, THE EDUCATION GROUP (OXFORD) LTD is the data controller for personal data processed in connection with its services.

Associated, affiliated or overseas entities referenced in our Terms operate as separate and independent legal entities and are responsible for their own data-processing activities where they act as controllers.

3. Legal Framework

We process personal data in accordance with:

• the UK General Data Protection Regulation (UK GDPR);
• the Data Protection Act 2018;
• the Privacy and Electronic Communications Regulations (PECR); and
• other applicable UK data-protection and privacy laws.

4. 4. Personal Data We Collect

We may collect and process the following categories of personal data:

4.1 Identity & Contact Data

• full name, date of birth, gender;
• postal address, email address, telephone number;
• nationality and country of residence;
• identification documents (e.g., passport, national ID) where required.

4.2 Education & Academic Data

• enrolment details, course selection and academic history;
• assessments, submissions, results and progress records;
• attendance, participation and academic integrity records;
• certificates, transcripts and verification data (where applicable).

4.3 Financial & Transaction Data

• invoices, payments, refunds (where applicable);
• bank/payment details (processed securely via approved providers);
• billing addresses and transaction references.

4.4 Technical & Usage Data

• IP address, device type, browser details;
• login records and platform activity;
• cookies and similar technologies (see Cookie Policy).

4.5 Compliance & Due-Diligence Data

• identity-verification records;
• AML/CTF screening results;
• sanctions, fraud-prevention and risk-assessment data;
• correspondence with regulators or authorities (where required).

4.6 Communications Data

• emails, messages, calls, support tickets and enquiries;
• feedback, complaints and dispute correspondence.

5. Special Category Data

Where strictly necessary, we may process limited special category data (e.g., health information relating to reasonable adjustments or safeguarding). Such data is processed only:

• with explicit consent; or
• where required to comply with legal obligations; or
• where necessary to protect vital interests.

6. How We Collect Data

We collect personal data:

• directly from you (applications, enrolments, forms, emails);
• through our website, portals and learning platforms;
• from third parties such as awarding bodies, exam platforms or payment providers;
• from identity-verification, AML or fraud-prevention providers;
• from publicly available sources where lawful.

7. Lawful Bases for Processing

We process personal data under one or more of the following lawful bases:

• Contract – to deliver education services and manage enrolments;
• Legal obligation – AML/CTF, safeguarding, regulatory and reporting duties;
• Legitimate interests – administration, quality assurance, fraud prevention, security and service improvement;
• Consent – marketing communications, non-essential cookies, special category data (where required);
• Vital interests – safeguarding and emergencies (rare).

8. How We Use Personal Data

We use personal data to:

• deliver education and learner-support services;
• administer enrolments, assessments and platforms;
• communicate with learners and clients;
• issue certificates, transcripts and verification responses;
• manage payments and accounts;
• conduct compliance, AML/CTF and identity checks;
• protect academic integrity and security;
• respond to complaints and disputes;
• improve services and user experience;
• comply with legal and regulatory obligations.

9. Sharing Personal Data

We may share personal data with:

9.1 Service Providers

• IT, hosting, cloud and platform providers;
• payment processors and financial institutions;
• identity-verification and AML providers.

9.2 Academic & Regulatory Bodies

• awarding organisations and examination authorities;
• partner institutions (where applicable);
• regulators, law-enforcement agencies or courts.

9.3 Professional Advisers

• legal, accounting, audit and compliance advisers.

We do not sell personal data.

10. International Transfers

Some data may be processed outside the UK (e.g., by cloud or platform providers). Where this occurs, TEGO ensures appropriate safeguards are in place, such as:

• UK adequacy regulations;
• UK International Data Transfer Agreement (IDTA);
• contractual safeguards and security controls.

11. Data Retention

We retain personal data only for as long as necessary to:

• fulfil contractual and educational purposes;
• meet legal, regulatory and accounting obligations;
• protect TEGO’s legal and academic interests.

Retention periods vary by data type and may extend after termination of services where required by law or legitimate interests (e.g., academic records, AML documentation).

12. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

• access controls and authentication;
• encryption where appropriate;
• secure platforms and hosting;
• staff training and confidentiality obligations.

No system is completely secure, and transmission of data online is at your own risk.

13. Your Data-Protection Rights

Subject to UK law, you may have the right to:

• access your personal data;
• request correction or erasure;
• restrict or object to processing;
• data portability (where applicable);
• withdraw consent (where processing is consent-based);
• lodge a complaint with the Information Commissioner’s Office (ICO).

Requests should be sent to info@theoxfordeducationgroup.co.uk.
We may need to verify your identity before responding.

14. Marketing Communications

We may send service-related communications as part of our contractual relationship.
Marketing communications will be sent only where permitted by law or with your consent.
You can opt out at any time using the unsubscribe link or by contacting us.

15. Cookies & Online Tracking

We use cookies and similar technologies in accordance with our Cookie Policy.
You can manage cookie preferences via our website controls or your browser settings.

16. Third-Party Websites

Our website or platforms may contain links to third-party sites.
We are not responsible for their privacy practices or content.
You should review the privacy policies of those third parties separately.

17. Children’s Data

Our services are not intended for children under 18 unless expressly agreed and appropriately authorised. Where children’s data is processed, we comply with applicable safeguarding and consent requirements.

18. Automated Decision-Making

We do not engage in automated decision-making that produces legal or similarly significant effects without meaningful human involvement.

19. Updates to This Policy

We may update this Privacy Policy from time to time.
The latest version will always be published on our website.
Material changes may be notified where required by law.

20. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of England & Wales, and the courts of England & Wales shall have exclusive jurisdiction.

21. Contact

For privacy-related enquiries or data-subject requests:

THE EDUCATION GROUP (OXFORD) LTD
Email: info@theoxfordeducationgroup.co.uk
Registered Office: 1 Grace House, Bessborough Road, Harrow, England, HA1 3EX