Privacy Policy

1. Introduction

RS Education Limited ("RSE," "we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your data when you interact with our services, including university applications, consulting, and student support. It also outlines your rights under the Data Protection Act 2018 (DPA 2018) and UK GDPR, and how to exercise them. By using our services, you consent to the practices described in this policy.

2. What is Personal Data?

Under DPA 2018 and UK GDPR, personal data refers to any information that can identify an individual, including:

• Basic Identifiers – Name, date of birth, contact details (email, phone, address)
• Government Identifiers – Passport details, visa status, student loan applications
• Academic & Professional Data – Educational history, employment background
• Financial Data – Student finance applications, tuition fee payments
• Sensitive Data – Ethnicity, health conditions (only where required)

3. How We Collect Your Information

We primarily obtain data directly from you through:

• Online forms (e.g., application submissions, contact inquiries)
• Email or phone communications
• In-person consultations and events

We do not purchase or collect your data from third-party sources.

4. Our Role in Data Protection

RSE acts as both:

• A Data Controller – For marketing, recruitment, and service improvement
• A Data Processor – When working with partner universities and financial institutions

5. Legal Basis for Data Processing

We process your data based on one or more of the following legal bases:

• Contractual Obligation
• Legitimate Interests
• Consent (especially for sensitive data)
• Legal Compliance

6. How We Use Your Data

Your personal data is used strictly for legitimate business and educational purposes, such as:

• Processing university applications and securing placements
• Assisting with visa and finance support
• Improving our services
• Legal and regulatory compliance
• Communicating important updates and opportunities

We do not use your data for automated decision-making or profiling.

7. Who We Share Your Data With

We do not sell or rent your data. However, it may be shared with:

• Partner universities
• Financial institutions
• Regulatory bodies (e.g. visa authorities)
• Law enforcement (when required by law)

8. Data Retention

We retain personal data only as long as needed:

• Applications: Up to 4 years
• Financial information: As required by law
• Contact inquiries: Deleted after 12 months if inactive

After retention, data is securely deleted or anonymised.

9. Your Data Protection Rights

Under UK GDPR and DPA 2018, you have the right to:

• Access your data
• Rectify inaccuracies
• Request erasure (“Right to be Forgotten”)
• Restrict processing
• Data portability
• Object to processing (e.g. direct marketing)

10. Data Security Measures

We maintain strict security practices, including:

• Encryption and password protection
• Authorised personnel access only
• Regular security audits
• Secure deletion protocols

11. Complaints & Contact Information

For privacy concerns or data protection requests, please email us at info@rseducation.co.uk. We aim to respond within 30 days.

If you're not satisfied with our response, you can contact the Information Commissioner's Office (ICO): www.ico.org.uk or call 0303 123 1113.