Privacy Policy – Course Centre Limited
Last updated: 3rd Nov 2025
- Who we are
Course Centre Limited (company no. 09606374)
Registered address: Unit 28 Beaufort Court, Admirals Way, London, United
Kingdom, E14 9XL
We are committed to protecting your personal data and complying with the UK GDPR,
Data Protection Act 2018, and other relevant laws.
- Who is the controller and how to contact us
Controller: Course Centre Limited (“Course Centre”, “we”, “us”).
Email: info@coursecentre.co.uk
Post: Unit 28 Beaufort Court, Admirals Way, London, United Kingdom, E14 9XL
- What this notice covers
This notice explains:
- what personal data we collect
- why and how we use it
- who we share it with
- how long we retain it
- our lawful bases
- international transfers
- your rights
- how to complain
“Personal data” means any information that identifies you.
- The data we collect
4.1 Data you give us
(through forms, email, phone, website, events, online tools, or in-person)
- Identity and contact details: name, address, email, phone, date/place of birth,
nationality, gender, photo
- Course preferences and enquiry details
- Education history, qualifications, transcripts, references
- CV and supporting documents (optional)
- Visa/immigration documents where relevant
- Marketing preferences
- Communications between you and us
4.2 Data we create or infer• Notes from discussions/enquiries
- Application status and internal decisions
- Simple segmentation (e.g., subject interests or service categories)
4.3 Data we receive from others
- Referees
- Education partners (universities, colleges, schools, recruiters, and others)
- Publicly available sources (professional profiles or education platforms)
- Lead-generation partners (lawfully obtained data only)
4.4 Special category or criminal-offence data
We avoid collecting this unless essential (e.g., disability information for reasonable
adjustments).
If needed, we will:
- explain why
- rely on a lawful condition (explicit consent or substantial public interest under
DPA 2018 Schedule 1)
- keep an Appropriate Policy Document
We only process criminal-offence data where permitted by law and with
safeguards.
- Why we use your data and our lawful bases
We choose a lawful basis before processing. Different activities may use different
bases.
5.1 Responding to enquiries and advising on courses
Typical data: identity, contact, preferences
Lawful basis: Legitimate interests (providing and improving our services); Contract
(pre-contract steps)
5.2 Processing and submitting applications to institutions or authorised partners
Typical data: application materials, ID, contact
Lawful basis: Contract (delivering requested services); Legal obligation (e.g., verifying
documentation where required)
5.3 Operating websites, apps, security, and essential analytics
Typical data: technical/usage data, IP address
Lawful basis: Legitimate interests (IT security, fraud prevention, service functionality)
5.4 Direct marketing
We may contact you regarding services similar to those you enquired about.
Lawful basis:
- Legitimate interests / PECR soft opt-in (existing customers & corporate
subscribers)
- Consent (all other individuals)
You may opt out anytime.5.5 Safeguarding, public safety, emergencies
Lawful basis: Legal obligation; and, where applicable in future, Recognised legitimate
interest (Data Use and Access Act 2025)
5.6 Compliance, record-keeping, audit, responding to authorities
Lawful basis: Legal obligation; Legitimate interests
5.7 Handling complaints or data-rights requests
Lawful basis: Legal obligation; Legitimate interests
- Marketing & cookies (PECR)
6.1 Marketing
- Email/SMS marketing to individuals only with consent or soft opt-in.
- Corporate email addresses may receive service-related marketing, with an easy
opt-out.
All messages include clear unsubscribe options.
6.2 Cookies
- Strictly necessary cookies – essential for site functionality (no consent required)
- Analytics/measurement – used only with your consent
- Advertising/retargeting – only with consent
You can manage preferences through our cookie banner or “Manage Cookies” tool.
- Who we share your data with
7.1 Universities or others
To support your course enquiries, applications, or educational services, we may share
your personal data with these organisations. Once shared, they become independent
controllers with their own privacy notices.
7.2 Service providers (processors)
- IT hosting
- CRM systems
- Document management
- Communications platforms
- Analytics and consultants
All are under strict contractual and confidentiality obligations.
7.3 Authorities and courts
Where legally required or necessary to protect rights, safety, or security.
7.4 Other third parties
Only with a lawful basis and, where needed, your consent.
7.5 Aggregated dataWe may share anonymised statistics that do not identify individuals.
- International transfers
Where data is transferred outside the UK, we use approved safeguards such as:
- UK International Data Transfer Agreement (IDTA)
- UK Addendum to EU Standard Contractual Clauses
- UK-US Data Bridge (for certified US organisations)
- Other mechanisms recognised under UK law
Transfer risk assessments are completed when required.
- How long we keep your data
- Enquiries (no application): 24 months from last contact
- Applications & student files: up to 7 years from decision or final service delivery
- Marketing data: kept until you opt out or 24 months of inactivity (suppressed rather
than deleted to respect opt-outs)
- Finance/transaction records: 6–7 years (legal requirement)
- Safeguarding/incident records: as required by law (case-by-case)
- Automated decision-making
We do not make decisions with legal or significant effects based solely on automated
processes.
If this changes, we will notify you and explain your rights to human review.
- Security
We use appropriate technical and organisational security measures, including:
- Encryption
- Access controls
- Logging and monitoring
- Staff training
- Policies and procedures
- Supplier due-diligence and auditing
These controls are regularly reviewed and tested.
- Children and young people
Our services are not aimed at under-18s.
However, 16–17-year-olds may use our services for course-related assistance.
If consent is required for an online service:
- Individuals 13+ may consent themselves
- Under-13s require verified parental consent
We provide age-appropriate information and safeguards.
- Your rights
You have the rights to:
- access your data
- rectify inaccuracies
- request erasure• restrict processing
- object (including to marketing)
- request data portability
Where we rely on consent, you may withdraw it anytime.
Requests are normally free.
We may request ID verification and may refuse only where legally permitted.
How to exercise your rights:
Email: info@coursecentre.co.uk (FAO: DPO)
Post: Unit 28 Beaufort Court, Admirals Way, London, United Kingdom, E14 9XL
- Do you have to provide data?
You do not have to provide personal data.
However, without it we may be unable to respond to enquiries, process applications, or
provide certain services.
- Our data-protection complaints process
If you are unhappy with how we handle your data:
Email info@coursecentre.co.uk with the subject “Data protection complaint”.
We aim to acknowledge within 5 working days and respond within one month (or notify
you if we need up to two additional months for complex cases).
- Your right to complain to the ICO
You may contact the Information Commissioner’s Office at any time:
ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
Online: ico.org.uk/concerns
- Changes to this notice
We may update this policy periodically.
The latest version will always be published on our website and dated at the top.
- Contact Us
Course Centre Limited
Unit 28 Beaufort Court, Admirals Way, London, United Kingdom, E14 9XL
Email: info@coursecentre.co.uk
Website: coursecentre.co.uk