Website Privacy Policy
UKENROLL LTD
Website: https://ukenroll.co.uk/
Last Updated: 10 February 2026
1. Who we are
This Website Privacy Policy explains how UKENROLL LTD ("we", "us", "our") collects and uses personal data when you visit and use our website at https://ukenroll.co.uk/. We are the data controller for personal data processed via this website under the UK GDPR and the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025).
Company details:
· Company name: UKENROLL LTD
· Company registration number: 15969837
· Registered/operational address: 38 Bonaire Grange, Milton Keynes, Buckinghamshire, United Kingdom, MK3 5RQ
· Email: contact@ukenroll.co.uk
· Telephone: +44 7575 300830
For a full description of our wider processing activities, please also refer to our Company Privacy Policy.
2. Personal data we collect via the website
When you use our website, we may collect:
Contact details: your name, email address, phone number, and other information you provide when you submit enquiry forms, booking forms, or subscribe to newsletters.
Application information: details you provide in online application or enquiry forms, including educational background, course preferences, and uploaded documents (e.g. personal statement, CV, transcripts).
Technical data: IP address, browser type and version, operating system and device type, screen resolution, time zone, and language settings.
Usage data: pages visited, content viewed, time spent on pages, navigation paths, referral sources, internal search queries, and date/time of visits.
Location data: approximate country and region derived from your IP address.
Cookies and similar technologies: cookie identifiers, analytics data, and marketing/advertising data where applicable.
We do not intentionally seek to collect special category data (such as health or ethnicity) via general website forms; please avoid including such information unless we specifically ask for it in connection with our services.
3. How we collect your data
We collect personal data through:
Information you provide directly:
· Enquiry and application forms submitted on the website
· Newsletter sign‑ups and marketing preferences
· Email, telephone, and any written contact following a website enquiry
Automated technologies:
· Cookies and similar tracking technologies
· Server logs and analytics tools (e.g. Google Analytics) that record technical and usage data
Third‑party sources:
· Analytics and advertising providers (e.g. Google Analytics, advertising networks) supplying aggregated or pseudonymous information about website usage and campaign performance
4. How we use your website data
We use personal data collected via the website for the following purposes:
To respond to your enquiries: provide information about courses, universities, and our services, and follow up on requests you make through the website.
To provide and manage our services: process online enquiries and applications, communicate about next steps, and maintain records in our systems.
To operate and protect our website: ensure security, troubleshoot issues, prevent fraud and abuse, and maintain system performance.
To analyze and improve: understand how visitors use the website, perform analytics and A/B testing, and improve content, navigation, and user experience.
To send marketing communications: send news, updates, and information about study opportunities and events where we have your consent or a legitimate interest and in line with PECR.
To comply with legal and regulatory obligations: maintain proper records and respond to lawful requests from regulators or authorities.
5. Legal bases for processing
Under UK GDPR, we rely on the following legal bases for processing personal data collected via the website:
Consent (Article 6(1)(a)):
· For non‑essential cookies and similar technologies
· For electronic marketing communications (email/SMS) to non‑customers or where required by PECR
Performance of a contract (Article 6(1)(b)):
· Where processing is necessary to respond to your enquiry, provide advice, or process an application you submit through the website
Legal obligation (Article 6(1)(c)):
· Where we must retain or disclose information to comply with UK law (e.g. tax, regulatory, or safeguarding obligations)
Legitimate interests (Article 6(1)(f)):
· Operating and securing our website and systems
· Understanding usage and improving our services
· Sending marketing to existing customers about similar services, subject to your right to opt out at any time
Where we rely on consent, you may withdraw it at any time using the methods described in this policy.
6. Cookies and similar technologies
We use cookies and similar technologies on https://ukenroll.co.uk/.
Strictly necessary cookies: required for core website functionality, session management, security, and fraud prevention, and cannot be switched off.
Performance and analytics cookies: help us understand how visitors use our site and improve performance (e.g. Google Analytics); these are used only with your consent.
Functionality cookies: remember your preferences (e.g. language or region) and enhance user experience, where enabled by you.
Targeting/marketing cookies: support advertising and campaign measurement (e.g. Facebook Pixel, LinkedIn Insight Tag, Google Ads), where you have given consent.
When you first visit our site, a cookie banner allows you to accept or reject non‑essential cookies and manage your preferences at any time via our cookie settings link in the footer. You can also control cookies through your browser settings, but disabling some cookies may affect site functionality.
Further information is provided in our Cookies and Online Technologies section and any separate Cookie Notice.
7. Who we share your personal data with
We share website‑collected personal data only where necessary and with appropriate safeguards.
We may share data with:
IT and technology providers: website hosting, cloud storage (e.g. Google Workspace, Microsoft Azure), email services, CRM systems, database and backup services, and cybersecurity providers.
Analytics and marketing providers: Google Analytics, digital marketing platforms, and social media advertising tools (e.g. Facebook, LinkedIn, Google Ads).
Professional advisers: lawyers, accountants, auditors, insurers, and other professional consultants, where needed for advice, compliance, or risk management.
Partner educational institutions: if you submit an enquiry or application intended for a university or college, we share relevant information to process the application and support enrolment.
Regulators and public authorities: such as HMRC, the Information Commissioner's Office (ICO), or law enforcement, when required by law.
Potential buyers or investors: limited data may be shared as part of due diligence in a potential sale, merger, or restructuring, subject to confidentiality obligations.
We do not sell your personal data to third parties for their own independent marketing purposes.
8. International transfers
Some of our service providers and partner institutions are located outside the UK, including the EEA, the United States, the United Arab Emirates, Malta, France, and other countries depending on your application choices.
Where we transfer your data outside the UK, we implement appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses (SCCs), as well as additional technical and organisational measures (e.g. encryption, access controls) where needed.
If you ask us to submit applications to institutions in other countries, these transfers are necessary to perform our contract with you and to act on your explicit request. You can contact us for more information and copies of relevant safeguards.
9. How long we keep your data
We retain personal data collected via the website only for as long as necessary for the purposes described above and in line with our Data Retention Policy.
Typical periods include:
General enquiries and correspondence: up to 3 years from your last contact, for service improvement and query handling.
Application data: retained in line with our student and application retention schedule (e.g. active application process plus 2 years; successful placements up to 6 years after course completion).
Marketing and consent records: held while you remain subscribed and for a limited period afterwards (e.g. consent records for the duration of consent plus 3 years; cookie consent records for 12 months).
Website analytics data: typically 26 months for Google Analytics.
When data is no longer needed, we delete or anonymise it securely in accordance with our retention schedule.
10. How we protect your data
We use appropriate technical and organisational measures to protect your personal data against unauthorized access, loss, or damage, including:
· Encryption of data in transit (TLS/SSL) and, where appropriate, at rest
· Role‑based access controls, multi‑factor authentication, and unique user accounts
· Firewalls, anti‑malware protection, regular patching, and secure remote access (e.g. VPN)
· Secure software development and regular security testing, including vulnerability assessments and, where appropriate, penetration testing
· Staff training, confidentiality obligations, and incident/breach response procedures
While we take robust steps to protect your data, no system is completely secure. You are responsible for keeping any account credentials secure and notifying us immediately if you suspect misuse.
11. Children and young people
Our website and services are not intended for children under 13, and we do not knowingly collect personal data from them. If you believe we have collected information from a child under 13 via the website, please contact us and we will delete it.
For individuals aged 13–17, we apply additional safeguards and may require parental or guardian involvement in certain services, particularly where applications and important decisions are involved.
12. Your rights
Under UK data protection law, you have the following rights in relation to your personal data:
Right to be informed: about how we use your data, which this policy and our Company Privacy Policy explain.
Right of access: to obtain a copy of your personal data and information about how we process it.
Right to rectification: to have inaccurate or incomplete data corrected.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restrict processing: to ask us to limit processing in specific situations.
Right to data portability: to receive certain data in a structured, machine‑readable format and to transmit it to another controller where applicable.
Right to object: to processing based on legitimate interests and to object at any time to direct marketing (including profiling for marketing).
Rights related to automated decision‑making and profiling: you have rights if we ever carry out solely automated decisions with legal or similarly significant effects (we do not currently do this).
To exercise any of these rights, please contact us using the details in Section 13. We may need to verify your identity and will respond within one month, with the possibility of an extension for complex requests.
You can opt out of marketing at any time by clicking "unsubscribe" in our emails or contacting us directly.
13. Contact and complaints
If you have any questions, concerns, or requests about this Website Privacy Policy or our handling of your personal data, please contact:
Data Protection Lead
UKENROLL LTD
Email: contact@ukenroll.co.uk
Post: UKENROLL LTD, 38 Bonaire Grange, Milton Keynes, Buckinghamshire, MK3 5RQ, United Kingdom
Telephone: +44 7575 300830
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
· Website: https://ico.org.uk/
· Telephone: 0303 123 1113
· Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
14. Changes to this policy
We may update this Website Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. Any updates will be posted on this page with an updated "Last Updated" date, and significant changes may also be notified by email or prominent notice on the website.
References
UKENROLL LTD. (2026). Company Privacy Policy UKENROLL LTD. Internal document, last updated 10 February 2026.