Our Data Protection Policy

We always ensure GDPR compliance

GDPR-Compliant Privacy Policy for Alumnify Ltd.

Last updated: 26/10/2024

1. Introduction

Alumnify Ltd. ("we," "our," or "us") is committed to safeguarding the privacy and personal data of prospective students, Alumni Advocates, and partner universities in compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This Privacy and Data Protection Policy explains how we collect, use, disclose, and protect your personal data, and your rights concerning it.

2. Scope

This policy applies to all personal data processed by Alumnify Ltd., including data from:

  • Prospective students interacting with our Alumni Advocates

  • Alumni Advocates working with us in their home countries

  • Partner universities providing student information to Alumnify

3. Data Collection and Use

Alumnify collects personal data to facilitate international student recruitment, including:

  • Contact details and information shared by students during recruitment fairs or via social media

  • Information provided by universities on students who may be interested in studying in the UK

  • Data collected from Alumni Advocates who work on behalf of Alumnify

The information collected will be used solely to facilitate the recruitment process, support student inquiries, and enhance partnerships with UK universities.

4. Legal Basis for Processing

We rely on the following lawful bases under the GDPR:

  • Consent: Where necessary, we will obtain consent for collecting and processing personal data.

  • Contractual necessity: Processing Alumni Advocate data to perform contractual obligations.

  • Legitimate interests: Ensuring effective recruitment services for UK universities and enabling communications with interested students.

  • Legal obligations: Complying with any regulatory or legal requirements.

5. Data Sharing and Transfers

Alumnify may share data with:

  • Partner universities to follow up with prospective students interested in studying in the UK

  • Alumni Advocates to aid in recruitment activities

6. Data Transfer Policy

Given that Alumnify operates internationally, we may need to transfer personal data to third countries outside the European Economic Area (EEA), particularly when Alumni Advocates are based in those countries.

International Data Transfers and Safeguards

For data transfers from the UK or EEA to non-EEA countries, we will:

  • Use the UK International Data Transfer Addendum from the Information Commissioner’s Office (ICO) to safeguard the transfer of personal data

  • Ensure contracts with non-EEA-based Alumni Advocates and partners incorporate adequate data protection measures, including standard contractual clauses approved by the European Commission

  • Verify that recipients of the data comply with data protection standards comparable to those of the GDPR

7. Data Retention

Personal data is retained only as long as necessary for the purposes outlined in this policy:

  • Prospective student information is kept until the end of the recruitment cycle unless otherwise requested

  • Data of Alumni Advocates and university partners is maintained for the duration of the contractual relationship and any relevant retention periods required by law

8. Data Subject Rights

Under the GDPR, you have the following rights concerning your data:

  • Right to access: Obtain a copy of your data

  • Right to rectification: Correct inaccurate data

  • Right to erasure: Request deletion of data

  • Right to restrict processing: Limit processing of your data

  • Right to data portability: Obtain your data in a structured, commonly used format

  • Right to object: Object to processing based on legitimate interests or direct marketing

  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

9. Security Measures

We use appropriate technical and organizational measures to protect personal data from unauthorized access, disclosure, or loss. Access to personal data is restricted to authorized personnel, and we regularly review our security practices to maintain data integrity and security.

10. Contact Us

For questions regarding this policy, to exercise your rights, or to lodge a complaint, please contact us via email at DPO@alumnify-uni.com.

11. Policy Review

This policy is reviewed regularly to ensure compliance with relevant laws and best practices. Updates to this policy will be made available on our website.

For any questions email DPO@alumnify-uni.com.