Legal & Compliance

Privacy Policy

How Global University UK collects, uses, and protects your personal information

Last updated: 1 January 2025 | Version 3.2

1. Overview

Global University UK ("the University," "we," "us," or "our") is committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy explains how we collect, use, store, and share your personal information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

Global University UK
71-75 Shelton Street
Covent Garden, London WC2H 9JQ
United Kingdom
UKPRN: 10092234

Our Data Protection Officer can be contacted at dpo@worldglobaluniversity.com or by post at the address above, marked for the attention of the Data Protection Officer.

2. Personal Data We Collect

We collect and process personal data when you interact with the University. The types of data we collect depend on the nature of your relationship with us:

2.1 Prospective Students

  • Name, date of birth, and contact details
  • Educational history and qualifications
  • Personal statement and references
  • Nationality and immigration status
  • Disability and health information (where voluntarily provided for support purposes)
  • Financial information for fee assessment

2.2 Current Students

  • All data from the application process
  • Academic records, including assessments and awards
  • Library and IT usage records
  • Attendance and engagement data
  • Accommodation details (where applicable)
  • Disciplinary records (where applicable)

2.3 Website Visitors

  • IP address and browser type
  • Pages visited and time spent on site
  • Referring website
  • Cookie data (see our Cookie Policy)

3. How We Use Your Data

We process your personal data for the following purposes:

PurposeLegal Basis (GDPR Art. 6)
Processing applications and admissionsContract / Legitimate interests
Delivering educational servicesContract
Providing student support servicesLegitimate interests / Consent
Statutory reporting to HESA, UKVI, etc.Legal obligation
Sending marketing communicationsConsent
Issuing and verifying certificatesContract / Legitimate interests
Website analytics and improvementLegitimate interests

4. Your Rights Under GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

Right of Access

Request a copy of all personal data we hold about you

Right to Rectification

Request correction of inaccurate personal data

Right to Erasure

Request deletion of your data in certain circumstances

Right to Restrict Processing

Request limitation of processing in certain circumstances

Right to Data Portability

Receive your data in a machine-readable format

Right to Object

Object to processing based on legitimate interests

To exercise any of these rights, please contact our Data Protection Officer at dpo@worldglobaluniversity.com. We will respond to your request within one month.

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected. Our retention periods are:

  • Student academic records: Permanently (for verification and transcript purposes)
  • Unsuccessful applications: 2 years from decision date
  • Financial records: 7 years (statutory requirement)
  • Marketing preferences: Until withdrawn
  • Website analytics: 26 months

6. International Data Transfers

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including:

  • Transfers to countries with UK adequacy decisions
  • Standard Contractual Clauses approved by the ICO
  • Binding Corporate Rules (where applicable)

7. Contact Us

Data Protection Officer

Global University UK
University House, Academic Avenue
London, EC1A 1BB
dpo@worldglobaluniversity.com

Supervisory Authority

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
www.ico.org.uk