Last Updated: 05/12/2025

This Privacy Policy explains how Student Path Pro Ltd (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you use our website:

https://studentpathpro.co.uk
and any services or communication provided under the Student Path Pro brand (“Services”).

We are committed to protecting your privacy and ensuring full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our Services, you agree to the practices described in this Privacy Policy.

1. Company Information (Data Controller)

Student Path Pro Ltd

Registered Business Address:
24 City Rd, London, EC1V 2NX, United Kingdom
For data protection enquiries, contact: compliance@studentpathpro.co.uk

2. Information We Collect

We may collect and process the following categories of personal data:

2.1 Personal Identification

• Information
• Full name
• Email address
• Phone number
• Home address (if required for billing or verification)
• Date of birth (optional)

2.2 Academic & Professional Information

• CV/resume
• LinkedIn profile
• University name, course, and year
• Work experience and skills
• Career preferences

2.3 Payment Information

• Billing details
• Transaction records
  (We do not store full card numbers; payments are handled securely by third-party processors.)

2.4 Technical Data

• IP address
• Browser type
• Device information
• Website usage data via cookies

2.5 Communication Data

• Emails, chat messages, support requests
• Consultation notes and service updates

3. How We Use Your Information

We use your information to:

1. Deliver and Improve Services
2. Optimise your CV, LinkedIn, and job applications
3. Provide career or academic guidance
4. Prepare progress reports
5. Tailor services to your needs

3.2 Communication

1. Send updates about your service
2. Respond to queries
3. Send onboarding instructions, reminders, or scheduling details

3.3 Compliance & Legal Obligations

Meet tax, accounting, or regulatory requirements
Prevent fraud or misuse

3.4 Website Functionality

1. Improve performance and user experience
2. Analyse traffic and behaviour through analytics tools
3. We only use data where lawful under GDPR, including contractual necessity, legitimate interests, legal obligation, and your consent.

4. Lawful Basis for Processing (GDPR Article 6)

We process your data under one or more of the following lawful bases:

• Contract: To deliver purchased or requested services
• Consent: When you explicitly agree (e.g., newsletter signup)
• Legitimate Interests: Improving services, ensuring security
• Legal Obligation: Tax, fraud prevention, accounting
• Vital Interests: In rare cases involving safety concerns

You may withdraw consent at any time by contacting us.

5. How We Store & Protect Your Data

We implement technical and organisational measures to protect your data, including:

• Encrypted storage
• Restricted staff access
• Secure password policies
• GDPR-compliant third-party tools
• Regular security checks
• Data is stored securely within the UK or EEA unless otherwise stated.

6. Data Retention

We retain personal data only as long as necessary for:

• Delivering services
• Legal and accounting requirements
• Resolving disputes
• Typical retention period: 12–36 months after service completion, unless required longer by law.

You may request deletion sooner, unless retention is legally required.

7. Sharing Your Information

We do not sell or trade personal data.
We may share your data only with:

1. GDPR-Compliant Third Parties
2. Payment processors
3. CRM systems
4. Communication tools (email, messaging, scheduling)
   Cloud storage providers
5. Analytics tools

7.1 Legal Requirements
We may disclose information if required by:

1. Law enforcement
2. Court orders
3. Regulatory authorities

We NEVER:

1. Share your data with employers on your behalf without consent
2. Impersonate students or misrepresent identity
3. Sell your data to marketers or advertisers

8. International Data Transfers

If your data is transferred outside the UK or EEA, we ensure safeguards such as:

1. Standard Contractual Clauses (SCCs)
2. UK GDPR adequacy regulations
3. Secure encrypted systems

9. Your Rights Under GDPR

You have the following rights:

1. Right to Access: Request a copy of the personal data we hold.
2. Right to Rectification:
   Update or correct inaccurate data.
3. Right to Erasure (“Right to Be Forgotten”):
   Request deletion of your data (unless legal obligations prevent it).
4. Right to Restrict Processing
5. Right to Data Portability
6. Right to Object to Processing
7. Right to Withdraw Consent: For any processing based on consent (e.g., marketing).

To exercise any rights, email us at:
📧 compliance@studentpathpro.co.uk

We respond within 30 days as required by GDPR.

10. Cookies

We use cookies to improve website performance and user experience.

Types of cookies:

• Essential cookies
• Analytics cookies
• Preference cookies

You may adjust cookie settings via your browser.

A full Cookie Policy can be provided upon request.

11. Third-Party Websites

Our website may contain links to external sites.

We are not responsible for:

1. Their content
2. Their privacy practices
3. Their security

Use third-party websites at your own discretion.

12. Children’s Privacy

Our services are not intended for individuals under 16.

We do not knowingly collect data from children without parental consent.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

1. Legal changes
2. Service updates
3. Operational improvements

Updates will be posted on this page with a new “Last Updated” date.

Continued use of the website signifies acceptance of the updated policy.

14. Contact Us (Data Protection Queries)

For questions about privacy, GDPR, or data handling, email: compliance@studentpathpro.co.uk