Introduction
Student Care Bureau (International) Ltd (referred to hereafter as the ‘We’ or the ‘Company’) are committed to protecting and respecting your privacy.
Student Care Bureau (International) Ltd reserves the right to make changes periodically to this Privacy Policy at our sole discretion. Changes to the Privacy Policy will be posted on this page.
If you have any questions or concerns about our use of your personal information, then please contact us using the contact details provided at the bottom of this Privacy Policy.
We have updated our privacy policy in line with changing data protection laws in the UK. We value your privacy and want you to be clear about the data we collect and store, how we use this and the rights you have to control that information.
For your convenience we have split the information into manageable sections which we hope will answer any questions you have but if not, please do get in touch with us, details are shown in the contact section of this notice.
Who is Student Care Bureau (International) Ltd?
Student Care Bureau (International) Ltd is a Limited Company registered in England and Wales. Our company registration number is 7839736.
Our registered office is at the following address:
Student Care Bureau (International) Ltd
414 Westgate Road
Newcastle upon Tyne
NE4 5NH
Further details of Student Care (International) Ltd may be found on our website: www.scb-int.co.uk
For ease of reading this notice the “Company” will be referred to as “we” and “us” in this notice.
Explaining the legal basis for processing your personal data
The Company is a global company and understands that the laws on data protection may be different in different countries, however, the Company has set out below a number of different reasons for which we may collect and process your personal data, including:
Consent
In specific situations, we can collect and process your data with your consent.
When collecting your personal data, we’ll endeavour to collect the minimum necessary for us to provide our services.
Parental Consent
Depending upon national and sometimes state law you may be called a “minor” when it comes to signing a contract or consenting for us to collect and process your personal data. This means you have not reached the legal age of consent.
In many countries including Australia, New Zealand, Canada, Singapore and the USA, it is usual to require a person to be 18 years of age.
In Europe it is usual that a person is 16 years of age, 13 in the U.K. to consent to receive marketing information. As part of protecting you and your rights, if the law says you are still a “minor”, we require your parents/guardians consent to directly collect and process your data via online services.
Explicit Consent
Explicit Consent means that you have been presented with an option to agree or disagree with the collection, use, or disclosure of personal information.
If we need to collect special categories of data from you, in order to provide you with the services you require or meet our legal obligations, we will collect this data on the basis of your explicit consent, national/regional social protection laws or for statistical reporting purposes requested by official bodies.
The special category data that we may request from you includes details such as your racial or ethnic origin and passport or birth certificate because they are necessary to satisfy enrolment or visa requirements. We may also need to collect data concerning your health (e.g. medical check reports and immunisation history) to provide additional support to you.
Contractual obligations
In certain circumstances we will need to collect your person data to meet our contractual obligations to you.
We will collect this data so that we can make an offer to you to study or enrol with us or to work with us.
We will use this data to establish a contract that sets out your obligations as a student or employee and our obligations as the provider of the study services or employment to you.
Legal compliance
If the law requires us to, we may need to collect and process your data for a number of reasons, for example to:
- Prevent fraud
- Meet the needs of immigration authorities
- Comply with Consumer Protection law
Legitimate interest
In specific situations, we collect your personal data as part of undertaking our legitimate interests in a way which might reasonably be expected as part of running our business and, which does not materially impact your rights, freedom or interests. It might include:
- Staying in touch with you for purposes of staying in touch with ex-students as part of for example an alumni programme
- Keeping you informed regarding Company highlights and news.
When do we collect your Personal Data?
When you visit any of our websites, (here we just collect transaction-based data).
When you complete our online or paper/PDF application forms.
When you engage with us on social media.
When you contact us by any means with queries, comments etc.
When you book any kind of appointment with us.
When you book to attend an event.
When you’ve given a third-party permission to share with us the information they hold about you.
For employees we collect your personal data throughout the period of your employment with the Company.
Categories of Personal Data we collect
Your contact details i.e. your:
- Name
- Gender
- Date of birth
- Postal address (can be a postal box number and/or a street address)
- Social media contacts
- Telephone number/s (mobile and landline)
Identity and Immigration documentation i.e. your:
- Passport
- Drivers’ licence
- Identity card
- Visa details
Your bank account details.
Your educational history inclusive of but not limited to your:
- Current qualifications
- Grades
- Institution/s you studied at
- Most recent study experience
Details of your interactions with us, such as:
- We collect details of enquiries and comments you make in the web pages you visit or when you contact us by email, telephone or in person
- Information gathered by the use of ‘cookies’ in your web browser. (Learn more about our ‘Cookie Policy’)
- Additionally, for employment purposes:
- Social security (or equivalent) details
- Next of Kin details
- Health information
Why we use your Personal Data?
To ensure that we provide you with the information and service you need we sometimes combine the data we have about you. This is allowed as part of our legitimate interest to provide you with the optimum service.
If you wish to change how we use your data, you’ll find details in the ‘What are my rights?’ section below.
If you choose not to share your personal data with us, or refuse certain contact permissions, we might not be able to provide some or all of the services you’ve asked for. In this case we will contact you to confirm your request.
The reasons we use your personal data include:
- To operate and administer our business to provide you with the best possible service. This is done on the basis of our legitimate business interests.
- To respond to your queries and requests.
- We may keep a record of communication with you. We do this on the basis of our contractual obligations to you, our legal obligations and our legitimate interests in providing you with the best service.
- To protect our business and you from fraud and other illegal activities.
- We’ll also monitor your browsing activity with us to quickly identify and resolve any problems and protect the integrity of our websites. We’ll do all of this as part of our legitimate interest.
- To process payments and to prevent fraudulent transactions. This is done on the basis of our legitimate business interests and to help protect you from fraud.
- With your consent, we will use your personal data preferences, to keep you informed by email, web, text, social media and telephone about relevant services and events.
- To protect your vital interests if you become unable to provide consent.
- To hire and manage employees and contractors. We do this as part of our contract with you.
- To send you communications required by law or which are necessary to inform you about our changes to the services we provide you. (For example, updates to this Privacy Policy). These service messages will not include any marketing content and do not require prior consent when sent by email or text message. We need to keep you informed as part of complying with our legal obligations.
- To comply with our contractual or legal obligations to share data with law enforcement if necessary, for example, if a court order is presented that requires us to share your personal data with law enforcement agencies or courts of law.
How we look after your Personal Data
We know how much data security matters. We will treat your data with the utmost care and respect and take all appropriate steps to protect it.
We secure access to all transactional areas of our websites and apps using ‘https’ technology.
Access to your personal data is restricted and secure, and sensitive personal data such as health information is secured via password protection and encryption.
Storage systems for paper copies are secured and access is managed through the Company’s access protocols.
How long do we keep your Personal Data?
We have a detailed records management programme in place and all records (paper and electronic) are required to be managed in accordance with its security and disposal steps.
Whenever we collect or process your personal data, we will store it safely and only for as long as is necessary for the original purpose for which it was collected or as required by law.
At the end of the documented retention period, your data will either be deleted completely or anonymised.
Sharing your Personal Data
We share your Personal Data with trusted Third Parties
We sometimes share your personal data with trusted third parties to provide services and business functions.
We set very clear directions and expectations for those organisations regarding the safety and protection of your privacy and personal data.
The directions and expectations are set out in our contract with the third party and include:
- Providing them only the information they need to perform their specific services
- Setting out the purpose for which the personal data is being shared
- Confirmation that they will make every reasonable effort to ensure that your privacy is respected and protected
- If we stop using their services, they will undertake to either securely delete or render anonymous any of your personal data held by them
- They will inform us immediately in the event of a suspected or actual breach being detected
The types of third parties we work with include:
Educational establishments
Educational professionals
Regulatory authorities
Accommodation providers
Estate services
Online webinar providers
Insurers
Financial service providers
Travel service providers IT companies supporting our websites
Cloud storage companies
How do third party partners use your Personal Data?
When you use a service from one of our chosen partners, your data will be collected and used by them under the terms of their own separate privacy policies.
Why do we share your Personal Data?
We need to share your personal data with trusted third parties in order to meet legal and regulatory obligations and fulfil our contractual promise to you.
We will only share your data with third parties in very specific circumstances, for example:
- With your consent, given at the time you supplied your personal data, to us, we may pass that data to a third party for their direct marketing purposes.
- When working with academic professionals as part of ensuring the delivery of high quality services to you.
- We may share information about fraudulent or potentially fraudulent activity in our premises or systems. This may include sharing data about individuals with law enforcement bodies.
- If we receive a valid request from the police or other law enforcement agency, regulatory or Government authority in your country of origin or elsewhere, we may be required to disclose your personal data
- We may, from time to time, expand, reduce or sell the Company and this may involve the transfer of business entities or the whole business to new owners. If this happens, your personal data will, where relevant, be transferred to the new owner or controlling party, under the terms of this Privacy Notice.
Processing and Transferring your Personal Data
Student Care Bureau (International) Ltd – a global organisation
We have operations in many different geographic regions and our head office is in the UK, therefore, we will sometimes need to share your personal data across national boundaries and borders for example outside the European Economic Area (EEA).
If we do transfer your personal data across an international border, we have procedures in place to ensure your data receives the same protection as if it were being processed inside your country of residence for instance an EEA member-country or Australia or Asia or Canada or the USA etc.
For further information on the transfer of your personal data you can contact: [email protected]
Your rights over your Personal Data explained
Your personal rights
We need you to understand the rights you have when it comes to your personal information.
Not all countries extend the same rights under their respective privacy regulation. The examples of rights available under privacy regulation noted below, show how those rights vary across the world and the many different nations in which the Company operates. We have set out a few of these below for your information.
If your country is not listed below, please contact: [email protected] for further information. In your email to [email protected] please set out the country and region within that country you are enquiring about, in order that we can provide you with the right information.
The rights you have may be different depending on where you live in the world for instance, in the EU, EEA or the UK you have the right to:
- Access and review personal data we hold about you
- Rectify/correct any inaccurate personal information we hold about you.
- Request a copy of data you supplied to us, in a machine readable format or for the transfer of this data to another company
- Request the restriction of processing of your personal data
- Object to us processing your personal data
- Request the erasure of your data, (right to be forgotten)
For any of these EU/EEA/UK requests please contact: [email protected]
If you live in the United States of America you have the right to:
- Access and review personal data we hold about
- Rectify/Correct personal data we hold about you
- Be informed of any disclosures
For any privacy rights in regions/countries/states outside of Europe please contact: [email protected]
For an explanation of your rights in the country in which you live, work or study with one of our business entities please contact: [email protected]. Set out the nature of your request and the Company will inform you of how it is able to assist you. Please note that the same rights do not apply in all of our operating regions, countries or states.
All requests related to your rights and your personal data, will be examined in detail and a member of the Privacy team will respond to you as quickly as possible.
We will make all reasonable efforts to meet with your request and will keep you informed as to our progress in getting the information to you in a format that is acceptable and usable.
Withdrawal of consent
Whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent.
Legitimate interest
In cases where we are processing your personal data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation.
Marketing
You have the right to stop the use of your personal data for marketing activity through all channels, or selected channels.
We will always comply with your request.
Questions or Issues you may have
If you require any further information we will be pleased to provide you with further detail.
If you are contacting us to complain about an alleged breach of this Privacy Policy or our legal privacy obligations, please provide us with as much detail as possible in relation to your complaint so that we can deal with your concern quickly and effectively.
We will take every privacy complaint seriously and assess it with the aim of resolving all issues quickly and efficiently.
We’d be grateful for your cooperation with us during this process by providing us with any relevant information that we may need.
Our contact details
A Data Protection Officer (DPO) has been appointed. They may be contacted on [email protected]
Contacting your Supervisory Authority
Europe (inclusive of the UK and non-EU Member States)
The Company has nominated the Information Commissioner’s Office (ICO) in the UK as its Supervisory Authority for Europe.
If you feel that we have not handled your data correctly, or you are unhappy with our response to any requests regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office, (ICO), in the UK, or your National Supervisory Authority or data regulator.
You can contact the ICO by calling +44 303 123 1113 or go online to www.ico.org.uk
All Other Countries
A complete list of all supervisory authorities in the host nations in which the Company operates is available from: [email protected]
Please ensure that you confirm in your email to [email protected] the business entity and country you are working for or studying in.