PRIVACY POLICY (UK GDPR COMPLIANT)

ORIGIN Education Centre is committed to protecting your personal data in accordance with UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. DATA CONTROLLER

ORIGIN Education Centre is the data controller of your personal data.

Contact Details
  • Email: admin@origineducationcentre.co.uk
  • Address: Clody House, 1st Floor, 90–100 Collingdon Street, LU1 1RX
  • Company Registration Number: 17106776
  • ICO Registration Number: ZC109338
  • Data Protection Officer (DPO): Mr Isnat
2. PERSONAL DATA WE COLLECT

Identity Data

  • Name (visitor, student or parent/guardian)

Contact Data

  • Email address
  • Physical address

Student Data

  • Academic information
  • Enrolment details
  • Progress and performance records

Technical Data

  • IP address
  • Device and browser information
  • Website usage data

Special Category Data (if applicable)

  • Health or learning support needs (only with explicit consent)
3. HOW WE COLLECT DATA

We collect data through:

  • Website forms
  • Enrolment and registration forms
  • Direct communication
  • Cookies and analytics tools
4. LAWFUL BASIS FOR PROCESSING

We process data under:

  • Consent
  • Contractual necessity
  • Legal obligation
  • Legitimate interests
5. HOW WE USE YOUR DATA

We use your data to:

  • Provide educational services
  • Manage enrolments and student records
  • Communicate with students and parents
  • Support safeguarding responsibilities
  • Improve services and website functionality
  • Send marketing communications (only with consent)
6. DATA SHARING

We may share data with:

  • IT and hosting providers
  • Payment processors
  • Tutors and staff
  • Regulatory or legal authorities when required

All third parties are required to comply with UK GDPR.

7. INTERNATIONAL TRANSFERS

If data is transferred outside the UK, we ensure appropriate safeguards are in place.

8. DATA RETENTION

We retain personal data only as long as necessary:

  • Student records: up to 6 years (or as required by law)
  • Safeguarding records: as legally required
  • Marketing data: until consent is withdrawn
9. YOUR RIGHTS

Under UK GDPR, you have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

You also have the right to complain to the Information Commissioner’s Office (ICO):
https://www.ico.org.uk

10. COOKIES

We use cookies under PECR regulations:

  • Essential cookies (site functionality)
  • Analytics cookies (usage tracking)
  • Marketing cookies (only with consent)

You can manage cookies via your browser or cookie banner.

11. DATA SECURITY

We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse.

12. STUDENT DATA

We process student data:

  • Only with parental/guardian and other official stakeholders consent
  • Only where necessary for educational purposes
  • With enhanced safeguarding measures
13. AUTOMATED DECISION-MAKING

We do not use automated decision-making or profiling that has legal or significant effects on individuals.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Updates will be posted on this page.

15. CONTACT US