Way Education
Legal
Helping a student apply abroad runs on personal information, some of it sensitive, much of it belonging to someone still at school. This is what we collect, why, who receives it, and what you can ask us to do about it.
01
Way Education is responsible for the personal information described in this notice. In data protection language, we are the data controller.
The notice covers this website and the enquiries, consultations, and advisory work that follow from it. It applies whether you come to us as a student, as a parent or guardian, or on behalf of a school.
If any part of it is unclear, write to [email protected] and ask. Our office addresses are on the contact us page.
02
What we hold depends on how far your planning has gone. An enquiry needs very little. A submitted visa application needs a great deal.
Some of that is sensitive, particularly the medical, financial, and immigration material. We ask for it only when a specific application step requires it, and we tell you what the step is at the time.
03
Most of it comes from you, through an enquiry, an email, a call, or a consultation.
Some comes from a parent or guardian, which is normal when the student is under 18 or when the family is handling budget, travel, and welfare questions. Some arrives from a school, a teacher writing a reference, or a counsellor who has referred you. A small amount is collected automatically when you visit this website.
04
We use your information to answer your enquiry and give you guidance, to prepare and submit university applications on your instructions, to find and apply for scholarships, and to put together study visa documentation. Where you ask for them, we also use it to arrange accommodation, guardianship, mentorship, and arrival support. Beyond your case, we use it to keep our own accounts and records, to meet legal obligations, and to understand how this website is used.
Where you are in India, the Digital Personal Data Protection Act 2023 applies. We rely mainly on your consent, together with the limited legitimate uses that the Act permits.
Where you are in the United Kingdom or Europe, or where an application is made to an institution there, the UK or EU GDPR may also apply. In that case we rely on your consent, on carrying out our agreement with you, on our legal obligations, and on our legitimate interest in running and improving the service.
05
This is the part families ask about most, so it is worth being direct. An application cannot be made without sending your information to the institution you are applying to. That is the whole exercise. What we will not do is sell your information, or hand it to anyone for their own marketing.
Each recipient gets what that step needs. Not the whole file.
06
Studying abroad means your information travels. Apply to a university in the United Kingdom, Canada, Germany, Australia, or anywhere else, and your details go to that country and are handled under its law.
Where we appoint a service provider abroad, we ask them in writing to keep your information confidential and to use it only for the purpose we gave it to them. Where information goes to a university, a funding body, or an immigration authority, it is then held under that organisation's own rules, which we do not control. Their privacy notices apply alongside this one, and it is worth reading them before you submit.
07
We keep your file while your planning and applications are live, and for a period afterwards so that we can answer questions about what was submitted, handle a deferred intake or a reapplication, and meet accounting requirements.
In practice, enquiry records are kept for up to two years after our last contact with you, and full application files for up to eight years after the final application, which follows the record-keeping period that applies to our accounts. When a period ends, the material is deleted or stripped of the details that identify you. You can ask us to delete it sooner.
08
Access is limited to the advisers and support staff working on your case. Staff are under confidentiality obligations, files sit in access-controlled systems, and we ask our service providers to hold the same line.
No system is completely secure, and we are not going to pretend otherwise. If a breach occurs that puts you at risk, we will tell you and notify the relevant authority as the law requires.
09
Under the Digital Personal Data Protection Act 2023, you can ask us to do the following.
Where the UK or EU GDPR applies, you can also ask for a copy of your data in a portable format and object to processing we base on our legitimate interests.
Write to [email protected] to use any of these. We will confirm who you are, then reply within 30 days, and tell you if we need longer. One thing worth knowing before you withdraw consent partway through an application: it usually means we cannot carry that application forward. We will say so directly rather than let a deadline pass quietly.
10
Younger students are a normal part of this work, particularly for summer programmes, boarding placements, and guardianship. Where a student is under 18, we ask for consent from a parent or guardian and take reasonable steps to verify that the person giving it is who they say they are.
We do not use a child's information for behavioural advertising, and we do not track or profile children.
11
This site sets analytics cookies so we can see which pages are useful. It carries no advertising or retargeting tags. Our cookies policy names each cookie, says how long it lasts, and explains how to switch it off. The terms and conditions cover use of the site itself.
12
We update this notice when our practices change or when the law does, and the version published here is always the one that applies. If a change materially affects how we handle information you have already given us, we will tell the people affected directly rather than leave you to spot the difference.
13
For anything in this notice, including a request to see, correct, or delete your information, email [email protected]. Postal addresses are on the contact us page.
If our answer does not resolve the matter, you can complain to the Data Protection Board of India. If you are in the United Kingdom or Europe, you can instead complain to the data protection authority in your country.
Still have a question
If you want to know what a particular university will receive, or what a visa application will require, ask first. We would rather explain it early than have you find out at the document stage.