Privacy Policy

Last updated: 17 September 2026

1. Who we are

Andyoeo Educational Training Centre Limited (trading as Andyoeo Education, “Andyoeo”, “we”, “us”) is the data controller for the personal information described in this policy. This means we decide how and why your information is used, and we are responsible for protecting it.

Andyoeo is a UK-based education consultancy. We help learners, including adult learners returning to education and international students, find, apply for and prepare for university and other courses in the UK.

• Company number: 10577158 (registered in England and Wales)
• Registered office: 473 New Cross Road, London SE14 6TA
• ICO registration number: ZB470165
• Privacy contact: admin@andyoeo.com or +44 7805 031331

This policy is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

2. Who this policy covers

This policy applies to you if you:

• visit andyoeo.com
• make an enquiry by form, phone, email, WhatsApp, social media or in person
• apply for a course through us or receive our admissions support
• are referred to us by a friend, content creator, college or other partner
• sign up to hear from us
• work with us as a content creator or referral partner

If you work for us or apply for a job with us, we will give you separate privacy information. Our website may link to other sites, such as university websites. We are not responsible for how they use your information, so please read their privacy policies.

3. Information we collect

Depending on how you deal with us, we may collect:

• Identity and contact details: name, date of birth, email address, phone number, postal address, town or city.
• Education and work history: qualifications, previous study, work experience, CV, personal statement and references.
• Application details: courses and universities you are interested in, preferred study location and start date, application progress, offers and enrolment status, and interview preparation notes.
• Eligibility and funding information: nationality, residency and immigration status, and documents that show them (such as a passport, visa, share code or proof of UK residence), plus details needed for student funding applications.
• Sensitive information you choose to share: see section 6.
• Communications: emails, calls, WhatsApp and portal messages with you, and notes from appointments.
• How you found us: the advert, QR code, content creator, college or referral partner that introduced you.
• Marketing preferences: whether you want to hear from us and how.
• Content creators and referral partners: name, social media handles, contact details, bank details for paying referral fees, and records of referrals.
• Technical data: IP address, browser and device type, pages visited and how you reached our site, collected through cookies (section 13).

4. Where we get your information

Most information comes directly from you. We also receive it from:

• Social media and search platforms (such as Facebook, Instagram, TikTok and Google), when you submit your details through a lead form on their platform.
• Content creators and referral partners, through enquiry forms they share with their audience, or when they refer you to us.
• Colleges, adult learning centres and community organisations that refer you to us with your agreement.
• Universities and education providers, when they update us on your application, offer or enrolment.
• Student funding bodies, when you ask us to help with a funding application.

If someone else gives us your details, we will tell you when we first contact you, and always within one month, and point you to this policy.

5. How we use your information and our lawful basis

The law only lets us use your information when we have a lawful basis. This table shows what we use it for and the basis we rely on.

What we use it for	Lawful basis
Answering your enquiry and checking which courses and entry routes suit you	Taking steps you ask for before providing a service (contract)
Preparing and submitting applications, and supporting interviews and enrolment	Contract
Sharing your application with the universities and providers you choose	Contract
Helping with student funding applications, where you ask us to	Contract
Following up if you have not finished an application or enrolled	Legitimate interests
Recording who referred you and paying referral fees	Legitimate interests (contract, for a partner’s own details)
Sending news about courses, intakes and events	Consent, or legitimate interests if you have enquired with us (section 8)
Website analytics and measuring our adverts	Consent, through our cookie banner
Keeping financial and tax records	Legal obligation
Keeping our systems and records secure and preventing fraud	Legitimate interests
Handling complaints, rights requests and legal claims	Legal obligation or legitimate interests
Improving our services and training our staff	Legitimate interests

Our legitimate interests are helping learners who contact us complete their applications, running our referral partnerships and paying partners accurately, telling people who have shown interest about our services, keeping our systems secure, and improving the support we give. We only rely on legitimate interests where they are not outweighed by your rights. You can object at any time (section 16).

6. Sensitive information

Some information has extra protection in law (“special category” and criminal offence data). We only collect it where your application or support needs it, and we explain why when we ask.

• Health or disability information, where you tell us so we or your university can arrange support or adjustments.
• Equality monitoring information, such as ethnic origin, where an application form asks for it.
• Criminal records information, where a course (for example in health and social care) requires a declaration or DBS check.

We use this information with your explicit consent and share it only with the university or provider you are applying to. You can withdraw consent at any time, although this may limit the support we can give.

Residency and immigration information is not special category data, but we treat it with the same care. Access is restricted to staff who need it, and we share it only with the universities and funding bodies that require it.

7. Learners under 18

Some of our courses are open to learners under 18. For these learners we collect only what is needed to enrol and support them, and we may involve a parent or guardian where appropriate. We do not use under-18s’ information for targeted advertising.

8. Marketing

We will only send you marketing by email, text or WhatsApp if you have agreed to it, or if you have enquired about our services and did not opt out. We only tell you about our own courses and services.

Every message explains how to unsubscribe. You can also contact us at any time to stop marketing. We keep a short record of your opt-out so we do not contact you again.

We do not upload your contact details to social media platforms to target adverts at you.

9. Who we share your information with

We only share what each recipient needs:

• Universities and education providers you choose to apply to.
• Student funding bodies, when you ask us to help with funding.
• The content creator or referral partner who introduced you. We only confirm whether you enrolled, so we can pay their fee. We never share your documents or application details with them.
• Service providers who work for us under contract: website and CRM hosting, email delivery, cloud storage and forms, messaging, IT support and security, and marketing agencies. They may only use your information on our instructions.
• Advertising platforms (such as Meta, TikTok and Google), when you submit a lead form on their platform or accept marketing cookies on our site.
• Professional advisers, such as accountants, lawyers and insurers.
• Regulators, law enforcement or courts, when the law requires it.
• A buyer or successor, if our business is reorganised or sold.

We never sell your personal information.

10. Transfers outside the UK

The universities and providers we work with are based in the UK. Some of our service providers store or access information outside the UK, including in the United States.

When this happens, we make sure your information stays protected by using:

• countries the UK government has approved as giving adequate protection, including the European Economic Area and US organisations certified under the UK Extension to the EU-US Data Privacy Framework, or
• the ICO’s International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Contact us if you would like more information about these safeguards.

11. How long we keep your information

We keep information only as long as we need it. When the period ends, we securely delete or anonymise it.

Information	How long we keep it
Enquiries that do not lead to an application	24 months from our last contact with you
Application and student support records	6 years after our support ends
Copies of ID, residency and immigration documents	12 months after your application outcome, unless needed for an open query or dispute
Sensitive information (section 6)	As long as your application record, or until you withdraw consent
Referral and commission records	6 years after the end of the financial year the payment relates to
Marketing preferences	Until you unsubscribe, then a short opt-out record so we do not contact you again
Complaints and rights requests	3 years after the matter is closed
Website analytics data	Up to 14 months

12. How we keep your information secure

We protect your information with:

• encrypted (HTTPS) connections on our website and student portal
• role-based access, so staff only see the records they need
• secure hosting with firewall and malware protection, regular updates and backups
• staff guidance on handling personal information
• contracts requiring our service providers to keep information secure

No system is completely secure. If a data breach is likely to put you at high risk, we will tell you without undue delay.

13. Cookies

Cookies are small files stored on your device when you visit a website. We use three types:

• Strictly necessary cookies make the site work and remember your cookie choices. These do not need your consent.
• Analytics cookies count visits and show us how people use the site, so we can improve it.
• Marketing cookies are set by advertising platforms such as Google, Meta and TikTok to measure and show our adverts.

We only set analytics and marketing cookies after you accept them in our cookie banner. You can change your choice at any time using the Cookie Settings link at the bottom of every page, or through your browser settings. Blocking some cookies may affect how the site works.

The Cookie Settings panel shows the cookies we use in each category, what they do and how long they last.

14. Automated decision-making

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Decisions on offers are made by universities through their own admissions processes.

15. If you do not give us information

You do not have to give us your information. However, universities and funding bodies need certain details to process an application. Without them, we may not be able to check your eligibility or apply on your behalf. We will tell you when information is required.

16. Your rights

You have the right to:

• Access your information and get a copy of it.
• Correct information that is inaccurate or incomplete.
• Delete your information in certain circumstances.
• Restrict how we use your information.
• Object to our use of your information based on legitimate interests, and to direct marketing at any time.
• Data portability: receive information you gave us in a portable format, where we use it based on consent or contract.
• Withdraw consent at any time, where we rely on it. This does not affect anything we did before you withdrew.

To use any of these rights, contact us (section 19). There is usually no fee. We will reply within one month, or tell you if a complex request needs up to two more months. We may ask you to confirm your identity first.

17. Complaints

If you are unhappy with how we have handled your information, please tell us first. Email admin@andyoeo.com with “Data protection complaint” in the subject line. We will acknowledge your complaint within 30 days, look into it, and tell you the outcome without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO):

• Website: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

18. Changes to this policy

We review this policy at least once a year. The date at the top shows when it last changed. If we make significant changes that affect you, we will tell you directly where we have your contact details.

19. Contact us

Andyoeo Educational Training Centre Limited
473 New Cross Road, London SE14 6TA

• Email: admin@andyoeo.com
• Phone: +44 7805 031331