Privacy Policy

Effective Date: August 2026
Last Updated: August 2026

1. Introduction

EBB GLOBAL CONSULTANCY LTD ("we," "us," or "our") operates the website EducationBeyondBorders.com (the "Website"). We are a company registered in England and Wales (Company Number: 17469494) providing educational consultancy services to students seeking international university placements.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our Website, submit inquiries, or use our services. We are committed to protecting your privacy and complying with:

UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018
EU General Data Protection Regulation (EU GDPR) where applicable to EU residents
UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) where applicable to UAE residents

By using our Website, you consent to the data practices described in this policy.

2. Data Controller

EBB GLOBAL CONSULTANCY LTD is the data controller responsible for your personal data.

Company Name: EBB GLOBAL CONSULTANCY LTD
Company Number: 17469494
Registered Office: [Insert Registered Office Address]
Email: privacy@EducationBeyondBorders.com
Website: EducationBeyondBorders.com

As we are based in the UK and offer services to individuals in the UK, EU, and UAE, we comply with the transparency requirements of UK GDPR, EU GDPR, and UAE PDPL.

3. Information We Collect

3.1 Information You Provide Voluntarily

When you interact with our Website, you may provide us with:

Contact Information: Full name, email address, WhatsApp/phone number, country of residence
Academic Information: Current education level, grades/percentages, preferred field of study, university preferences
Inquiry/Application Data: Messages sent through consultation forms, scholarship eligibility requests, correspondence
Communication Data: Email exchanges, chat messages, consent records

3.2 Information Collected Automatically

When you visit our Website, we automatically collect certain technical information:

Device & Browser Data: IP address, browser type, operating system, device type
Usage Data: Pages visited, time spent, links clicked, referral source
Cookies & Tracking: Functional cookies, analytics cookies, marketing/tracking cookies (with your consent)

We use Google reCAPTCHA on contact forms to prevent spam. Google may process your IP address and browser data for this purpose.

4. Lawful Basis for Processing

Under UK GDPR and EU GDPR, we must have a valid lawful basis for processing your personal data. We rely on the following lawful bases:

Responding to your inquiries and providing consultation services
Lawful Basis: Consent / Legitimate interests

Processing university applications and scholarship assessments
Lawful Basis: Contract (steps toward enrollment)

Sending you relevant information about universities, scholarships, and events
Lawful Basis: Consent (opt-in required for marketing)

Improving our Website through analytics
Lawful Basis: Legitimate interests

Preventing fraud and ensuring security (e.g., reCAPTCHA)
Lawful Basis: Legitimate interests

Complying with legal and regulatory obligations
Lawful Basis: Legal obligation

Important: Where we rely on consent, you have the right to withdraw it at any time. Consent must be as easy to withdraw as it is to give.

We do not sell, rent, or share your personal data for monetary consideration.

5. Special Category Data

We may process sensitive personal data only when necessary and with your explicit consent. Sensitive data may include:

Passport and visa information (for visa processing)
Academic transcripts and assessment records
Health information (if required for university applications)

We handle such data with enhanced security and only process it as needed for your university application journey.

6. Cookies and Tracking Technologies

Our Website uses cookies to enhance your experience. These include:

Functional/Technical Cookies
Purpose: Ensure website functionality, remember preferences
Consent Required: No (strictly necessary)

Analytics/Statistics Cookies
Purpose: Understand how visitors use our Website
Consent Required: Yes (optional)

Marketing/Tracking Cookies
Purpose: Display relevant ads and track campaign performance
Consent Required: Yes (optional)

You can manage your cookie preferences at any time through the cookie banner on our Website or via your browser settings.

7. Data Sharing and Third-Party Disclosures

We may share your personal data with:

Partner Universities
Purpose: To process your admission and scholarship applications

Service Providers
Purpose: Email delivery, hosting, CRM, analytics (e.g., Google Analytics)

Regulatory Authorities
Purpose: If required by UK, EU, or UAE law or court order

Third-Party Processors
Purpose: For specific services like payment processing (if applicable)

Any third-party processors are contractually obligated to protect your data and process it only as instructed by us. We do not share your data for third-party marketing purposes without your explicit consent.

8. International Data Transfers

As a UK-based consultancy offering services to individuals in the UK, EU, and UAE, we may transfer your personal data outside these regions to partner universities, service providers, or servers located in other countries.

Under UK GDPR, EU GDPR, and UAE PDPL, we ensure appropriate safeguards are in place for international transfers, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission or UK Information Commissioner's Office
Adequacy decisions where applicable (e.g., transfers to countries deemed adequate by the UK Secretary of State or EU Commission)
Data transfer agreements that meet UK, EU, and UAE legal requirements

We remain responsible for your data regardless of where it is processed.

9. Data Retention

We retain your personal data only as long as necessary for:

The purpose for which it was collected
Legal, regulatory, or accounting requirements
The duration of your relationship with us as a prospective or enrolled student

When no longer needed, we securely delete or anonymize your data. Typical retention periods are:

Consultation inquiries: 2 years after last contact

Student application records: 5 years after graduation or final outcome

Marketing preferences: Until you withdraw consent

Cookies/analytics data: Up to 365 days

10. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

Right to Access
Request a copy of the data we hold about you

Right to Rectification
Correct inaccurate or incomplete data

Right to Erasure
Request deletion of your data ("right to be forgotten")

Right to Restrict Processing
Limit how we use your data

Right to Data Portability
Receive your data in a structured, machine-readable format

Right to Object
Object to processing based on legitimate interests

Right to Withdraw Consent
Withdraw any consent you previously gave

Right to Complain
File a complaint with the ICO (UK), your local EU supervisory authority, or the UAE Data Office

To exercise any of these rights, contact us at privacy@EducationBeyondBorders.com. We will respond within 30 days (or one month under UK/EU GDPR).

Right to Complain:

UK residents: You can complain to the Information Commissioner's Office (ICO) at ico.org.uk
EU residents: You can complain to the supervisory authority in your EU member state
UAE residents: You can complain to the UAE Data Office

11. Automated Decision-Making

We do not currently use automated decision-making, including profiling, that produces legal or similarly significant effects on you. If this changes, we will update this policy and provide you with information about the logic involved and the significance and consequences of such processing.

12. Minors

Our services are directed to students who are at least 18 years of age (the legal age of majority in the UK and UAE). We do not knowingly collect personal data from individuals under 18. If we discover we have collected data from a minor, we will delete it promptly. Parental or guardian consent is required for processing personal data of minors.

13. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

Encryption for data in transit and at rest
Access controls restricting who can view personal data
Regular security audits and staff training
Secure servers with firewall protection

However, no method of internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

14. Third-Party Links

Our Website may contain links to partner universities, government portals, and other external sites. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal data.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in legal requirements or our practices. Updates will be posted on this page with a revised "Effective Date." We encourage you to review this page regularly. For material changes, we may notify you via email or Website banner.

16. Contact Us

If you have any questions about this Privacy Policy, want to exercise your rights, or need to make a complaint, please contact us:

Email: info@EducationBeyondBorders.com
General Inquiries: info@EducationBeyondBorders.com
Company Number: 17469494
Registered Office: 163 Cressex Road, High Wycombe, Buckinghamshire, HP12 4PZ