UK GDPR Compliant

Privacy Policy

We take your privacy seriously. This policy explains exactly what data we collect, why we collect it, how long we keep it, and your rights under UK law.

Last updated: 10 April 2026

Who we areData we collectHow we use itWho we share withYour rightsCookiesContact DPO

1. Who We Are

UK Student Platform Ltd (“we”, “us”, “our”) operates the website and platform available at ukstudentplatform.com. We are the data controller responsible for your personal information.

UK Student Platform Ltd
International House, 12 Constance Street
London E16 2DQ, United Kingdom
ICO Registration No: ZB123456
Email: privacy@ukstudentplatform.com

We are registered with the Information Commissioner's Office (ICO) under the Data Protection Act 2018. Our processing of your personal data is governed by UK GDPR.

2. Data We Collect

We collect only what is necessary to provide our service. Here is exactly what that is:

Account dataName, email address, password (hashed)Account creationContract performance
Profile dataCountry of origin, university, visa type, visa expiry dateVisa tracking featuresContract performance
Usage dataPages visited, features used, calculator inputsPlatform improvementLegitimate interests
Payment dataPack type purchased, Stripe transaction ID (we never store card numbers)Purchase recordsLegal obligation
Work hoursHours logged, employer name, datesCompliance trackingContract performance
DocumentsDocument type, expiry date, file (stored encrypted in Supabase)Document vault featureContract performance
CommunicationsSupport emails, feedback you send usSupport & product improvementLegitimate interests

We do not collect biometric data, special category data (health, ethnicity, political views), or children's data. Our service is not directed at anyone under 18.

3. How We Use Your Data

  • Provide the platform — To run your dashboard, track your visa, send expiry reminders, and calculate ROI — the core reason you signed up.
  • Send transactional emails — Account confirmation, purchase receipts, visa expiry warnings. You cannot opt out of these while using the service.
  • Send product emails — Tips, guides, and useful updates. You can unsubscribe at any time from any email.
  • Process payments — Via Stripe. We pass your email to Stripe to create a checkout session. We never see your card details.
  • Improve the product — Aggregate, anonymised usage analytics help us understand which features matter most.
  • Legal compliance — To meet our obligations under UK law, including fraud prevention and tax records.

4. Who We Share Data With

We do not sell your data. We share it only with trusted sub-processors who are contractually bound to protect it:

Sub-processorPurposeLocationPrivacy policy
Vercel Inc.Platform hostingUSA (SCCs)vercel.com/legal/privacy-policy
Supabase Inc.Document storageEU (Frankfurt)supabase.com/privacy
Stripe Inc.Payment processingUSA (SCCs)stripe.com/en-gb/privacy
Nodemailer / SMTPTransactional emailEU/UKYour configured SMTP provider

Where data is transferred outside the UK, we ensure adequate safeguards are in place via Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA).

5. Your Rights Under UK GDPR

Under UK GDPR, you have the following rights. We will respond to all requests within 30 days.

Right of access

Request a copy of all data we hold about you.

Right to rectification

Ask us to correct inaccurate data.

Right to erasure

Ask us to delete your account and data.

Right to portability

Receive your data in a machine-readable format.

Right to restrict processing

Ask us to stop processing while a dispute is resolved.

Right to object

Object to processing based on legitimate interests.

To exercise any right, email privacy@ukstudentplatform.com. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.

6. Cookies

We use a minimal set of cookies. No third-party advertising cookies are used.

CookieTypePurposeDuration
auth-tokenSessionKeeps you logged in. HttpOnly, Secure.7 days
_vercel_analyticsAnalyticsAnonymous page view counts (no PII).Session

You can delete cookies at any time via your browser settings. Deleting auth-token will log you out.

7. Data Retention

We keep your data for as long as your account is active. If you delete your account:

  • Personal data is deleted within 30 days
  • Payment records are retained for 7 years (UK tax law)
  • Aggregated, anonymised analytics are retained indefinitely

8. Contact Our Data Protection Officer

For any privacy concerns, data requests, or complaints:

Data Protection Officer
UK Student Platform Ltd
International House, 12 Constance Street, London E16 2DQ
privacy@ukstudentplatform.com
+44 (0)20 7946 0000