Privacy Policy

1. Introduction

Vivid Crag Education ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website vivid-crag.com and use our services.

This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name and contact details (email address, phone number)
• Educational background and qualifications
• Programme preferences and career goals
• Financial information for scholarship applications
• Passport and visa information when required
• Communication records and correspondence

2.2 Technical Information

We automatically collect certain technical information, including:

• IP address and browser type
• Operating system and device information
• Pages visited and time spent on our website
• Referral sources and search terms
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide educational consultancy services
• To process university and college applications
• To assist with visa and immigration applications
• To send newsletters and educational updates (with consent)
• To improve our website and services
• To comply with legal obligations
• To protect our legitimate business interests

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: For marketing communications and cookies
• Contract: To provide our educational services
• Legitimate Interest: To improve our services and website functionality
• Legal Obligation: To comply with regulatory requirements

5. Information Sharing and Disclosure

We may share your information with:

• Universities and educational institutions for application purposes
• Visa processing centres and government agencies
• Third-party service providers who assist in our operations
• Professional advisors (lawyers, accountants)
• Law enforcement when legally required

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Regular security assessments
• Staff training on data protection
• Access controls and authentication systems

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

Generally, we retain client records for 7 years after the conclusion of our services, unless a longer retention period is required by law.

8. Your Rights

Under UK GDPR, you have the following rights:

• Right of access: Request copies of your personal data
• Right to rectification: Correct inaccurate personal data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a structured format
• Right to object: Object to certain types of processing
• Rights related to automated decision-making: Including profiling

To exercise these rights, please contact us at [email protected].

9. Cookies

Our website uses cookies to enhance your browsing experience. For detailed information about our cookie usage, please refer to our Cookie Policy.

10. International Transfers

We may transfer your personal data to countries outside the UK/EEA for processing. When we do so, we ensure adequate protection through:

• Adequacy decisions by the UK government
• Standard contractual clauses
• Other appropriate safeguards

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "last updated" date.

12. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

13. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues: