Privacy Notice (UK GDPR)
Last updated: 21 January 2026
1) Who we are
Career Deal Education is a registered trading name of Career Deal Ltd.
Company number: 14488202
VAT number: 465031216
Registered/office address: Suite 3.10, St James House, 27–43 Eastern Road, Romford, England, RM1 3NH
Email: info@cdeducation.co.uk
We are committed to protecting your personal data and complying with the UK GDPR, the Data Protection Act 2018, and PECR (Privacy and Electronic Communications Regulations).
2) Controller and how to contact us
For data protection purposes, Career Deal Ltd (trading as Career Deal Education) is the data controller.
To contact us about privacy:
- Email: info@cdeducation.co.uk (Subject: “Data Protection”)
- Post: Suite 3.10, St James House, 27–43 Eastern Road, Romford, RM1 3NH
3) What this notice covers
This notice explains what personal data we collect, why we use it, the lawful bases we rely on, who we share it with, how long we keep it, international transfers, security, and your rights.
4) Personal data we collect
4.1 Data you give us
Depending on what you request (enquiry, consultation, application support), we may collect:
- Identity & contact: name, address, email, phone number, date of birth, nationality, gender (if provided)
- Education & admissions: course preferences, education history, qualifications, transcripts, references, CV/personal statement, English test results
- Application/admin: copies of ID documents (e.g., passport), right-to-study/visa or immigration documents where relevant to the service you request
- Communications: emails, call notes, WhatsApp messages, meeting notes
- Marketing preferences: whether you want updates and what channels you prefer
4.2 Data we collect automatically (website use)
When you browse our website, we may collect:
- Technical data: IP address, device type, browser, pages visited, and basic usage data
This is typically collected via cookies and similar technologies (see “Cookies” below)
4.3 Data from third parties
We may receive data from:
- Education partners (e.g., universities/colleges) and referees where you ask us to liaise on your behalf
- Lead/referral partners where data is provided lawfully
5) Special category data
We try to avoid collecting special category data (e.g., health/disability information) unless it’s necessary (for example, to request reasonable adjustments).
If we do process special category data, we will:
- explain why we need it,
- apply extra safeguards, and
- rely on a valid UK GDPR condition (usually explicit consent, or another lawful condition where applicable).
6) Why we use your data and our lawful bases
We only use your data where we have a lawful basis. Common purposes include:
- Responding to enquiries and providing consultation/support
- Lawful basis: legitimate interests and/or pre-contract steps (where you ask us to help you)
- Admissions/application support and liaison with education providers/partners (when you request it)
- Lawful basis: contract (to deliver the service you asked for); sometimes legal obligation (e.g., identity/document checks where required)
- Running and securing our website and systems
- Lawful basis: legitimate interests (IT security, fraud prevention, service continuity)
- Marketing communications (see section 7)
- Lawful basis: consent or “soft opt-in” where permitted under PECR (for similar services)
- Compliance, record-keeping, dispute handling, and responding to authorities
- Lawful basis: legal obligation and/or legitimate interests (protecting our business and users)
7) Marketing and your choices (PECR)
We may send updates about study opportunities, services, events, and guidance:
- Email/SMS/WhatsApp to individuals: only with consent or where PECR “soft opt-in” applies.
- You can opt out anytime by using the unsubscribe link (where available) or emailing info@cdeducation.co.uk.
8) Cookies
Cookies are small files stored on your device. We use:
- Strictly necessary cookies (site functionality; no consent required)
- Analytics cookies (only with your consent, where implemented)
- Marketing cookies (only with your consent, where implemented)
You can manage cookie choices through your browser settings and (where available) our cookie banner/tool.
9) Who we share your data with
We may share your data with:
- Universities/colleges/education partners to progress your enquiry or application when you ask us to do so (they will usually act as independent controllers with their own privacy notices)
- Service providers (processors) such as hosting, email/communications tools, CRM systems, document management, and analytics providers—only under contracts that protect your data
- Authorities where required by law or to protect rights/safety
We do not sell personal data.
10) International transfers
If your data is transferred outside the UK (for example, to an education provider or an IT supplier located abroad), we use appropriate safeguards such as:
- the UK International Data Transfer Agreement (IDTA),
- the UK Addendum to EU SCCs, and/or
- other lawful mechanisms recognised under UK data protection law.
11) How long we keep your data (retention)
We keep data only as long as needed for the purpose it was collected. Typical periods:
- General enquiries (no further engagement): up to 24 months from last contact
- Student/application files: up to 7 years after your last interaction or completion of services (to support ongoing queries, audits, or disputes)
- Marketing records: until you opt out, or after a period of inactivity (we may keep a minimal suppression record to respect opt-outs)
- Accounting/finance records: typically 6 years (or longer where legally required)
12) Automated decision-making
We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.
13) Security
We use appropriate technical and organisational measures to protect personal data, including access controls, staff confidentiality, and secure systems. No method of transmission is 100% secure, but we work hard to protect your information.
14) Children
Our services are generally intended for people 16+ seeking education guidance. If we learn we’ve collected personal data from a child inappropriately, we will take steps to delete it.
15) Your rights
You have rights under UK GDPR, including the right to:
- access your data,
- correct inaccurate data,
- request deletion (where applicable),
- restrict processing,
- object (including to direct marketing),
- data portability (in certain cases),
- withdraw consent (where consent is the basis).
To exercise your rights, email info@cdeducation.co.uk with “Data Protection” in the subject.
We may ask for proof of identity to protect your data.
16) Complaints
If you’re unhappy with how we handle your data, contact us first and we’ll try to resolve it:
- info@cdeducation.co.uk (Subject: “Data protection complaint”)
You also have the right to complain to the Information Commissioner’s Office (ICO):
- ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- Tel: 0303 123 1113
- Website: ico.org.uk
17) Changes to this notice
We may update this notice from time to time. The latest version will be published on our website with the updated date.