Privacy Policy

Last updated: 13 September 2026

Correa Education Limited (“Correa Education”, “we”, “us” or “our”) is committed to protecting your personal information and respecting your privacy.

This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, contact us, book a consultation, use our educational or career advisory services, or otherwise interact with us.

Correa Education Limited is the data controller responsible for the personal information described in this Privacy Policy.

We are registered with the UK Information Commissioner's Office (“ICO”).

Contact details

1. Who we work with

Correa Education provides educational and career advisory services, including:

• university and UCAS application support;
• Oxford, Cambridge and other competitive university application preparation;
• personal statement and application review;
• academic and admissions mentoring;
• tutoring;
• interview preparation;
• career coaching and career transition advice;
• CV, LinkedIn and job application support; and
• related educational and professional consulting services.

Our clients may include students, parents or guardians, graduates, professionals and other individuals seeking educational or career support.

Some of the students we work with may be under the age of 18. We recognise that children's personal information requires particular protection and we take this into account when collecting and using their information.

2. Personal information we collect

The personal information we collect depends on how you interact with us.

Information you provide directly

We may collect:

• your name;
• email address;
• telephone number;
• country or location;
• age or date of birth where relevant;
• the name and contact details of a parent or guardian;
• school, university or employer details;
• academic history, grades and predicted grades;
• subjects studied;
• university or course choices;
• career interests and professional experience;
• CVs, personal statements, essays, application forms and supporting documents;
• information about admissions tests, interviews or university applications;
• information you provide during consultations, lessons or coaching sessions;
• correspondence with us by email, telephone, WhatsApp, website forms, video calls or other communication channels;
• appointment and booking information; and
• testimonials or feedback where you choose to provide these.

We do not normally need to collect payment card details ourselves where payment is processed through a third-party payment provider.

Sensitive information

Occasionally, a client or student may provide information that is considered special category personal data, for example information concerning health, disability or learning needs.

We only ask for or use this information where it is relevant to the service we are providing and where we have an appropriate lawful basis for doing so. Where required, this may include obtaining explicit consent.

We encourage clients not to provide sensitive personal information unless it is relevant and necessary.

3. Information collected automatically through our website

When you use our website, certain technical information may be collected automatically, including:

• IP address;
• browser type and version;
• device information;
• operating system;
• pages visited;
• time spent on the website;
• referring website or source;
• approximate geographic location; and
• information collected using cookies and similar technologies.

We may use this information to operate and secure our website, understand how visitors use it and improve our services.

Where cookies or similar technologies require consent, they will not be used until you have made the appropriate choice through our cookie consent mechanism.

Please see our Cookie Policy for more information.

4. How we use your personal information

We may use personal information to:

Respond to enquiries

We use your contact details and the information contained in your enquiry to respond to you, discuss our services and arrange introductory calls or consultations.

Our lawful basis will usually be taking steps at your request before entering into a contract and/or our legitimate interests in responding to enquiries about our services.

Provide our services

We use information about you or the student to deliver tutoring, admissions advice, university application support, career coaching and other services you have requested.

This may include reviewing academic records, CVs, essays, personal statements and applications, preparing recommendations and keeping appropriate notes about our sessions.

Where an adult client contracts directly with us, our lawful basis will normally be performance of a contract.

Where a parent or guardian purchases services for a child, we may rely on the contract with the parent or guardian together with our legitimate interests in providing the agreed educational service. When relying on legitimate interests in relation to children's information, we give particular consideration to the child's interests, rights and freedoms.

Manage bookings and communications

We may process your information to schedule sessions, send appointment confirmations, provide meeting links, reschedule appointments, and communicate about the services we provide.

Improve our services

We may use appropriate information about our clients and enquiries to understand how our services are being used, improve our programmes, and develop our business.

Where possible, we use aggregated or anonymised information for this purpose.

Protect our business and users

We may process personal information where reasonably necessary to protect our website, systems, clients and business against fraud, misuse, security threats,and legal claims.

Comply with legal obligations

We may process and retain information where necessary to comply with applicable law, regulatory requirements, accounting obligations, safeguarding responsibilities or requests from competent authorities.

5. Marketing communications

We may occasionally send you information about Correa Education services, events, webinars, application guidance or other content that we believe may be relevant to you.

We will only send electronic marketing where we have an appropriate legal basis to do so, including where you have consented or where applicable law otherwise permits us to contact you.

You can unsubscribe from marketing communications at any time by:

• clicking the unsubscribe link included in an email; or
• contacting us at info@correaeducation.com.

Unsubscribing from marketing does not prevent us from sending communications that are necessary for an existing booking, contract or service.

We do not sell personal information to third parties for marketing purposes.

6. Children and students under 18

We take additional care when handling the personal information of children and young people.

Where a student is under 18, our commercial relationship will generally be with their parent or guardian. However, we may communicate directly with the student where appropriate for delivering the service.

We aim to collect only information that is reasonably necessary to provide educational or application support.

We do not use children's information for behavioural advertising or sell children's personal information.

Where we rely on consent for an optional use of a child's personal information, we will consider the child's age and understanding and obtain parental or guardian consent where legally required or appropriate.

Parents and guardians may contact us if they have questions about how a child's information is being used.

Children and young people also have data protection rights in relation to their own personal information.

7. Testimonials and success stories

We may invite clients or students to provide testimonials about their experience with Correa Education.

We will not publish a person's name, photograph, identifiable academic information or other identifying details as part of a testimonial without appropriate permission.

Where testimonials are published anonymously, we will take reasonable steps to avoid including information that would unnecessarily identify the individual.

Providing a testimonial is entirely voluntary.

8. Who we share personal information with

We do not sell your personal information.

We may share information with trusted service providers where this is necessary to operate our business or provide our services. These may include providers of:

• website hosting and website management;
• email and cloud storage services;
• Google Workspace or similar productivity services;
• video conferencing services such as Google Meet or Zoom;
• appointment and scheduling systems;
• accounting and bookkeeping software;
• customer relationship management systems;
• analytics services; and
• professional advisers such as accountants, solicitors or insurers.

These providers may process information on our behalf and are expected to protect it appropriately.

We may also disclose information where required by law, a court, regulator or competent authority, or where reasonably necessary to establish, exercise or defend legal claims.

If we restructure, sell or transfer all or part of our business, relevant personal information may be transferred as part of that transaction subject to appropriate safeguards.

9. International transfers

Some of the technology providers we use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure that the information receives an appropriate level of protection in accordance with UK data protection law.

Depending on the destination and provider, this may include relying on UK adequacy regulations or recognised contractual safeguards for international transfers.

10. How long we keep personal information

We do not retain personal information for longer than is reasonably necessary.

The appropriate retention period depends on the nature of the information and why we collected it.

As a general guide:

General enquiries: normally retained for up to 12 months after the last meaningful contact where the enquiry does not become a client relationship.

Client and student records: normally retained for the duration of our engagement and for an appropriate period afterwards where necessary for continuity of service, responding to queries or protecting our legal interests.

Contracts, invoices and financial information: normally retained for at least six years where required for accounting, tax or legal purposes.

Marketing information: retained until you unsubscribe or we determine that the information is no longer required for marketing purposes.

Testimonials: retained for as long as we use the testimonial or until any consent on which we rely is withdrawn, where applicable.

We may retain information for longer where required by law, safeguarding considerations, an ongoing dispute or another legitimate legal reason.

We periodically review the information we hold and securely delete or anonymise information that is no longer required.

11. How we protect your information

We take reasonable technical and organisational measures designed to protect personal information against:

• unauthorised access;
• accidental loss;
• misuse;
• alteration;
• disclosure; and
• destruction.

Access to personal information is restricted to those who reasonably need access for legitimate business purposes.

However, no website, email service or internet transmission can be guaranteed to be completely secure.

12. Your data protection rights

Depending on the circumstances, UK data protection law may give you the right to:

Access – request a copy of the personal information we hold about you.

Rectification – ask us to correct inaccurate or incomplete information.

Erasure – ask us to delete personal information in certain circumstances.

Restriction – ask us to restrict how we use your personal information in certain circumstances.

Object – object to certain uses of your personal information, including direct marketing and, in some circumstances, processing based on legitimate interests.

Data portability – ask us to provide certain information to you or another organisation in a structured, commonly used and machine-readable format.

Withdraw consent – where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

You do not usually need to pay a fee to exercise these rights.

To exercise a data protection right, please contact: info@correaeducation.com

We may need to verify your identity before responding to a request.

Not every right applies in every situation and there may be circumstances in which we are permitted or required to retain particular information.

13. Automated decision-making

Correa Education does not currently use solely automated decision-making that produces legal or similarly significant effects on individuals.

University admissions, career recommendations and educational advice provided by Correa Education involve human professional judgement.

We do not make admissions decisions on behalf of universities, schools or employers.

14. Cookies

Our website may use cookies and similar technologies.

Some cookies are necessary for the website to function properly. Other cookies, including certain analytics, advertising or tracking technologies, may require your consent before they can be used.

Where consent is required, you will be given a choice through our cookie banner or preference settings.

You can change your cookie preferences where the website provides this functionality.

Please see our Cookie Policy for further information about the cookies used on our website.

15. Third-party websites

Our website may contain links to universities, educational institutions, social media platforms and other third-party websites.

We are not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy information provided by those organisations before giving them personal information.

16. Complaints

If you have concerns about how we have used your personal information, please contact us first so that we can try to resolve the matter.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator responsible for data protection.

Information about making a complaint is available at www.ico.org.uk

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology or legal obligations.

The latest version will be published on our website and the “Last updated” date at the top of this page will be amended accordingly.

We encourage you to review this Privacy Policy periodically.