Privacy Notice (UK GDPR)

Oxford Language Schools processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Notice explains which data are collected, for which purposes they are processed, and which rights data subjects have.

1. Controller

Oxford Language Schools

2. Categories of Personal Data

Oxford Language Schools may process the following categories of data:

Identification and contact details (name, postal address, telephone number, email address)

Booking and contract information

Payment details

Course, accommodation and transfer information

Communication records

Emergency contact details for minors

Website usage data (IP address, cookies, technical log data)

3. Purposes and Legal Bases

Personal data are processed for the following purposes:

Administration and delivery of language courses and related services

Performance of contractual obligations

Processing of payments

Compliance with legal obligations

Responding to enquiries

Ensuring safety and supervision on school premises

Operation and security of the website

Legal bases include Article 6(1)(b) UK GDPR (contract), Article 6(1)(c) UK GDPR (legal obligation) and Article 6(1)(f) UK GDPR (legitimate interests).

4. Data Sharing

Data may be shared only where necessary:

Accommodation providers

Transfer and transport partners

IT and website service providers

Payment service providers

Public authorities where required by law

All processors are bound by data-processing agreements that ensure compliance with UK GDPR.

5. International Transfers

If data are transferred outside the UK, this is done only:

on the basis of an adequacy decision, or

through safeguards such as Standard Contractual Clauses.

6. Storage Period

Data are stored only as long as required:

for the fulfilment of contractual obligations,

for statutory retention periods, or

for legitimate interests where permissible under UK GDPR.

7. Rights of Data Subjects

Data subjects have the following rights under UK GDPR:

Right of access

Right to rectification

Right to erasure

Right to restriction of processing

Right to data portability

Right to object

Right to lodge a complaint with the Information Commissioner’s Office (ICO)

8. Website Data and Cookies

Technical data such as IP address, browser type and access times may be collected to ensure secure website operation. Cookies are used only where necessary for functionality or where consent has been obtained.

9. Contact

For all questions relating to data protection or to exercise data rights:

Data Protection Officer
Oxford Language Schools