Data Protection Policy

TCB Education Consultants Student Privacy Notice / GDPR Policy

TCB Education is an authorized agent of universities. TCB Education will act as the Data Controller of your personal data, which we process to facilitate, administer, and manage your student journey with the university. This Privacy Notice explains how we handle and protect your personal data.

Changes to this Notice

We may update this Privacy Notice at any time. In certain cases, we may also provide additional notices specific to how we collect and process your personal information. These are supplemental to this main Notice. We recommend checking this Notice regularly to stay informed. If changes affect your rights, we will notify you and explain clearly how they apply.

Your Personal Data: Why TCB Education and the University Need It

As a student, you will have a student record that includes details from your application and registration, as well as updates throughout your studies.

Types of personal data we collect include:

• Personal and family details

• Financial information

• Education records

• Attendance and disciplinary records

• Employment details (if relevant)

• Identification images

• Records of goods or services provided

Special category data (such as race, ethnicity, health data, religious beliefs, or biometric data) is only processed when legally required or with your explicit consent.

We take your privacy seriously and only use your personal data for specific, legitimate reasons.

Why We Process Your Personal Data

• Application processing – to manage and process your application

• Administration – to handle fees, timetables, facilities, and services

• Pastoral care – to support your safety and wellbeing

• Academic purposes – to provide teaching, supervision, and learning support

• Security – to ensure safety and prevent crime

• Legal reporting – to comply with statutory obligations

• Research and analytics – to improve services and learning outcomes

• Promotion – with your consent, to share achievements and success stories

Who We Share Your Data With

We may need to share your personal data with:

• Partner institutions

• Student sponsors and funding bodies

• Professional and accreditation bodies

• External examiners

• Government departments (e.g., UK Visas and Immigration)

• Local authorities

• IT service providers

• Law enforcement and regulatory bodies

• Work placement providers

• Emergency services when required

• Home institutions (for exchange or joint programmes)

• Higher Education Statistics Agency (HESA)

We only share your data when necessary and for legitimate purposes.

Information Sources

We collect personal data directly from you during application and registration, and from third parties such as UCAS, funding bodies, sponsors, and partner institutions.

Data Transfers Outside the EEA

In some cases, we may share your data with organizations outside the European Economic Area, such as partner universities or study abroad programs. When this happens, we apply safeguards to protect your data.

Data Security

TCB Education and our partner universities apply strict technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

Graduation and Alumni Data

• Graduation ceremonies are public events and may be recorded or streamed online.

• Names of all graduates may be published in programs, newspapers, or online lists.

• Alumni information is retained to maintain lifelong academic records and connections.

CCTV and Campus Safety

Partner universities may use CCTV systems for safety, security, and crime prevention.

Data Retention

Your data is kept only as long as necessary. Some records, such as your academic achievements, are kept indefinitely.

Your Rights

As a student, you have the right to:

• Withdraw consent (where consent is the legal basis for processing)

• Access your personal data free of charge

• Rectify inaccurate data

• Request erasure of your data

• Restrict processing under certain conditions

• Receive a portable copy of your data

• Object to specific processing activities

Complaints

If you have concerns about how your data is handled, contact our Data Protection Officer:

Data Protection Officer
Email: [Insert TCB Education DPO email]

If you are not satisfied with our response, you may file a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk/

Do you want me to condense this into a shorter, website-friendly version (about 400–500 words) for your Privacy Policy page, or keep the full legal detail like this?