Privacy Statement

Oldham GTA Ltd (“we”, “us”, “our”), trading as Eddoo, is committed to protecting your personal data and being transparent about how we use it. This Privacy Policy explains what information we collect, how we use it, our lawful bases for processing, how long we keep data, and your rights under the UK GDPR.

1. Information We Collect

1. Personal Information

We may collect name and contact details, date of birth, academic and employment history, application information, identification documents, communication records, any information you provide through forms, calls, WhatsApp, email, or our website.

2. Automatically Collected Information

We may collect IP address, device and browser information, website usage data, cookie data (see Section 8)

2. How We Use Your Information & Lawful Basis

We use your information for the following purposes:

Service delivery
We process enquiries, applications, and provide student support.
Lawful basis: Contract.

Communication
We send updates, appointment reminders, and service information.
Lawful basis: Legitimate interests or consent (for marketing).

Identity verification
We use your information to ensure accuracy and prevent fraud.
Lawful basis: Legal obligation and/or legitimate interests.

Improving services
We analyse data to improve and optimise our services.
Lawful basis: Legitimate interests.

Legal compliance
We use your information to meet regulatory or reporting obligations.
Lawful basis: Legal obligation.

3. Data Sharing

We do not sell or trade personal data.

We may share data with the following categories of recipients:

• Education partners (universities/colleges)

• CRM and communication platforms (e.g., email, SMS, WhatsApp providers)

• Cloud hosting and IT service providers

• Professional advisers (legal, compliance, auditors)

• Regulators or authorities where legally required

All thirdparty processors are bound by contracts requiring them to protect your data.

4. International Data Transfers

Some of our service providers may store data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as:

• UK Adequacy Regulations

• International Data Transfer Agreement (IDTA)

• Standard Contractual Clauses (SCCs)

You may request details of current safeguards by contacting us.

5. Data Retention

We keep personal data only for as long as necessary for the purposes described.

Typical retention periods:

• Application records: up to 6 years

• General enquiries: up to 12 months

• Marketing preferences: until you withdraw consent

• Legal/financial records: up to 7 years

Where exact periods cannot be specified, we apply clear retention criteria based on necessity and legal requirements.

6. Your Rights

You have the right to:

• Access your data

• Correct inaccurate information

• Request deletion

• Restrict or object to processing

• Withdraw consent (where used)

• Data portability

How to exercise your rights

Email: [email protected] We may ask for proof of identity. We respond within one month.

7. Cookies

Our website uses cookies to improve your experience.

Types of cookies we use

• Essential cookies – required for website functionality

• Analytics cookies – help us understand website usage

• Preference cookies – remember your settings

Cookie retention

Cookies are stored for varying periods depending on type (session or persistent).

Managing cookies

You can manage or disable cookies through your browser settings or via our cookie banner.

8. Data Security

We use technical and organisational measures to protect your data, including:

• Access controls

• Encryption

• Secure storage

• Staff training

However, no system is completely secure.

9. DPIAs & Accountability

We carry out Data Protection Impact Assessments (DPIAs) where processing may pose high risks and maintain internal records of processing activities in line with UK GDPR requirements.

10. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on our website.

11. Contact Details

Data Protection Lead Oldham GTA Ltd Archway House, Bridge Street, Oldham, OL1 1ED Email: [email protected] Phone: 0808 169 6558