Privacy Policy

1. Scope of Personal Data Collection

We collect and securely process personal information supplied during your intake, pre-assessment, and contact procedures. This includes:

• Identifiers: Your full legal name, active WhatsApp mobile number, email address, date of birth, and home address.
• Academic Credentials: Transcripts, overall GPA metrics, high school or degree certificates, and English language test scores.
• Technical Telemetry: IP addresses, browser agents, and geo-location metrics recorded during your platform visit.

2. Legal Basis for Processing Data

Under GDPR Article 6, we process your personal data under the following legal bases:

• Pre-Contractual & Contractual Performance (Art 6(1)(b)): To evaluate admission eligibility, file university applications, and secure CAS or residence permits at your request.
• Consent (Art 6(1)(a)): For analytical tracking (Google Analytics), conversion performance (Meta Pixel), and scheduling reminders.
• Legitimate Interests (Art 6(1)(f)): For network security, logging user frustration metrics to optimize site performance, and responding to inquiries.

3. International Data Transfers & Third-Party Processors

Because we assist in securing visas and university seats abroad, personal data is transferred internationally outside your home country:

• Destination Countries: Your data is securely transferred to educational institutions, application hubs, and immigration desks in the United Kingdom, Finland, Germany, Spain, and Austria.
• Safeguards: We implement Standard Contractual Clauses (SCCs) and only transfer data to countries recognized as having adequate data protection safeguards (such as the UK adequacy decision).
• Processor Services: We use Microsoft Forms (Office 365 cloud), Cal.com, and Vercel hosting, all of which maintain compliant GDPR data processing agreements (DPAs).

4. Data Retention Policy

We do not retain personal information longer than necessary for the purpose it was collected:

• Pre-assessment Data: Deleted or archived after 1 year if you do not proceed with our consulting contract.
• Contractual Client Data: Retained for the duration of our advisory contract and up to 7 years thereafter to comply with corporate financial and legal record-keeping requirements.

5. Online Tracking & Cookies Consent

We use digital cookies to optimize performance and measure conversion engagement. Tracking is blocked by default for EU/EEA/UK visitors until they explicitly opt-in:

• Google Analytics: Tracks anonymized traffic metrics to optimize site loading speeds and page flows.
• Meta Pixel: Used to measure campaign performance and display relevant academic opportunities.

6. Data Subject Rights (GDPR)

If you reside in the EU, EEA, or UK, you hold the following rights regarding your personal data:

• Right of Access & Portability: Request a copy of your personal data in a structured, readable format.
• Right to Rectification: Request correction of inaccurate or incomplete personal information.
• Right to Erasure (Right to be Forgotten): Request complete deletion of your personal files, subject to statutory retention limits, by emailing admin@westwayedu.com.
• Right to Object & Restrict: Object to processing or request restriction of data processing.
• Right to Withdraw Consent: Withdraw your cookie tracking consent at any time using the text link in our banner.

7. Supervisory Authority Complaints

If you believe our processing of your personal data violates the General Data Protection Regulation, you have the right to lodge a complaint with a supervisory authority in your member state or country of residence (e.g., the Information Commissioner's Office (ICO) in the UK).