Back to UniSeek
For institutions · Legal & trust

Privacy Policy

Understand what information an institutional engagement involves, why it is needed, and the choices available to your university, staff and applicants.

Last updated: Universities, colleges & authorised representatives

At a glance

A quick guide. The full sections below explain the details.

  • Enquiry details are used to respond and discuss institutional services.
  • Student records need an agreed purpose and appropriate permissions.
  • You can object to direct marketing and request access or deletion.

Who this policy covers and who is responsible

This policy covers the UniSeek institutional website, demo and partnership enquiries, and personal information handled in institutional engagements. It applies to university representatives, staff and other people whose information is provided for those purposes. Contact [email protected] with privacy questions.

For its own business enquiries and relationship management, UniSeek determines the purpose and means of processing. The legal entity responsible for a contracted engagement is identified in its service agreement or engagement notice. For student records processed solely on a university’s instructions, the university determines the purpose and UniSeek acts under the agreed data processing terms. Any independent or joint use must be explained in a separate notice.

A university’s own admissions privacy notice and the separate notices of linked services also apply to their respective activities. A connection with StudyPick, AdmissionPortal or another service does not by itself authorise sharing personal information across those services.

Information we handle and where it comes from

The information involved depends on what you request and which services your institution actually uses:

  • Enquiries: your name, institution, work email, phone number, country, role and the message or partnership interests you submit through a form, email or meeting.
  • Business relationships: authorised contacts, correspondence, agreed service requirements, billing contacts and transaction records relevant to the engagement.
  • Website operation: hosting and security systems may process IP addresses, browser or device details, request timestamps and error information when serving and protecting the website.
  • Contracted recruitment services: applicant contact details, study interests, application progress or documents only where the agreed service requires them and an authorised source supplies them lawfully.
  • Sources include you, authorised institutional staff, applicants who request contact, and service providers acting within the relevant engagement. The collection notice for a particular service must identify additional sources or categories before they are used.

Sharing and access to information

Access is limited to authorised people who need the information for the stated purpose. Depending on the service, recipients may include hosting and IT support providers, business email and meeting providers, contracted CRM or communication providers, and professional advisers. Providers must handle information within the applicable instructions and confidentiality obligations.

Applicant information may be shared with the institution the applicant has selected, or an authorised recruitment partner, only for the disclosed purpose and with a lawful basis. An institutional partnership does not give unrestricted access to other institutions’ applicant records.

We do not sell personal information or make institutional enquiries available for unrelated third-party marketing. Disclosure may also be necessary to meet a legal requirement, protect legal rights, or respond to a lawful request. Any business transfer involving personal information requires appropriate safeguards and notice where required.

Student records and institutional responsibilities

Before sending applicant records, an institution must establish its lawful authority, explain the proposed use to the affected people, and use the transfer process agreed with UniSeek. Sensitive records require additional protections and an appropriate legal basis. A general demo form is not a student-record submission channel.

For processing on an institution’s behalf, the data processing agreement should identify the data categories, instructions, approved providers, security measures, rights-request assistance, retention and deletion arrangements. A request about a university-controlled admissions file may need to be handled by that university, with UniSeek assisting as required.

Cookies, analytics and marketing choices

The institutional website does not currently implement advertising trackers or analytics cookies. Hosting infrastructure and external websites or embedded services, where used, may have their own technical data practices. Browser settings can manage cookies; restricting essential cookies on a connected service may affect its functionality.

If optional analytics, advertising cookies or similar tracking are introduced, their purpose and providers must be explained and any consent required by applicable law obtained before activation. This policy is not a substitute for that choice.

You can object to direct marketing at any time by contacting [email protected] or using an unsubscribe option where provided. This does not prevent necessary messages about an active service, billing or security. Requesting a demo does not automatically subscribe you to unrelated promotional messages.

How long information is kept

Enquiry information is kept only as long as needed to handle the enquiry, reasonable related follow-up and any resulting engagement. Relationship and billing records are retained for the engagement and for applicable accounting, legal or dispute-resolution requirements. Security information is retained for the period needed to investigate incidents and protect the service.

Student-record retention and deletion follow the institution’s documented instructions and the applicable agreement, subject to legal obligations. The purpose, sensitivity, applicable law, outstanding disputes and the feasibility of deletion from backups determine retention where a fixed period is not specified. Contact us for the retention criteria applicable to your information.

Information that is no longer needed should be deleted or anonymised. A limited suppression record may be kept to honour a marketing objection without adding you back to a mailing list.

Security and international processing

Information must be protected with technical and organisational measures appropriate to its sensitivity and the agreed service, including restricted access and secure handling. No internet transmission or storage method is completely secure. Report suspected unauthorised access to [email protected] without sending confidential records in the initial report.

Service providers or institutional recipients may be located in other countries. Before a transfer, the responsible party must assess applicable restrictions and establish the required safeguards or another lawful transfer mechanism. The relevant engagement notice or data processing agreement should identify processing locations and safeguards; contact us for details applicable to your service.

This policy does not assert a particular hosting location, certification, encryption specification or universal compliance status. Service-specific commitments must be confirmed in the relevant agreement.

Your rights and how to make a request

Depending on the applicable law and the processing involved, you may request access to your personal information, correction, deletion, a copy in a portable format, or restriction of processing. You may object to processing based on legitimate interests and, separately, object to direct marketing at any time. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Email [email protected] with the subject “Privacy request”, describe the request and identify the institution or service involved. We may ask for proportionate information to verify your identity or authority, and will respond within the period required by applicable law. Rights may be subject to lawful exceptions; if a request cannot be fulfilled, we will explain why.

You may also complain to the relevant data protection authority where applicable. Contacting UniSeek first does not remove that right. If a university controls the record, you may contact its admissions or privacy team directly.

Analytics and automated tools

Website calculators and readiness questionnaires generate illustrative outputs from the inputs you select. They do not make an admissions decision, determine eligibility or approve a visa.

Any contracted profiling, AI-assisted verification or applicant-scoring service needs a separate explanation of its purpose, input data, limitations, relevant consequences and available human review before use. Institutions remain responsible for lawful decision-making and must not treat a model output as conclusive evidence about a person.

Children, updates and contact

This institutional website is intended for authorised professional representatives. It is not designed to collect children’s information through general enquiry forms. If a contracted admissions service involves minors, the institution and UniSeek must establish the notices, lawful basis, guardian permissions where required, and safeguards appropriate to that service before collecting those records.

We will update this page when the practices described change and display the revised date. Where required, material changes will also be communicated directly or consent sought for a new purpose. For privacy concerns, corrections or details of the entity responsible for your engagement, contact [email protected].