Privacy Policy
How we collect, use, and protect your personal information — explained clearly and in plain English.
Contents
Wilor Education is committed to protecting your personal information and being completely transparent about how we use it. This policy explains what data we collect, why we collect it, and how we keep it safe — written in plain English, not legal jargon.
Who We Are
Wilor Education Ltd (trading as Wilor Education) is a UK-based education consultancy registered in England and Wales under Company Number 10611836. Our registered office is in Romford, East London, United Kingdom.
We are the data controller for personal information you provide to us. This means we decide how and why your data is processed. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: Wilor Education Ltd · Company No. 10611836
Contact: info@wiloreducation.co.uk · 020 7018 1970
Information We Collect
Information you give us directly
- Identity data: Full name, date of birth, nationality
- Contact data: Email address, phone number, postal address, WhatsApp number
- Residency and immigration status: Settled Status, ILR, Refugee Status, or British citizenship — needed to assess your eligibility for Student Finance England
- Educational history: Previous qualifications, institutions attended, years of study
- Employment history: Work experience and current occupation — relevant for work experience entry routes
- Financial information: Income or household details shared during Student Finance England application support
- Communications: Records of calls, emails, WhatsApp messages, and form submissions
Information collected automatically
- Technical data: IP address, browser type, device type, pages visited
- Usage data: How you navigate and interact with our website
- Cookie data: See Section 10 for full details
- Meta Pixel data: Website activity data shared with Meta for advertising measurement and targeting
Information from third parties
- Information shared by partner universities in connection with your application or enrolment
- Publicly available information from LinkedIn or other professional platforms where relevant
How We Use Your Information
| Purpose | Data Used |
|---|---|
| Assessing your eligibility for Student Finance England and funded degree programmes | Identity, residency status, nationality |
| Matching you to suitable courses and universities | Educational history, employment history, goals and preferences |
| Preparing and submitting your university application and personal statement | Identity, educational history, employment history |
| Supporting your Student Finance England application | Identity, financial information, residency status |
| Communicating with you about your application and progress | Contact data, communications history |
| Referring you to accommodation partners such as Casita | Name, contact details, university destination |
| Sharing your details with partner universities for enrolment purposes | Identity, educational history, contact data |
| Improving our website and services | Technical data, usage data, cookie data |
| Running targeted advertising on Meta platforms | Technical data, Meta Pixel data |
| Complying with legal and regulatory obligations | All categories as required |
Legal Basis for Processing
Under UK GDPR, we must have a valid legal basis for processing your personal data. We rely on the following bases:
- Contract: Processing necessary to provide you with our consultancy services following your request
- Legitimate interests: Communicating with you, improving our services, and running advertising campaigns — where not overridden by your rights
- Legal obligation: Where we are required to process data to comply with UK law
- Consent: For marketing communications by email or SMS — you can withdraw consent at any time
- Vital interests: In exceptional circumstances involving your safety or the safety of others
Special Category Data
Your immigration and residency status — such as Refugee Status, Settled Status, or ILR — is classified as sensitive personal data under UK GDPR. We handle this information with the highest level of care and security.
We collect and process immigration and residency status solely to determine your eligibility for Student Finance England and to match you to appropriate university programmes. We do not share this information with third parties except where strictly necessary for your application, and only with your knowledge.
Our legal basis for processing this data is explicit consent, which you provide when you submit your details and engage our services. You may withdraw this consent at any time by contacting us.
Who We Share Your Data With
We share your data only where necessary and always in accordance with this policy. We do not sell your personal data — ever.
- Partner universities: Application details shared for assessment and enrolment purposes
- Student Finance England: Information submitted as part of your funding application
- Accommodation partners (Casita): Basic contact and destination details where you request accommodation support
- IT and software providers: Reputable platforms used for CRM, email, and communication — bound by strict data processing agreements
- Meta Platforms: Website activity data shared via Meta Pixel for advertising measurement
- Legal and regulatory authorities: Where required by law or court order
International Transfers
Wilor Education operates offices in the UK and Bangladesh. Where your data is accessed or processed from our Bangladesh office, we ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR requirements.
Some third-party service providers may process data outside the UK. Where this occurs, we ensure adequate protections are in place, including reliance on the UK's International Data Transfer Agreements (IDTAs) or equivalent mechanisms.
How Long We Keep Your Data
| Data Type | Retention Period |
|---|---|
| Student application and enrolment records | 7 years from date of enrolment or last service interaction |
| Consultation records (where no enrolment results) | 2 years from last contact |
| Marketing communications preferences | Until consent withdrawn or 3 years from last interaction |
| Financial information shared for SFE applications | 6 years (in line with HMRC guidance) |
| Website analytics and cookie data | Up to 26 months |
| Complaints records | 6 years from resolution |
After these periods, your data is securely deleted or anonymised. You may request early deletion — see your rights below.
Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
Right of Access
Request a copy of the personal data we hold about you (a Subject Access Request).
Right to Rectification
Ask us to correct any inaccurate or incomplete personal data we hold.
Right to Erasure
Ask us to delete your data where there is no compelling reason for us to keep it.
Right to Restrict Processing
Ask us to limit how we use your data while a concern is being investigated.
Right to Portability
Receive your data in a structured, machine-readable format to transfer elsewhere.
Right to Object
Object to processing based on legitimate interests, including for direct marketing.
Right to Withdraw Consent
Where we rely on consent, withdraw it at any time without affecting prior processing.
Right to Complain
Lodge a complaint with the ICO if you believe we have not handled your data lawfully.
To exercise any of these rights, contact us at info@wiloreducation.co.uk. We will respond within one calendar month.
Information Commissioner's Office (ICO): If you are not satisfied with our response, you have the right to complain to the ICO at ico.org.uk or by calling 0303 123 1113.
Cookies
Our website uses cookies — small text files stored on your device — to improve your experience and help us understand how our site is used.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly necessary | Essential for the website to function correctly | Session |
| Analytics | Help us understand how visitors use our site (e.g. Google Analytics) | Up to 26 months |
| Marketing | Track advertising effectiveness via Meta Pixel and similar tools | Up to 90 days |
| Preference | Remember your settings and choices | Up to 12 months |
You can control cookies through your browser settings. Disabling certain cookies may affect website functionality. Where required by law, we will request your consent before placing non-essential cookies.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or best practice. When we make material changes, we will update the “last updated” date at the top of this page and, where appropriate, notify you by email.
We encourage you to review this policy periodically. Continued use of our services after any changes constitutes acceptance of the updated policy.