Privacy Notice – Wandsworth Consultants

Wandsworth Consultants Privacy Notice

Registered Entity: Associate Management Systems Ltd.

Wandsworth Consultants is committed to protecting your personal information and ensuring transparency in how we collect, use, and manage your data. We act as the data controller for the personal information we collect. This privacy notice explains what personal data we collect, why we collect it, and how we use and protect it.

This notice outlines:

  • What personal information we collect and why
  • The lawful basis for processing your data
  • Your data protection rights
  • Where we obtain your personal information
  • How long we retain personal information
  • Who we share your information with
  • Transfers of personal information outside the UK
  • How you can make a complaint

Contact Details

What Information We Collect, Use and Why

Wandsworth Consultants collects personal information in order to provide education consultancy services, university application support, and student welfare assistance.

The information we may collect includes:

  • Names and contact details of students
  • Names and contact details of parents, guardians, or carers
  • Gender 
  • Pronoun preferences
  • Date of birth
  • Emergency contact information
  • Welfare information (including relevant family or personal circumstances)
  • Details of criminal convictions where required by institutions
  • Photographs (for identification or administrative purposes)
This information helps us provide accurate guidance and support throughout the course selection, application, and enrolment process.

Lawful Bases and Data Protection Rights

Under UK GDPR, organisations must have a lawful basis for processing personal data. Wandsworth Consultants primarily relies on consent as the lawful basis for collecting and processing personal information.

By providing your information and engaging our services, you consent to the use of your data for the purposes outlined in this notice.

Under data protection law, you have the following rights:

  • Right of Access – Request copies of your personal data
  • Right to Rectification – Request corrections to inaccurate or incomplete information
  • Right to Erasure – Request deletion of your personal data
  • Right to Restrict Processing – Request limits on how your data is used
  • Right to Object – Object to certain types of processing
  • Right to Data Portability – Request transfer of your data to another organisation
  • Right to Withdraw Consent – Withdraw consent at any time

Requests regarding your personal data will be responded to within one month, as required under UK data protection law.

Where We Get Personal Information From

Personal data may be collected from:

  • Information provided directly by you
  • Publicly available sources where appropriate

How Long We Keep Information

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal or regulatory requirements.

Typical retention periods include:

Data Category Purpose Retention Period
Account Information Managing client accounts and communication Retained while account remains active
Customer Relationship Data (CRM) Managing enquiries and student support Up to 6 years after last interaction
Payment & Transaction Data Accounting and financial compliance 7 years
Marketing Preferences Communication and newsletters Until consent is withdrawn
Website Analytics Data Website performance and security Up to 26 months
Recruitment Data Employment application evaluation Up to 12 months
Legal or Contractual Records Legal compliance Contract duration + 6 years

All personal data scheduled for deletion is securely removed or anonymised.

Who We Share Information With

Wandsworth Consultants may share personal information with trusted service providers who support our operations.

Data Processor: Zoho CRM

We use Zoho CRM, a customer relationship management system provided by Zoho Corporation, to manage student enquiries, maintain communication records, and organise application processes.

Zoho processes data on our behalf and complies with relevant data protection regulations.

Personal data may also be shared with:

  • Universities or educational institutions during applications
  • Organisations we are legally required to share information with

Sharing Information Outside the UK

In some cases, personal data may be transferred outside the UK. When this occurs, we ensure that appropriate safeguards are in place in compliance with UK GDPR.

Example:

Organisation: Zoho Corporation
Service: CRM and data storage
Location: United States
Safeguard: EU Standard Contractual Clauses (SCCs) with UK Addendum

How to Complain

If you have concerns about how we handle your personal data, please contact us using the details above.

If your concern is not resolved, you may contact the Information Commissioner’s Office (ICO).

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline : 0303 123 1113
Website: www.ico.org.uk