Privacy Policy
Last Updated: May 2026
1. Introduction
TAWITHSA LTD ("we", "us", "our") is committed to protecting the privacy and personal data of our clients, website visitors, and all individuals whose data we process. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
TAWITHSA LTD is the data controller responsible for your personal data. We are registered in England and Wales and operate from 77 Fulham Palace Road, W6 8JA, Hammersmith & Fulham, London.
2. What Personal Data We Collect
In the course of providing our education consultancy services, we may collect and process the following categories of personal data:
Identity Data: Full name, date of birth, gender, nationality, passport number, and photographs.
Contact Data: Email address, telephone number, postal address, and emergency contact details.
Education Data: Academic qualifications, transcripts, certificates, English language test scores (e.g. IELTS, TOEFL), previous institution details, and student reference numbers.
Financial Data: Bank details (for refund purposes only), payment records, and financial sponsorship information.
Immigration Data: Visa status, CAS numbers, immigration history, and related documentation.
Technical Data: IP address, browser type, operating system, and website usage data collected via cookies.
Communication Data: Records of correspondence, emails, and notes from consultations.
3. How We Collect Your Data
We collect personal data through the following means:
Directly from you when you complete our application forms, enquiry forms, or registration forms; when you contact us by email, telephone, or in person; when you attend consultations or events; and when you provide documents for university applications.
From third parties such as partner universities and colleges, UCAS, UK Visas and Immigration (UKVI), referees, and sponsors.
Automatically through our website via cookies and similar tracking technologies.
4. Lawful Basis for Processing
We process your personal data on the following lawful bases under Article 6 of the UK GDPR:
Contract: Processing is necessary for the performance of a contract with you, specifically our education consultancy services agreement.
Consent: Where you have given clear consent for us to process your personal data for specific purposes, such as marketing communications.
Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, fraud prevention, and internal record keeping.
Legal Obligation: Processing is necessary to comply with a legal obligation, such as tax, accounting, or regulatory requirements.
5. How We Use Your Data
We use your personal data to provide education consultancy and university placement services; process and submit university applications on your behalf; communicate with you regarding your application status and our services; share relevant information with partner universities, colleges, and other educational institutions; comply with legal and regulatory obligations; improve our website and services; and send marketing communications where you have consented to receive them.
6. Data Sharing
We may share your personal data with the following categories of recipients:
Partner universities and colleges in the United Kingdom for the purposes of processing your application; UK Visas and Immigration (UKVI) and related government bodies where required; professional advisers including lawyers, accountants, and auditors; IT service providers and website hosting companies; and payment processing providers.
We will never sell your personal data to third parties. Any data sharing is carried out under appropriate contractual safeguards and in compliance with the UK GDPR.
7. International Transfers
Where we transfer personal data outside the United Kingdom, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office (ICO), or transfers to countries that have received an adequacy decision.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Our standard retention periods are as follows:
lient records and application data: 6 years from the end of our service relationship.
Financial records: 7 years as required by HMRC.
Marketing consent records: Until consent is withdrawn.
Website analytics data: 26 months.
After the retention period, personal data is securely deleted or anonymised.
9. Your Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
Right of Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
Right to Erasure: You have the right to request that we delete your personal data in certain circumstances.
Right to Restrict Processing: You have the right to request that we limit how we use your data.
Right to Data Portability: You have the right to request a transfer of your data to another organisation in a structured, commonly used format.
Right to Object: You have the right to object to the processing of your data, including for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
To exercise any of these rights, please contact us at info@tawithsa.com. We will respond to your request within one month.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data storage, secure access controls, regular security assessments, and staff training on data protection.
11. Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: www.ico.org.uk | Telephone: 0303 123 1113
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on our website with the updated date. We encourage you to review this policy periodically.
TAWITHSA LTD
Company Address: 77 Fulham Palace Road, W6 8JA, Hammersmith & Fulham, London
Email: info@tawithsa.com
Website: www.tawithsa.com