Data Protection Policy

The Global College Group, including CRAS and CLAPS

1. Introduction

This Data Protection Policy explains how The Global College Group (“TGCG”), including the College of Research and Applied Studies (“CRAS”) and the Centre for Leadership and Professional Studies (“CLAPS”), collects, uses, stores, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our websites or submitting any form, you agree to the processing of your personal data as described in this policy.

2. Data Controller

The Global College Group is the Data Controller for all personal data collected through our websites and associated systems.

Data Protection Officer (DPO):
Email: dpo@globalcollegegroup.com

3. Personal Data We Collect

We may collect the following categories of personal data:

• Name, email address, telephone number
• Programme or course interests
• Enquiry details
• Application information and uploaded documents
• Technical data, including IP address, browser type, and device information
• Usage data, including pages visited, time spent, and referring links

All operational forms and submissions are processed securely through our CRM and automation system.

4. How We Use Your Personal Data

We process personal data for the following purposes:

• Responding to enquiries
• Processing applications and registrations
• Providing information about programmes, services, and events
• Managing student, applicant, or client records
• Compliance with regulatory, safeguarding, and quality assurance requirements
• Internal reporting and service improvement
• Security, fraud prevention, and system monitoring

We do not sell or trade personal data.

5. Legal Basis for Processing

We rely on one or more of the following lawful bases:

• Consent: when you submit a form or request information
• Contract: when processing is necessary for an application or enrolment
• Legal obligation: safeguarding, regulatory reporting, and compliance
• Legitimate interests: improving services, responding to enquiries, and ensuring operational efficiency

6. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected.

Unless a longer period is required by law, regulation, or safeguarding obligations:

All personal data submitted through any of our forms is retained for a maximum of 12 months or 1 year, whichever comes first. After this period, the data is securely deleted in accordance with our retention schedule.

This retention rule applies to all enquiry forms, application forms, registration forms, and any other submissions made through our websites or CRM.

7. Data Sharing

We may share personal data with:

• Regulatory bodies where legally required
• Awarding organisations or education partners where relevant
• Service providers who support our operations, such as secure CRM and email systems

All third-party processors operate under GDPR-compliant agreements.

We do not share personal data with advertisers or unrelated third parties.

8. International Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including:

• Adequacy decisions
• Standard Contractual Clauses
• Secure, compliant cloud infrastructure

9. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion, where applicable
• Restrict or object to processing
• Withdraw consent
• Request data portability

Requests must be submitted in writing to dpo@globalcollegegroup.com.

10. Security Measures

We implement appropriate technical and organisational measures to protect personal data, including:

• Encrypted data transmission
• Secure hosting and access controls
• Regular system monitoring
• Automated backups
• Staff confidentiality obligations
• Secure deletion procedures

11. Cookies

Our websites use cookies to improve functionality and user experience.

You may disable cookies in your browser settings, but some features may not function correctly.

12. External Links

Our websites may contain links to external sites.

We are not responsible for the content, security, or privacy practices of external websites.

13. Changes to This Policy

We may update this Data Protection Policy at any time.

Continued use of our websites constitutes acceptance of the updated policy.

14. Contact

For any data protection enquiries, please contact:

Data Protection Officer
Email: dpo@globalcollegegroup.com