ADMISSION GROUP

Privacy Policy

Effective Date: April 2026  |  Last Updated: April 2026

Compliant with UK GDPR and the Data Protection Act 2018

1. Who We Are

This website is operated by Admission Group LLC. We act as the data controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Company Name:  Admission Group LLC

Website:  https://agl.ac

Registered Office: 1309 Coffeen Ave STE 1200, Sheridan, WY 82801 

Privacy Contact Email:  info@agl.ac

Phone:  +44 20 3488 5707

Data Protection Officer to oversee compliance with this Privacy Policy. If you have any questions about how we handle your personal data, please contact us at info@agl.ac. We will respond within one calendar month.

2. What Personal Data We Collect

a. Identity Data

  •       Full name
  •       Date of birth
  •       Nationality
  •       Passport and identification documents 

b. Contact Data

  •       Email address
  •       Phone number
  •       Postal address

c. Academic & Application Data

  •       Educational background and qualifications
  •       CV and personal statements
  •       Copies of certificates and right-to-study documentation
  •       Course information and study plans

d. Technical Data

  •       IP address
  •       Browser type and version
  •       Device information
  •       Website usage and navigation data

e. Communication Data

  •       Messages submitted via website forms
  •       WhatsApp and live chat communication
  •       Email correspondence

f. Special Category Data (Sensitive Personal Data)

In limited circumstances, we may collect sensitive personal data. This data requires a higher level of protection under UK GDPR Article 9. We only process special category data where a specific Article 9 condition is met, as set out in the processing table in Section 3.

  •       Information about race or ethnicity — used solely for anonymized equal opportunities monitoring
  •       Health information — used where we have a duty of care or legal obligation

We will always obtain your explicit written consent where this is required, or rely on another Article 9 condition as described in Section 3.

3. How and Why We Use Your Data

We only process your personal data where the law allows. The table below maps each processing purpose to the lawful basis we rely on under UK GDPR Article 6, and the Article 9 condition where special category data is involved.

Purpose of Processing Personal Data Used Lawful Basis (UK GDPR Art. 6) Art. 9 Condition (Special Category)
Responding to enquiries Name, email, phone, message Art. 6(1)(b) Contract / Art. 6(1)(a) Consent N/A
Processing university applications Identity, academic, passport data Art. 6(1)(b) Contract N/A
Providing consultancy & visa guidance All relevant data Art. 6(1)(b) Contract N/A
Legal & immigration compliance (UKVI) Identity & documents Art. 6(1)(c) Legal Obligation N/A
Equal opportunities monitoring Race, ethnicity (anonymized) Art. 6(1)(e) Public Interest Art. 9(2)(g) Legitimate Interest 
Health & wellbeing support Health information Art. 6(1)(c) Legal Obligation Art. 9(2)(b) Legal obligation
Fraud prevention & IT security Usage & identity data Art. 6(1)(f) Legitimate Interest N/A
Improving website performance Technical / analytics data Art. 6(1)(f) Legitimate Interest N/A
Marketing communications Contact data Art. 6(1)(a) Consent N/A

 

Legitimate Interests Assessment (LIA) Summary

Where we rely on Article 6(1)(f) (Legitimate Interest), we have assessed that:

  •       Our interest: maintaining IT security, preventing fraud, and improving our services
  •       Necessity: the processing is necessary to achieve these interests and cannot be achieved by less intrusive means
  •       Balancing test: the processing does not unduly prejudice your interests, rights, or freedoms — the data used is limited, not shared unnecessarily, and retained only as long as needed

You have the right to object to processing based on legitimate interests at any time. See Section 13 for how to do this.

4. How We Collect Your Data

We collect personal data through the following means:

  •       Website inquiry and application forms
  •       WhatsApp and live chat tools
  •       Email correspondence
  •       Direct consultation (online or in person)
  •       Cookies and analytics tools (see Section 6)
  •       Recruitment partners or agents acting on your behalf
  •       Former educational institutions (where applicable and with your knowledge)

5. Contact Forms

When you submit an inquiry form on our website, we collect your name, email address, phone number, and the content of your message.

  •       Purpose: To respond to your inquiry and provide education consultancy services
  •       Lawful basis: Consent / Legitimate Interest
  •       Retention: Up to 24 months from last contact
  •       Recipients: Internal admissions and counseling team only

6. Cookies and Analytics

We use cookies and similar tracking technologies on our website. Cookies are small text files placed on your device. We use them to keep our website working correctly, understand how visitors use our site, and deliver relevant marketing.

Your Cookie Consent

When you first visit our website, a cookie consent banner will appear. You can choose to accept all cookies, reject non-essential cookies, or customize your preferences. You can withdraw or change your consent at any time by clicking the ‘Cookie Preferences’ link in the footer of our website.

Cookie Table

The table below lists the cookies we use, their purpose, who provides them, and how long they last:

 

Cookie Name / Type Provider Purpose Expiry Lawful Basis
_ga Google Analytics Distinguishes unique users 2 years Consent
_gid Google Analytics Distinguishes users (24 hrs) 24 hours Consent
_gat Google Analytics Throttles the request rate 1 minute Consent
PHPSESSID / session cookie Admission Group Maintains your session on the website Session Strictly Necessary
cookieconsent_status Admission Group Stores your cookie consent preference 1 year Strictly Necessary
Meta Pixel (_fbp) Meta / Facebook Tracks conversions for advertising 3 months Consent

 

Google Analytics Opt-Out

You can opt out of Google Analytics tracking across all websites by installing the browser add-on available at: https://tools.google.com/dlpage/gaoptout

You can also control or disable cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

Our use of cookies is governed by the Privacy and Electronic Communications Regulations (PECR) and the UK GDPR.

7. Sharing Your Data

We share your data only where necessary and always with appropriate safeguards in place. We do not sell your personal data to any third party.

a. Universities and Colleges

We share application data with UK universities and colleges for the purpose of processing your application. This is done with your knowledge and consent, and only to institutions you are applying to.

b. UK Legal and Immigration Authorities

We share data with UK Visas and Immigration (UKVI) and other government bodies where we are legally required to do so — for example, to verify your immigration status or comply with visa regulations.

c. Technology and Service Providers

  •       Cloud hosting and IT infrastructure providers
  •       CRM (customer relationship management) systems
  •       Analytics providers (e.g., Google)
  •       Marketing platforms (e.g., Meta/Facebook)

All third-party service providers are contractually required to protect your personal data, process it only on our instructions, and comply with UK data protection law. We do not allow them to use your data for their own purposes.

d. Internal Staff

Only admissions officers, counselors, and relevant internal team members who have a business need to access your data will do so. All staff are subject to confidentiality obligations.

8. International Data Transfers

We do not routinely transfer or process personal data outside the United Kingdom. All personal data is stored and processed within the UK in accordance with the UK GDPR and the Data Protection Act 2018.

 

In limited circumstances where a third-party service provider (such as an analytics or cloud platform) processes data outside the UK, we ensure appropriate safeguards are in place. These safeguards may include:

  •       The UK Secretary of State’s adequacy regulations (where the destination country provides an adequate level of protection)
  •       UK International Data Transfer Agreements (IDTAs) or UK-approved Standard Contractual Clauses (UK SCCs)
  •       Transfer Risk Assessments (TRAs) where required

 

Please note: We do not rely on the EU-US Privacy Shield framework, which is no longer valid. Where transfers involve countries without UK adequacy status, we ensure one of the above approved safeguards is in place. You may request a copy of the relevant safeguards by contacting us at info@agl.ac.

9. Automated Decision-Making

We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects on you. All decisions relating to your application are made with appropriate human involvement.

We will notify you in writing if this position changes.

10. Data Security

We take the security of your personal data seriously. We have implemented the following technical and organizational measures to protect it:

  •       Encryption: personal data is encrypted in transit (TLS/HTTPS) and at rest, where applicable
  •       Access controls: only authorized staff with a business need may access your personal data
  •       Staff training: all staff handling personal data receive data protection training and are bound by confidentiality obligations
  •       Secure systems: we use reputable, security-certified cloud and CRM platforms
  •       Incident response: We have written procedures to detect, investigate, and respond to data security incidents

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner’s Office (ICO) without undue delay, and within 72 hours where required by law.

How to Exercise Your Rights

To exercise any of the above rights, please contact us at:

Email:  info@agl.ac

Phone:  +44 20 3488 5707

We will acknowledge your request and respond within one calendar month of receipt. We may request proof of identity before processing your request as an appropriate security measure. We will not charge a fee unless your request is manifestly unfounded or excessive.

13. Withdrawing Consent

Where we rely on your consent as the lawful basis for processing, you may withdraw that consent at any time by:

  •       Emailing us at info@agl.ac
  •       Clicking ‘Unsubscribe’ in any marketing email we send you
  •       Updating your cookie preferences via the cookie banner or footer link on our website

 

Withdrawing consent will not affect the lawfulness of any processing carried out before the withdrawal..

14. Third-Party Website Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read their privacy policies before submitting any personal data to them.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we make significant changes, we will:

  •       Update this page with a revised effective date
  •       Notify you directly by email where we are required to do so

We encourage you to review this policy periodically to stay informed about how we protect your data.

 

Admission Group LLC  |  agl.ac  |  info@agl.ac  |  +44 20 3488 5707