Legal
Privacy Policy
How Kensington English collects, uses and protects your personal data.
This Privacy Policy explains how Kensington English Limited ("we", "us") collects and uses personal data when you use our Site and Services. We comply with UK data protection law, including the UK GDPR and the Data Protection Act 2018.
1. Personal data we collect
- Identity & contact data: name, date of birth, email, phone/WhatsApp
- Enrolment data: programme/level, attendance, assessments, certificates, webinar
- Payment data: payment method, amounts, refunds (card data handled by our processors)
- Technical data: IP address, device, browser, analytics/cookie data
- Marketing preferences
- Partner/consultant data: where an Partner or consultant refers or manages your booking, we receive relevant contact/enrolment data from them
2. How we use personal data
- Provide Services and manage your enrolment (contract)
- Customer support, complaints, and safety (contract; legitimate interests)
- Identity verification, fraud prevention, legal compliance (legal obligation; legitimate interests)
- Service analytics and improvement (legitimate interests)
- Marketing communications (consent where required; you can withdraw any time)
- Recordings of live sessions for quality/learning (legitimate interests; you may switch off video or use chat where feasible)
3. Sharing your data
We share data with trusted providers under contract, such as:
- Tutors and academic partners (delivery of classes, assessments)
- Webinar/meeting platforms (e.g. video-conferencing tools)
- Payment processors (payments, refunds)
- Cloud hosting & IT support (Site and learning systems)
- Partners/consultants (if you enrolled via them)
We may disclose data to authorities or advisers where required by law or to establish/exercise legal claims.
4. International transfers
If data is transferred outside the UK, we use appropriate safeguards (e.g. UK IDTA/Addendum, adequacy regulations, or equivalent mechanisms).
5. Retention
We keep personal data only as long as necessary: typically 6 years for transactional/contract records and 2 years after your last activity for learning records, unless a longer period is required by law or to resolve disputes.
6. Your rights
You have rights to access, rectify, erase, restrict, object, and data portability, and to withdraw consent where processing is based on consent. You may complain to the ICO. To exercise your rights, contact admin@kensingtonenglish.co.uk.
7. Cookies & similar technologies
We use essential cookies for security and functionality and (with consent where required) analytics cookies to improve the Site. You can control cookies via your browser or our cookie banner/settings.
8. Children
Most of our Services are intended for users aged 16 and over. Our Global Explorers programme is offered to younger learners (typically ages 10–17). Where a student is under 18, we require a parent or legal carer to complete enrolment and provide consent, and we process the child's data on that basis.
We take proportionate steps to align with the ICO's Age Appropriate Design Code (Children's Code): we collect only the data we need, enrolled children use a student portal that carries no advertising or analytics tracking, parental consent is required, recordings are kept only briefly, and we publish a plain-language privacy notice for children and young people. See also our Safeguarding page. If you believe a child's data has been provided to us without appropriate parental consent, contact admin@kensingtonenglish.co.uk and we will address it.
9. Security
We implement appropriate technical and organisational measures to protect personal data. No system is completely secure; please keep your login details confidential.
10. Updates to this Policy
We may update this Policy. The latest version is posted on the Site with the "Last updated" date. Contact us: admin@kensingtonenglish.co.uk.