Privacy Policy
Last updated: 28 September 2025
This Privacy Policy explains how [Kensington English Ltd] (“we”, “us”) collects and uses personal data when you use our Site and Services. We comply with UK data protection law, including the UK GDPR and the Data Protection Act 2018.
Data controller: [Kensington English Ltd], [Registered address]. Contact: admin@kensingtonenglish.co.uk
Supervisory authority: Information Commissioner’s Office (ICO) — ico.org.uk.
1. Personal data we collect
- Identity & contact data: name, date of birth, email, phone/WhatsApp,
- Enrolment data: programme/level, attendance, assessments, certificates, webinar
- Payment data: payment method, amounts, refunds (card data handled by our processors).
- Technical data: IP address, device, browser, analytics/cookie data (see Cookies).
- Marketing preferences.
- ETO/consultant data: where an ETO or consultant refers or manages your booking, we receive relevant contact/enrolment data from them.
2. How we use personal data (purposes & lawful bases)
- Provide Services and manage your enrolment (contract).
- Customer support, complaints, and safety (contract; legitimate interests).
- Identity verification, fraud prevention, legal compliance (legal obligation; legitimate interests).
- Service analytics and improvement (legitimate interests).
- Marketing communications (consent where required; you can withdraw any time).
- Recordings of live sessions for quality/learning (legitimate interests; you may switch off video or use chat where feasible).
3. Sharing your data
We share data with trusted providers under contract, such as:
- Tutors and academic partners (delivery of classes, assessments).
- Webinar/meeting platforms (e.g., video-conferencing tools).
- Payment processors (payments, refunds).
- Cloud hosting & IT support (Site and learning systems).
- ETOs/consultants (if you enrolled via them).
We may disclose data to authorities or advisers where required by law or to establish/exercise legal claims.
4. International transfers
If data is transferred outside the UK, we use appropriate safeguards (e.g., UK IDTA/Addendum, adequacy regulations, or equivalent mechanisms).
5. Retention
We keep personal data only as long as necessary: typically 6 years for transactional/contract records and 2 years after your last activity for learning records, unless a longer period is required by law or to resolve disputes.
6. Your rights
You have rights to access, rectify, erase, restrict, object, and data portability, and to withdraw consent where processing is based on consent. You may complain to the ICO. To exercise rights, contact admin@kensingtonenglish.co.uk.
7. Cookies & similar technologies
We use essential cookies for security and functionality and (with consent where required) analytics cookies to improve the Site. You can control cookies via your browser or our cookie banner/settings.
8. Children
Our Services are for users 16+. We do not knowingly collect data from children under 16.
9. Security
We implement appropriate technical and organisational measures to protect personal data. No system is completely secure; please keep your login details confidential.
10. Updates to this Policy
We may update this Policy. The latest version is posted on the Site with the “Last updated” date. Contact us: admin@kensingtonenglish.co.uk
