Privacy Policy
Who We Are
Atava Limited is a UK-based education and training agency. We help international students find education and training institutions where they can further their education and develop their skills.
We provide UK university, college, language and boarding school advice and application services.
Atava Limited gathers and processes your personal information in accordance with this privacy notice and in compliance with the relevant data protection Regulation and Laws. This notice provides you with the necessary information regarding your rights and obligations and explains how, why and when we collect and process your personal data.
Atava Limited’s registered office is at 7 St John’s Road, Harrow, Middlesex, HA1 2EY and we are a company registered in England and Wales under company number 08693072. We are registered on the Information Commissioner's Office Register of Data Controllers under registration number ZA099838 and act as the data processor. Our designated Data Protection Officer/Appointed Person for the organisation is Angela Taylor, and we can be contacted at 124 City Road, London EC1 2NX.
What is GDPR
The General Data Protection Regulation (GDPR) is an EU-wide regulation that controls how companies and other organisations handle personal data. As data controller or processor, any organisation must keep a record of and monitor personal data processing activities. This includes personal data handled within the organisation, but also by third parties – so called data processors.
The Data Protection Act 2018 came into effect on 25th May 2018 in the EU and governs how organisations store and look after your personal data and information.
The UK left the EU on 31st December 2020 at which time the United Kingdom General Data Protection Regulation (UK-GDPR) came into force.
On June 28, 2021, the European Commission adopted an adequacy decision for the UK, which will ensure the continuation of the free flow of personal data between the two blocs for the next four years.
The UK data privacy law called UK-GDPR is identical to the EU version and is supported by the UK’s Data Protection Act of 2018.
Compliance with the UK-GDPR and EU’s GDPR is an obligation for any website, or organisation that processes personal data from inside the UK or the EU: meaning that the explicit consent of users must be obtained before any processing or transfer is allowed to take place.
Information That We Collect
Atava Limited processes your personal information to meet our legal, statutory, and contractual obligations and to provide you with our products and services. We will never collect any unnecessary personal data from you and do not process your information in any way, other than already specified in this notice. We are permitted to collect data for legitimate purposes. A legitimate purpose is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests.
The personal data that we will or may collect from you is: -
- Name
- Date of Birth
- Home Address – UK (if applicable)
- Home address – home country (if applicable)
- Personal Email
- Business Email
- Home Telephone Number
- Work Telephone Number
- Mobile Telephone Number
- WhatsApp or Viber Number
- Skype Address
- Passport Number
- Qualifications and Education (including copies of Certificates and Transcripts)
- Employment history
- References (Personal and Professional)
- Any other relevant documentation pertaining to applications for training and studying at educational institutions in the UK or overseas
- Information about how you use our website, communications and other systems
- Medical and dietary information (where necessary)
- Your responses to surveys, competitions, and promotions
We collect information in the following ways: -
We collect most of this personal information directly from you—in person, by telephone, text, or email, via application or enrolment documentation you may complete, and/or via our website. See list below:-
- Online forms – via a link, our website, or social media channels
- Email requests for personal data
Email requests for supporting documents needed to provide our services - Via mobile messaging applications such as WhatsApp and Viber
How We Use Your Personal Data (Legitimate and Legal Basis for Processing)
ATAVA LIMITED takes your privacy very seriously and will never disclose, share, or sell your data without your consent unless required to do so by law. We only retain your data for as long as necessary and for the purposes specified in this notice. Where you have consented to us providing you with promotional offers and marketing, you are free to withdraw consent, at any time. The purposes and reasons for processing your personal data are detailed below: -
We collect your personal data for the delivery of the services we provide. (Described above). We use this data to enable us to evaluate your suitability for relevant courses or training, and to fulfil the requirements of the receiving institution. We share this data with educational institutions or with training providers that fit your study criteria so that they can decide whether to offer you a place on their courses.
We collect and store your personal data under a category known as ‘Legitimate Interests’. In simple terms – we need your data because we have a legitimate interest in obtaining it so that we can provide the service you have requested from us.
Your Rights
You have the right to access any personal information that ATAVA LIMITED processes about you and to request information about: -
- What personal data we hold about you
- The purposes of the processing
- The categories of personal data concerned
- The recipients to whom the personal data has/will be disclosed
- How long we intend to store your personal data for
- If we did not collect the data directly from you, information about the source
If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to update/correct it as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.
You also have the right to request the erasure of your personal data or to restrict processing in accordance with data protection laws, as well as to object to any direct marketing from us and to be informed about any automated decision-making that we use.
If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the relevant request; this is to ensure that your data is protected and kept secure.
Sharing and Disclosing Your Personal Information
We do not share or disclose any of your personal information without your consent, other than for the purposes specified in this notice or where there is a legal requirement. ATAVA LIMITED uses third parties to provide the below services and business functions, however, all processors acting on our behalf only process your data in accordance with instructions from us and comply fully with this privacy notice, the data protection laws and any other appropriate confidentiality and security measures.
Safeguarding Measures
ATAVA LIMITED takes your privacy seriously and we take every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures in place, including: -
How Long We Keep Your Data
ATAVA LIMITED only ever retains personal information for as long as is necessary and we have strict review and retention policies in place to meet these obligations.
Where you have consented to us using your details for direct marketing and to notify you of relevant services, we will keep such data until you notify us otherwise and/or withdraw your consent.
Promotional Communications
We may use your personal information to send you updates (by email, text message, telephone, or post) about our services, including promotions for new educational courses, or new services.
We have a legitimate interest in processing your personal information for promotional purposes (see above ‘How we use your personal information’). This means we do not usually need your consent to send you relevant promotional communications. However, where consent is needed, we will ask for this consent separately and clearly.
We will always treat your personal information with the utmost respect and never sell or share it with other organisations for marketing purposes.
You have the right to opt out of receiving promotional communications at any time by:
- Contacting us at marketing@atava.co.uk
- Using the ‘unsubscribe’ link in emails or ‘STOP’ number in texts
GENERAL DATA PROTECTION REGULATIONS (GDPR)
Definitions:
“data controller” means a person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be processed
“data processor”, in relation to personal data, means any person (other than an employee of the data controller) who processes the data on behalf of the data controller.
“processing”, in relation to information or data means obtaining, recording, or holding the information or data or carrying out any operation or set of operations on the information or data, including—
- a) organisation, adaptation or alteration of the information or data,
- b) retrieval, consultation or use of the information or data,
- c) disclosure of the information or data by transmission, dissemination or otherwise making available, or
- d) alignment, combination, blocking, erasure or destruction of the information or data
Cookies
A cookie is a small piece of information sent by a web server to a web browser, which enables the server to collect information from the browser. This helps us tailor the site to your needs as well as improve the website in the future. Find out more about cookies on www.allaboutcookies.org.
You can delete/control cookies via your browser settings by following these instructions, however if you choose to block cookies then your browsing experience may be affected. This includes:
- Live Chat functionality (if available)
- Track the pages you visit via Google Analytics / Tag Manager
- Allow you to share pages with social networks
- Allow you to share pages via Add This (if available)
Access to your information
You have the right to see what personal data we hold about you. If you would like this information, please email us on info@atava.co.uk or write to us. We may charge a small fee of £10 to carry out this request.
Changes to our privacy policy
We keep our privacy policy under regular review and we will place any updates on this web page. This privacy policy was last updated on INSERT DATE
