Privacy Policy

1. Introduction

Kensington Institute (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, store, share, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Kensington Institute Ltd
Email: privacy@kensingtoninstitute.ac.uk
Phone: +44 020 3608 0144

3. Scope

This policy applies to all personal data we collect in relation to your enquiry, application, enrolment, course participation, and use of our online services.

4. Personal Data We Collect

We collect the following categories of data:

  • Identity and contact details such as your full name, date of birth, email address, postal address, and phone number

  • Academic and professional records such as qualifications, transcripts, employment history, references, course progress, and assessment results

  • Financial information such as payment card details, billing address, and records of payments or instalments

  • Technical data such as your IP address, device type, browser type, and LMS activity

  • Special category data where provided, such as health conditions or disabilities for learning support, or any criminal conviction information disclosed for safeguarding

5. How We Collect Your Data

We collect data directly from you during application, enrolment, communication, and use of our systems. We may also collect data from third parties such as referees, previous institutions, awarding bodies, and payment providers.

6. How We Use Your Data and Legal Basis

We use your personal data to:

  • Process applications and enrolments, based on the performance of a contract

  • Deliver course content and academic support, based on the performance of a contract

  • Manage course assessments and results, based on the performance of a contract

  • Process tuition payments and refunds, based on the performance of a contract

  • Provide student services and administrative support, based on legitimate interests

  • Communicate important updates related to your studies, based on legitimate interests

  • Send marketing and promotional materials, where you have given consent

  • Analyse website and system usage for performance and security, based on legitimate interests

  • Fulfil legal obligations, such as reporting to regulatory authorities, based on compliance with the law

7. Sharing of Data

We may share your data with:

  • UK awarding bodies for certification and academic records

  • Service providers for IT, LMS, hosting, payment, and communication

  • Government agencies or regulators where legally required

  • Legal, financial, or professional advisors where necessary

We do not sell or rent your data to third parties.

8. International Data Transfers

If we transfer your data outside the UK or EEA, we ensure adequate safeguards are in place, such as approved standard contractual clauses.

9. Data Retention

We retain student records for up to 25 years to meet academic and regulatory requirements. Financial records are kept for 7 years. Marketing and enquiry data is kept for up to 3 years unless you request deletion sooner.

10. Your Rights

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of data where applicable

  • Restrict or object to data processing

  • Request a copy of your data in a portable format

  • Withdraw consent for marketing at any time

To exercise any of these rights, contact privacy@kensingtoninstitute.ac.uk. If you are not satisfied, you have the right to complain to the Information Commissioner’s Office (ICO).

11. Cookies

We use cookies to improve your website experience, analyse usage, and support system functionality. You can manage your cookie settings in your browser or via our cookie banner. For more details, see our separate Cookie Policy.

12. Data Security

We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse. This includes encryption, secure servers, access controls, and regular audits.

13. Third-Party Links

Our website may contain links to other sites. We are not responsible for their privacy practices. Please review their policies before providing personal data.

14. Changes to This Policy

This policy may be updated from time to time. Significant changes will be communicated via email and our website.

15. Contact

Email: privacy@kensingtoninstitute.ac.uk
Phone: +44 020 3608 0144

Effective date: 12 May 2025