Welcome to the Privacy Policy of Care & Concern (C&C). This document outlines your rights under the Data Protection Act 2018 and the UK General Data Protection Regulation (GDPR). Ensuring the accuracy and currency of your personal data is vital. If your personal data changes while you are associated with us, please inform us promptly.

This Privacy Policy is structured in a layered format, allowing you to focus on specific sections as needed. Care & Concern (C&C) reserves the right to periodically update this Privacy Policy at our discretion. Any changes will be posted on this page. This version was last updated on September 1, 2023.

• Important Information about this Privacy Policy
• Purpose of this Privacy Policy
• Who is Care & Concern (C&C)?
• Legal Basis for Processing Your Personal Data
• When Do We Collect Your Personal Data?
• Categories of Personal Data We Collect
• Why We Use Your Personal Data
• How We Safeguard Your Personal Data
• Retention of Your Personal Data
• Sharing Your Personal Data
• Processing and Transferring Your Personal Data
• Your Rights as a Data Subject
• Complaints
• Contact Details: Data Protection Officer

This Privacy Policy should be read in conjunction with any other privacy policy or fair processing notice provided when we collect or process your personal data for specific purposes. It complements those notices and does not supersede them.

Care & Concern (C&C) website may contain links to third-party websites, plugins, and applications. Clicking on these links may allow third parties to collect or share your data. We do not control these third-party websites or their privacy policies. When leaving our website, please review the privacy notice of every website you visit. This Privacy Policy applies specifically to Care & Concern (C&C) website www.careandconcern.co.uk and Care & Concern (C&C) Ltd.

For any questions or concerns regarding the use of your personal information, please contact us using the details provided at the end of this Privacy Policy.

This Privacy Policy clarifies the categories of personal data we may collect from you, the purposes of processing your data, and how we ensure its security.

Care & Concern (C&C) respects your privacy rights and is committed to safeguarding your personal data. This Privacy Policy introduces us, explains how we collect, share, and utilize your personal information, and outlines your privacy rights. This policy applies to data collected from all users of www.careandconcern.co.uk (the “Website”) and the services available on the Website (the “Student Service”).

In this policy, "the Company," "we," "us," "our," and "ours" refer to Care & Concern (C&C), while "you," "your," and "yours" refer to the user or viewer of the Website or the user of the Services.

Care & Concern (C&C) acts as a "data controller," meaning we are responsible for determining how we use and manage your personal information. Under data protection laws, we are required to inform individuals who provide us with personal data, either directly or through a third party, about the information contained in this Privacy Notice.

Registered as a limited company in the United Kingdom, Care & Concern (C&C) serves as an Education Agent for overseas university admissions. Our head office is located at:

Care & Concern (C&C)
118-120 London Road
Mitcham, Surrey CR4 3LB
London, United Kingdom

Our branch office in India is situated at:

Care & Concern (C&C)
Elenjimattahil Complex,
Ponkunnam P O,
Kottayam,
Kerala 686 506, India

For simplicity in reading, we refer to the "Company" as "we" and "us" in this policy.

As a global company, we recognize that data protection laws may vary by country. Nevertheless, we outline several reasons for collecting and processing your personal data, including:

Consent:
• In specific situations, we collect and process your data with your consent, such as when you opt to receive marketing material from us.
• We aim to collect the minimum necessary data to provide our services when gathering your personal data.

Parental Consent:
• Depending on national and sometimes state law, you may be considered a "minor" or "child" regarding signing contracts or consenting to the collection and processing of your personal data. This applies when you have not reached the legal age of consent.
• In many countries, including Australia, New Zealand, Canada, Singapore, and the USA, the legal age of consent is typically 18 years. In Europe, it's often 16 years (or 13 in the UK) for receiving marketing information.
• To protect your rights, if you are legally considered a "minor," we require your parents' or guardians' consent to collect and process your data through online services.

Explicit Consent:
• Explicit consent means you have the option to agree or disagree with the collection, use, or disclosure of personal information.
• When we need to collect special categories of data from you to provide services or meet legal obligations, we will do so based on your explicit consent, national/regional social protection laws, or for statistical reporting requested by official bodies.
• Special category data may include information like racial or ethnic origin, passport or birth certificate details necessary for enrollment or visa requirements. We may also need to collect health-related data (e.g., medical check reports and immunization history) to provide additional support.

Contractual Obligations:
• In specific situations, we collect your personal data to fulfill our contractual obligations to you.
• We collect this data to make offers for study enrollment or employment and establish contracts outlining your obligations as a student or employee, as well as our obligations as the provider of study services or employment.

Legal Compliance:
• When required by law, we may collect and process your data for various reasons, such as preventing fraud, complying with immigration authorities' requirements, meeting university requirements, or adhering to consumer protection laws.

Legitimate Interest:
• In certain situations, we collect your personal data as part of our legitimate business interests, provided it does not significantly affect your rights, freedoms, or interests. Examples include staying in touch with ex-students as part of an alumni program and keeping you informed about company news.
• When we collect personal data, we will store it securely and only for the original purpose it was collected or as required by law.

We collect your personal data in various situations, including when:

• You visit our website pages (where we collect transaction-based data).
• You apply to register or open an online account via our website or marketing campaigns.
• You complete our online or paper/PDF application forms.
• You engage with us on social media.
• You contact us through any communication means.
• You schedule an appointment with us.
• You book to attend an event.
• You give a third party permission to share information they hold about you.
• You visit a university, campus, or office with CCTV systems for security (which may record your image during your visit).
• You engage with our online marketing tools and attend online admission sessions through platforms like Zoom.
• If you are an employee, we collect your personal data throughout your employment with the Company.

We collect various types of personal data, including:

• Your contact details (e.g., name, gender, date of birth, religion, nationality, ethnicity, marital status, medical and disability information, address, social media contacts, telephone numbers, email address, Skype ID, next of kin's details).
• Identity and immigration documentation (e.g., passport, driver's license, national insurance number, identity card, visa details, birth certificate, marriage certificate, TB certificate, COVID-19 status, criminal convictions and offenses).
• Financial details (e.g., funds details, sources of funds, bank details, bank statements).
• Educational and work history (e.g., qualifications, grades, institutions you studied at, recent study and work experience details).
• Details of interactions with us (e.g., inquiries, comments, and information collected through cookies).
• For employees, additional data like social security details, next of kin details, health information, and image, voice, and written contributions may be collected.

We use your personal data for various reasons, including:

• Operating and administering our business to provide services like admission and visa applications, based on our legitimate business interests.
• Responding to your queries and requests, with records kept to fulfill contractual obligations and legal requirements.
• Protecting our business and you from fraud and illegal activities, monitoring browsing activity to identify and resolve issues, and safeguarding premises, assets, and individuals through CCTV systems, all as part of our legitimate interests.
• Processing payments, preventing fraudulent transactions, and complying with contractual or legal obligations, such as sharing data with law enforcement agencies when necessary.
• Keeping you informed about relevant services and events with your consent.
• Protecting your vital interests if you are unable to provide consent.
• Hiring and managing employees and contractors, based on contractual agreements.
• Sending you communications required by law or necessary to inform you about changes to our services.
• Complying with contractual or legal obligations to share data with law enforcement agencies when necessary.

We prioritize data security and follow appropriate measures to protect your data:

• We secure access to transactional areas of our websites and apps using 'https' technology.
• Access to personal data is restricted and secured, with sensitive information like health data protected through password protection and encryption.
• Storage systems for paper copies are secured and access is managed according to Company protocols.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. The appropriate retention period depends on factors like the nature and sensitivity of the data, potential risks, purposes, and legal requirements.

At the end of the retention period, your data will be deleted or anonymized.

We share your personal data with trusted third parties when necessary to provide services and conduct business operations. We maintain strict directions and expectations for these organizations regarding privacy and data protection.

Types of third parties we work with include educational agent groups, IT companies supporting our websites, cloud storage providers, customer relationship management application providers, educational establishments, regulatory authorities, accommodation providers, estate services, online webinar providers, insurers, financial service providers, travel service providers, solicitors, the British Council, and Turnitin.

Third-party partners use your personal data under their own privacy policies when you use their services.

As a global company, we sometimes need to share your personal data across international borders outside the European Economic Area (EEA). We have procedures in place to ensure your data receives the same protection as if it were processed within your country of residence.

Under certain circumstances, you have the following rights:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data ("right to be forgotten").
• Object to the processing of your personal data.
• Request the restriction of processing of your personal data.
• Request the transfer of your personal data to another party ("right to data portability").
• Withdraw consent for specific processing, if previously given.
If you wish to exercise any of these rights, please contact us using the provided contact details.

If you have concerns about our use of your personal data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters (www.ico.org.uk).

We take all privacy complaints seriously and aim to resolve them promptly and efficiently.

Contact Details: Data Protection Officer
To exercise your rights or inquire further, please contact our Data Protection Officer:
• Email: dpo@careandconcern.co.uk
• Phone: 07830073292

Address:
Data Protection Officer
Care & Concern (C&C)
118-120 London Road,
Mitcham,
Surrey CR4 3LB, UK