Privacy Policy & Data Protection Terms
Last Updated: April, 2026
At Citadel Education Pathway Ltd (“Citadel,” “we,” “us,” or “our”), we are committed to protecting the privacy and security of your personal data. This policy explains how we collect, use, and protect your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
Citadel Education Pathway Ltd is a registered company in England and Wales (Company No: [Your Number]). We act as a Data Controller for the personal information we collect from students, parents, and sponsors.
The Information We Collect
To provide our education consultancy and visa audit services, we collect:
Personal Details: Name, date of birth, nationality, and contact information.
Academic Records: Transcripts, certificates, and English language test results.
Identity Documents: Passport copies and National ID.
Financial Data: Bank statements and proof of funds (for the 28-day visa audit).
Technical Data: IP address and cookies when you visit our website.
Why We Collect Your Data (Lawful Basis)
Under UK GDPR, we process your data based on the following:
Contractual Necessity: To process your university applications.
Legal Obligation: To ensure compliance with UK Home Office (UKVI) immigration rules.
Consent: When you sign up for our newsletter or WhatsApp alerts.
Legitimate Interests: To improve our services and protect against fraudulent applications.
How We Share Your Information
We do not sell your data. We only share it with:
UK Universities: To secure your Letter of Offer and CAS.
UK Visas and Immigration (UKVI): For visa support and compliance.
Partner Legal Firms: If we use a legal partner to file your visa application.
CRM Providers: We use secure, encrypted systems (like TicLick) to store your files.
International Data Transfers
As we serve students in Nigeria, Ghana, Kenya, and other African nations, your data may be accessed by our local representatives in those regions. We ensure all international transfers have Standard Contractual Clauses (SCCs) in place to provide the same level of protection as the UK.
Data Retention
We only keep your data for as long as necessary:
Successful Students: We keep records for the duration of your studies + 1 year (to assist with Graduate Route visas).
Unsuccessful/Enquiry Leads: Deleted after 2 years unless you request earlier removal.
Financial Documents: Deleted immediately after your visa is granted and the audit is complete.
Your Rights
You have the right to:
Access: Request a copy of the data we hold about you.
Rectification: Ask us to correct wrong information.
Erasure: Ask us to delete your data (“Right to be Forgotten”).
Withdraw Consent: Stop us from sending you marketing at any time.
Security
We use SSL encryption on our website and two-factor authentication (2FA) on our CRM to ensure your bank statements and passports are never accessed by unauthorized persons.
Contact Us
If you have any questions about your privacy, please contact our Data Protection Officer: