Legal
Privacy Policy
This policy explains how South Stafford College collects, uses, and protects your personal data in accordance with the UK GDPR and the Data Protection Act 2018.
1. Introduction

South Stafford College ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website, enquire about or apply for our programmes, or interact with us as a student, partner, or member of the public.

South Stafford College is registered in England and Wales. As a UK-registered institution, we are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy was last reviewed in November 2025.

2. Data Controller
NameSouth Stafford College
Registered Address60 Tottenham Court Road, Suite 4418a, Fitzrovia, London, United Kingdom, W1T 2EW
General Emailinfo@southstafford.co.uk
Data Protection Emaildataprotection@southstafford.co.uk
3. What Personal Data We Collect

We collect and process the following categories of personal data depending on your relationship with us:

  • Identity data — full name, date of birth, nationality, passport or ID details
  • Contact data — email address, phone number, residential address
  • Academic data — prior qualifications, transcripts, academic history, personal statements
  • Professional data — employment history, job title, employer name (for MBA/DBA applicants)
  • Financial data — payment records, instalment plan details (no full card numbers are stored)
  • Technical data — IP address, browser type, device information, pages visited, cookies
  • Communications data — records of correspondence, enquiry forms, support requests
  • Usage data — LMS login activity, module progress, assessment submissions
4. How We Use Your Personal Data

We use your personal data only for lawful purposes under UK GDPR, relying on the following legal bases: performance of a contract, legitimate interests, legal obligation, and consent (for marketing).

  • Processing your application and assessing eligibility for admission
  • Enrolling you onto your chosen programme and administering your studies
  • Providing access to the Learning Management System (LMS)
  • Processing tuition payments and managing payment plans
  • Complying with legal and regulatory obligations
  • Sending programme and service information where you have given consent
  • Improving our website, services, and student experience
  • Responding to enquiries, complaints, and support requests
5. Sharing Your Personal Data

We do not sell your personal data to third parties. We may share your data with:

  • Academic partner institutions (Qualifi, OTHM, UBIS, Clermont and others) — for programme registration, assessment, and qualification award
  • IT and platform providers — our LMS provider, cloud hosting, and CRM systems (all bound by data processing agreements)
  • Payment processors — for secure processing of tuition payments
  • Professional advisers — legal, financial, and compliance advisers where necessary
  • Regulatory bodies — UKRLP, accreditation bodies, and UK government bodies as required by law

Where we share data with parties outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

6. Data Retention
Enquiry / no application submitted12 months from last contact
Unsuccessful application12 months from decision date
Student records (enrolled)7 years from programme completion
Financial records7 years (UK tax and accounting law)
LMS activity dataDuration of enrolment + 3 years
Marketing consent recordsUntil consent is withdrawn + 3 years
7. Your Rights Under UK GDPR

You have the following rights regarding your personal data. To exercise any right, contact us at dataprotection@southstafford.co.uk.

  • Right of access — request a copy of the personal data we hold about you
  • Right to rectification — request correction of inaccurate or incomplete data
  • Right to erasure — request deletion of your data in certain circumstances
  • Right to restrict processing — request that we limit how we use your data
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to object — object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent — where processing is based on consent, you may withdraw at any time

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses essential, analytical, and preference cookies to improve your browsing experience and analyse site traffic. By continuing to use our website, you consent to our use of cookies. You can control cookies through your browser settings at any time.

9. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include encrypted data transmission (SSL/TLS), access controls, regular security reviews, and data processing agreements with all third-party processors.

10. Contact Us

South Stafford College
60 Tottenham Court Road, Suite 4418a, Fitzrovia, London, United Kingdom, W1T 2EW
Email: dataprotection@southstafford.co.uk