Enter your keyword

1. Introduction

RNS Education Limited (“we”, “us”, “our”) is committed to protecting the privacy and personal data of individuals who interact with our website, services, and communications. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data (Use and Access) Act 2025, and guidance issued by the UK Information Commissioner’s Office (ICO).

This Privacy Policy explains, in a clear and transparent manner, how we collect, use, store, share, and protect personal data, the lawful bases relied upon, and the rights available to individuals. It applies to all users of our website and to any individual whose personal data we process.


2. Who We Are (Data Controller)

RNS Education Limited is the data controller responsible for determining how and why your personal data is processed.

Contact details:

Controller Name: Md Shafiul Alam
Email: shafiul@rnseducation.co.uk
Registered / operational address: 223 Nile Business Centre, 60 Nelson Street, London. E1 2DE

If you have any questions about this Privacy Policy or how your personal data is handled, you may contact us using the details above.


3. Personal Data We Collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

  • Identity data: such as your name and title
  • Contact data: such as email address, telephone number, and postal address
  • Enquiry and correspondence data: information you provide when contacting us by form, email, or other means
  • Website usage data: IP address, browser type, device information, operating system, pages visited, dates and times of visits, and referring URLs
  • Analytics data: aggregated and anonymised or pseudonymised information relating to website performance and usage

We do not intentionally collect special category personal data or criminal offence data unless it is explicitly provided and necessary for a lawful and specific purpose.


4. Purposes of Processing and Lawful Bases

We only process personal data where a lawful basis under Article 6 of UK GDPR applies. The table below explains why we process personal data and the lawful bases relied upon:

  • To respond to enquiries, requests, and communications
    Lawful basis: Legitimate interests and/or taking steps at your request prior to entering a contract
  • To provide, administer, and improve our services and website
    Lawful basis: Legitimate interests
  • To monitor and analyse website usage and performance
    Lawful basis: Legitimate interests and, where required by law, consent for non-essential cookies
  • To comply with legal, regulatory, or statutory obligations
    Lawful basis: Legal obligation

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.


5. Data Sharing and Recipients

We do not sell personal data. Personal data may be shared, where necessary and proportionate, with the following categories of recipients:

  • Website hosting providers and IT support services
  • Analytics and performance monitoring providers
  • Professional advisers, auditors, insurers, or legal representatives
  • Regulatory authorities, law enforcement bodies, or courts where required by law

All third parties are required to process personal data only on our documented instructions, to keep it secure, and to comply with applicable data protection legislation.


6. International Transfers

We store personal data primarily within the United Kingdom. Where personal data is transferred outside the UK or the European Economic Area (for example, through the use of third-party analytics or cloud service providers), we ensure that appropriate safeguards are in place, including standard contractual clauses or other lawful transfer mechanisms recognised under UK GDPR.


7. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, or reporting requirements.

Indicative retention criteria include:

  • Enquiry and correspondence data: retained for a reasonable period to manage communications and resolve enquiries
  • Website and analytics data: retained in accordance with analytics provider settings and industry best practice

Where personal data is no longer required, it is securely deleted or anonymised.


8. Your Data Protection Rights

Under UK GDPR, individuals have the following rights in relation to their personal data:

  • The right to access personal data
  • The right to rectification of inaccurate or incomplete data
  • The right to erasure (the “right to be forgotten”)
  • The right to restrict processing
  • The right to object to processing, including processing based on legitimate interests
  • The right to data portability, where applicable
  • The right to withdraw consent at any time, where processing is based on consent

Requests to exercise these rights can be made using the contact details provided in Section 2. We may need to verify your identity before responding.


9. Right to Lodge a Complaint with the ICO

If you believe that your data protection rights have been infringed, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.

We encourage you to contact us first so that we have the opportunity to address your concerns promptly and effectively.


10. Cookies and Similar Technologies

Our website uses cookies and similar technologies to ensure core functionality and to analyse website usage. Non-essential cookies are used only where you have provided consent.

You can control or withdraw cookie preferences at any time through your browser settings or any cookie management tools provided on our website.

11. Children’s Personal Data

Our website and services are not intended for children under the age of 13. We do not knowingly collect personal data relating to children. If we become aware that we have collected such data, we will take appropriate steps to delete it without undue delay.


12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, regulatory guidance, or our data processing practices. The most up-to-date version will always be made available on our website. Continued use of our website following updates constitutes acknowledgement of the revised policy.