© EchosEdu All Right Reserved
Echos Education Ltd ("Echos Education", "we", "us", "our") is committed to protecting and respecting the personal data in our care.
This Privacy Notice explains why and how we collect and use personal data, and outlines the rights of individuals in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Under the UK GDPR, personal data means any information relating to an identified or identifiable individual. We may use personal data provided to us for the purposes described in this Notice or for purposes clearly stated at the point of collection.
This website and our services are not intended for children, and we do not knowingly collect data relating to them unless necessary for educational or guardianship purposes.
The data controller is Echos Education Ltd, unless otherwise specified in relation to particular processing activities.
In certain cases, we may act as a data processor, meaning we process personal data on behalf of another organisation (the controller) and under its instructions.
Some services may also be delivered in collaboration with affiliated entities, including Echos Consultancy Ltd.
If you have any questions about this Notice or about how and why we process personal data, you can contact us at: [email protected]
We also collect certain information automatically when you visit our website, such as your IP address, browser type, pages visited, and usage data (including cookies and similar technologies).
We may collect, store, and use the following categories of personal data, depending on the nature of our relationship with you and the education-related services we provide:
Identity & Contact Information:
Full name, date of birth, nationality, gender, and contact details such as home address, email address, and telephone number. We may also collect copies of passports, national ID cards, or travel documents necessary for student placement or guardianship arrangements.
Educational & Background Information:
Academic records, transcripts, certificates, test results, school or university preferences, language proficiency scores, and other information relevant to educational consultancy or student support. This may include reference letters, personal statements, and application forms.
Family, Guardian & Sponsor Information:
Details of parents, guardians, or sponsors, including names, relationship to the student, contact details, and—where applicable—financial or payment-related information necessary for tuition or accommodation arrangements.
Contractual, Service & Application Data:
Information related to our education consultancy and placement services, including records of communication, signed agreements, service preferences, programme details, application materials, and supporting documentation.
Financial & Payment Data:
Payment and invoicing information, including bank details (if applicable), payment history, or records of fees paid on behalf of students by parents or sponsors.
Compliance & Verification Data:
Identification and verification documents (e.g., passport, proof of address) and any information required by law or by relevant educational authorities to support enrolment or travel arrangements.
Special Category Data (where applicable & with proper legal basis):
In limited situations and only if necessary, we may process special categories of personal data such as: Health or medical information provided to ensure welfare, accommodation, or travel support; Criminal record data (e.g., DBS checks) where required to comply with safeguarding or guardianship obligations. Any such processing will be conducted lawfully, in accordance with Article 9 and Article 10 of the UK GDPR and the Data Protection Act 2018, and under an appropriate legal basis (such as explicit consent or substantial public interest).
Technical & Website Usage Data:
IP address, browser type, device identifiers, referral URLs, pages visited, session duration, and other usage information collected through cookies or analytics tools. (For more information, please see our Cookie Notice.)
The type and amount of personal data we hold about you depends on your relationship with Echos Education Ltd and the services we provide. We ensure that all personal data is relevant, limited to what is necessary, and securely stored in accordance with our internal data protection and retention policies.
Students and Service Recipients:
We hold personal data about students in order to deliver our education consultancy, placement, and guardianship services. This includes identification, contact, and educational background details, as well as application materials, correspondence, and service records. Where applicable, we also hold visa, accommodation, and travel-related information, together with financial or payment data related to tuition and service fees.
Parents, Guardians, and Sponsors:
We hold personal data about parents, guardians, and sponsors to enable communication, invoicing, and the effective management of student welfare. This includes their contact details and relationship to the student, relevant payment or sponsorship information, and communication history, including any consents or permissions provided.
Educational Institutions and Partners:
We hold data about our partner schools, colleges, universities, and related organisations to facilitate collaboration and student placements. This typically includes the names and contact details of institutional representatives, records of communication, and relevant agreements or application data linked to student programmes.
Suppliers and Service Providers:
We maintain information about suppliers and service providers such as accommodation providers, interpreters, and logistics partners. This includes contact and contractual details, correspondence, and records of service delivery and payments.
Employees, Contractors, and Job Applicants:
Where applicable, we hold personal data for recruitment, onboarding, and employment administration purposes. This may include CVs, references, right-to-work and qualification documents, as well as payroll and HR information for employees and contractors.
Regulatory and Compliance Records:
We hold information required to comply with legal and regulatory obligations, including travel and enrolment-related records, audit trails, consent records, safeguarding documentation, and other compliance-related data.
Website Users and Enquirers:
We hold contact and communication details submitted through online forms, together with technical usage data such as IP address, browser type, device information and site interactions collected when you visit our website. We may also hold any preferences or feedback you share with us. For further information, please see our Cookie Notice.
We collect personal data from various sources depending on your relationship with Echos Education Ltd. Most of the information we hold is provided directly by you when you contact us, engage our education consultancy or guardianship services, attend meetings or interviews, complete enquiry or application forms, or communicate with us by email, phone, or through our website.
We may also receive personal data from parents, guardians, or sponsors who provide information on behalf of students, particularly in the case of minors or international students. This may include identification, contact, academic, and financial details required to support placement, accommodation, or welfare arrangements.
Information may also be collected from educational institutions and partners, such as schools, colleges, and universities, which may provide academic records, references, admission details, or updates related to student applications and progress.
In certain cases, we may obtain personal data from third parties such as background-check agencies or service providers assisting with travel, accommodation, or general compliance processes related to education placements.
We also collect limited technical and usage data automatically when you visit our website or use our online forms, such as your IP address, browser type, device identifiers, and site interactions, through cookies and analytics tools. For more information, please see our Cookie Notice.
We process personal data only where permitted by law, in line with the UK GDPR and the Data Protection Act 2018. The main reasons include performing our contractual obligations, complying with legal and regulatory requirements, pursuing our legitimate business interests such as managing and improving our services, and where you have given consent for example, to receive marketing communications. In limited cases, we may also process special category or criminal record data when required by employment law, regulatory duties, or with your explicit consent.
We use personal data for purposes connected to the delivery of our education consultancy, placement, and guardianship services, as well as to meet our legal and administrative obligations.
We use personal data to communicate with students, parents, guardians, and education partners, and to provide advice, guidance, and support throughout the application and placement process. This includes assessing student profiles, preparing and submitting applications, liaising with schools, colleges, and universities, and managing related arrangements such as accommodation and travel.
We process personal data to manage client relationships, respond to enquiries, and deliver our services effectively. This may include maintaining service records, handling feedback, and ensuring appropriate welfare and safeguarding standards, particularly for underage or international students.
We also use personal data to meet legal and compliance requirements, including education sector reporting obligations, financial and tax requirements, anti-fraud checks, and safeguarding regulations.
Where permitted by law, we may use contact information for communication, updates, or marketing purposes related to our education services. You can opt out of receiving such communications at any time by contacting us.
We do not use personal data for automated decision-making or profiling in a way that produces legal or significant effects on individuals.
We only share personal data where it is necessary, proportionate, and lawful to do so. Depending on the nature of the relationship or service, we may share personal data with trusted third parties under strict confidentiality and data protection obligations.
We may share information with:
All third parties receiving data from us are required to handle it securely, use it only for the specified purpose, and comply with applicable data protection law.
We do not sell, rent, or otherwise make personal data commercially available to any unrelated third party.
Where data is transferred outside the United Kingdom or the European Economic Area (EEA), we ensure that adequate safeguards are in place, such as Standard Contractual Clauses or an adequacy decision recognised under UK GDPR to protect your information.
We take the protection of personal data very seriously and implement appropriate technical and organisational measures to safeguard it against unauthorised access, loss, misuse, alteration or disclosure.
Our security measures include controlled access to data, secure storage and encryption where appropriate, regular system monitoring, staff training on data protection responsibilities, and policies that ensure confidentiality and integrity of information at all times.
We limit access to personal data to those employees, contractors and third-party service providers who need it to perform their duties, and they are subject to strict confidentiality obligations.
In the event of a data breach that poses a risk to your rights or freedoms, we will take immediate steps to mitigate the impact and will notify the Information Commissioner's Office (ICO) and affected individuals when required by law.
All systems, tools and cloud platforms used by Echos Education Ltd are selected and managed with data security and compliance in mind, following current UK GDPR standards and good industry practice.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, regulatory, contractual, accounting or reporting requirements.
The specific retention period depends on the type of data and the nature of our relationship with you. For example, client and service records are generally kept for the duration of the engagement and for a defined period afterwards to comply with legal obligations or to protect our legitimate interests in the event of a claim. Recruitment information is retained for a limited time after a position is filled, unless you have given consent for us to keep it longer for future opportunities.
When personal data is no longer required, we will securely delete, anonymise or destroy it in line with our data retention and destruction policies.
If you would like further details on how long we keep particular categories of personal data, you can contact us using the details provided in this Notice.
Under the UK General Data Protection Regulation (UK GDPR), you have a number of rights in relation to your personal data. These rights are designed to give you transparency, control and assurance over how your information is used.
You have the right to:
If you wish to exercise any of these rights, please contact us using the details provided in this Notice.
We may need to verify your identity before responding to a request.
We aim to respond to all valid requests within one month, in accordance with legal requirements.
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters.
Further details can be found at www.ico.org.uk
If you have any questions about this Privacy Notice or about how Echos Education Ltd handles personal data, please contact us at:
Echos Education Ltd
Third Floor, 23 Bedford Row
London, WC1R 4EB
Email: [email protected]
We will review and respond to all enquiries as promptly as possible and within the timelines required by data protection law.
If you are not satisfied with our response, you can raise a concern with the Information Commissioner's Office (ICO) at www.ico.org.uk