Privacy Policy – Guy’s College

Last Updated: September 2026

At Guy’s College (“we”, “us”, “our”), accessible from https://guyscollege.co.uk

, protecting the privacy and security of our applicants, students, and website visitors is one of our top priorities.

This Privacy Policy outlines the types of personal information we collect, how we use and protect it, your legal rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and how we handle cookies and tracking technologies.

1. Who We Are (Data Controller)

Guy’s College is the Data Controller responsible for your personal data collected through our website and application processes.

Website: https://guyscollege.co.uk
Data Controller Name: Guy’s College
Email Address: [Insert Email Address, e.g., info@guyscollege.co.uk]
Phone Number: [Insert College Phone Number]
Postal Address: [Insert Physical Campus or Office Address, UK]

2. The Personal Data We Collect

We may collect, store, and process the following categories of personal information:

Identity & Contact Data: Full name, phone number, email address, physical address, and date of birth submitted via our course application forms or enquiry forms.
Academic & Qualification Data: Prior qualifications, educational history, employment details, and uploaded verification documents (such as certificates, transcripts, CVs, or identity documentation).
Technical & Usage Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and details about how you interact with our website (pages visited, time spent, referral sources).
Marketing & Communications Data: Your preferences in receiving marketing updates from us regarding upcoming course intakes, educational offers, and news.

3. How We Collect Your Personal Data

We collect personal data from you through:

Direct Interactions: When you fill out our course application forms (powered by Forminator), submit an enquiry, upload supporting application documents, or request marketing communications.
Automated Technologies & Cookies: As you navigate our website, we automatically collect technical data using cookies, server logs, and tracking tools (including Google Site Kit and Google Analytics 4).
Third-Party Platforms: When you interact with our embedded media (such as YouTube videos from @guyscollege8063) or arrive at our website via Google Paid Search advertisements.

4. How We Use Your Data & Legal Basis for Processing

Under UK GDPR, we only process your personal data when we have a valid legal basis.

Purpose / Activity	Type of Data	Legal Basis for Processing
Processing Course Applications: Evaluating entry requirements, processing document uploads, and contacting you regarding your application.	Identity, Contact, Academic Data	Performance of a Contract / Pre-contractual Steps: Necessary to assess and process your enrolment request.
Website Performance & Optimization:Managing hosting, site security, and ensuring fast page delivery.	Technical Data	Legitimate Interests: Operating and securing our digital infrastructure.
Analytics & Conversion Tracking: Measuring Google Ads performance, traffic sources, and application submission rates.	Usage, Technical Data	Consent: Collected via cookie consent banners and explicit form interaction tracking.
Direct Marketing: Sending email or phone updates about new course intakes, open days, and offers.	Contact, Marketing Preferences	Consent / Legitimate Interests:Optional opt-in provided during application submission.

5. Sharing Your Personal Data

We do not sell, rent, or trade your personal data. We only share your information with trusted third-party service providers acting as Data Processors to operate our college and website:

Website Hosting & Infrastructure: Fasthosts Internet Ltd (United Kingdom) – Stores website files, database records, and server logs on secure UK infrastructure.
Analytics & Advertising Providers: Google LLC (Google Analytics 4, Google Ads, Google Site Kit) – Helps us measure traffic, conversion rates from paid ads, and site performance.
Embedded Media: YouTube (Google LLC) – Embedded video clips (@guyscollege8063) that may set third-party tracking cookies when played.
Email & Communication Providers: SMTP service providers used to deliver auto-responder application receipts and administrative notifications.
Legal & Regulatory Authorities: If required to do so by UK law, court order, or to protect the rights and safety of Guy’s College and its students.

All third-party processors are bound by strict contractual data protection terms and are required to keep your data secure in accordance with UK law.

6. International Data Transfers

Where third-party service providers (such as Google Analytics or YouTube) transfer personal data outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTAs) or standard contractual clauses (SCCs).

7. Data Security & Storage

We implement rigorous physical, technical, and organizational security measures to protect your personal data from accidental loss, unauthorized access, alteration, or disclosure. All data submitted through our website forms is encrypted during transit using SSL/TLS protocols (HTTPS).

Document uploads (e.g., certificates, proof of ID) submitted via application forms are restricted to authorized admissions personnel only.

8. Data Retention

We only retain your personal data for as long as necessary to fulfill the purposes for which it was collected:

Course Applications (Enrolled Students): Maintained as part of your permanent student academic record in accordance with UK educational retention guidelines.
Course Applications (Unsuccessful / Incomplete): Retained for up to 2 years following the course intake date to respond to queries, after which records are securely deleted.
Marketing Contacts: Retained until you opt out or withdraw consent.
Web Server Logs & Analytics: Retained in accordance with Google Analytics default retention periods (typically 14 months).

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience and measure advertisement performance.

Essential Cookies: Necessary for basic website functionality and security.
Analytical/Performance Cookies: Set by Google Analytics (via Site Kit) to collect anonymous usage metrics.
Targeting/Advertising Cookies: Placed by Google Ads to track conversion completions on our application thank-you page (/application-thank-you/).
Third-Party Media Cookies: Set by YouTube when viewing embedded course video content.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

10. Your Legal Rights Under UK GDPR

Under UK data protection law, you have the following rights regarding your personal data:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete personal data.
Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where there is no legal reason for us to continue processing it.
Right to Restrict Processing: Request a pause on processing your personal data under specific circumstances.
Right to Data Portability: Request the transfer of your personal data to you or a third party in a structured, machine-readable format.
Right to Object: Object to our processing of your personal data for direct marketing or based on legitimate interests.
Right to Withdraw Consent: Where processing relies on consent (e.g., marketing), you can withdraw consent at any time.

To exercise any of these rights, please contact our admissions team at [Insert Email Address, e.g., info@guyscollege.co.uk].

11. Complaints & Regulatory Body

If you have any concerns about our use of your personal data, you can make a formal complaint to us directly at [Insert Contact Email].

You also have the right to lodge a complaint with the UK data protection supervisory authority:

Information Commissioner’s Office (ICO)

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline: 0303 123 1113

Website: https://ico.org.uk