1. Introduction

Welcome to Adiuvo Consultants. ("Company", "we", "our", or "us"). We are committed to protecting your privacy and ensuring that your personal information is processed lawfully, fairly, and transparently. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you visit our website, enquire about our services, submit an application, or engage with us for education counselling, admissions, or visa-related services.

Our services include student recruitment and admissions support for universities and higher education institutions in the United Kingdom, Germany, Europe, Canada, Australia, and other international destinations.

We process all personal data strictly in compliance with the following data protection laws:

The UK General Data Protection Regulation (UK GDPR);

The Data Protection Act 2018 (DPA 2018); and

The UK Visas and Immigration (UKVI) Agent Quality Framework (AQF).

2. Data Controller & Contact Details

Adiuvo Consultants is responsible for determining how and why your personal data is collected and processed in connection with our services. Where applicable, we act as the Data Controller under the UK GDPR and other relevant data protection laws. Our contact details are provided below should you have any questions about how we handle your personal information or wish to exercise your data protection rights.

Our identity and full contact details are as follows:

3. Lawful Basis, Purposes, and Categories of Personal Data Processed

We must have a valid lawful basis under Article 6 (and Article 9 for special category data, where applicable) of the UK GDPR to process your personal data. Below, we set out the categories of data we collect, how we collect it, the purposes of processing, and the exact lawful bases we rely on:

4. Data Retention Schedule

We do not store your personal data indefinitely. We only retain personal data for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, compliance, and regulatory reporting obligations.

The criteria we use to determine our retention periods include:

The duration of our active relationship with you (e.g., while actively counselling or managing your applications);

The existence of statutory limitation periods under relevant national laws (typically 6 years for contractual claims in the UK);

Regulatory requirements set by international educational institutions, accreditation boards, and immigration authorities (such as UKVI and the AQF).

Our specific retention schedule is set out below:

5. International Data Transfers & Safeguards

As part of our education counselling, student recruitment, and admissions services, Adiuvo Consultants may need to transfer your personal data to countries outside the United Kingdom or the European Economic Area (EEA). These transfers may take place depending on your chosen study destination, the university or college you apply to, and the service providers involved in your application.

The countries receiving your data may include the United Kingdom, Germany and other European countries, Canada, Australia, and other relevant destinations. Your personal data will only be shared with recipients where necessary for the relevant purpose, such as universities and colleges, admissions partners, visa or immigration service providers, and IT, cloud-hosting, or communications providers supporting our services. We do not transfer every applicant's personal data to every country listed.
Where applicable, Adiuvo Consultants uses appropriate safeguards to protect personal data transferred internationally. These safeguards may include:

UK Adequacy Regulations: Transferring data to countries that have been officially recognized by the UK Government as providing an adequate level of data protection.

Standard Contractual Clauses (SCCs) & UK Addendum: Utilizing approved Standard Contractual Clauses with the UK Addendum to enforce data protection obligations on international recipients.

International Data Transfer Agreements (IDTAs): Employing the UK ICO-approved IDTA where custom transfer terms with overseas institutions are established.

Explicit Necessity: Where transfer is strictly required to execute the pre-contractual steps of submitting your overseas application, we rely on Article 49 derogations, ensuring your prior informed consent.

The safeguard used depends on the destination, recipient and applicable law. Where required, we use a UK adequacy regulation, the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism. Where a transfer relies on a specific legal exception, we will do so only where its conditions are met. You may contact us using the details in Section 2 to ask which transfer mechanism applies to a particular transfer, subject to legal and confidentiality restrictions.

We will identify specific destination countries and transfer arrangements more precisely as our actual recipient locations and service-provider arrangements are confirmed. This policy should be updated if our regular transfer destinations or safeguards materially change.

5A. Our Role and Sharing with Education and Visa Partners

Adiuvo Consultants generally acts as a data controller for the personal data it uses to manage enquiries, provide counselling, maintain client records, communicate with applicants, administer its services and meet its own legal or compliance obligations. In these activities, we decide why and how the relevant data is used.

When we submit an application or supporting documents to a university, college or other institution on your behalf, we may act as your education-consultancy intermediary in transmitting the information you provide or authorise us to submit. The receiving university, college or partner will generally decide how it uses the information for its own admissions, enrolment, compliance and record-keeping purposes and may therefore act as a separate, independent controller. The institution's own privacy notice will explain its processing.

Where we use a service provider solely to process personal data on our documented instructions, that provider may act as a processor. The precise role depends on the activity and the arrangements in place. We do not assume that every university, visa provider or partner has the same role. We will explain the relevant sharing to you when appropriate, and you may contact us to ask about a particular recipient.

6. Automated Decision-Making and Profiling

Under Article 22 of the UK GDPR, you may have the right not to be subject to a decision based solely on automated processing, including profiling, where that decision produces legal effects or similarly significant consequences for you.

Adiuvo Consultants does not use automated decision-making or profiling to make decisions that produce legal or similarly significant effects for applicants. Our academic assessments, visa eligibility consultations, and university application reviews involve meaningful human involvement by our education counsellors, who consider each applicant's individual circumstances and relevant information.

7. Your Rights Under UK GDPR

Under the UK GDPR, you possess several legal rights regarding your personal data. We are committed to facilitating these rights whenever you request:

• The Right to Access (Subject Access Request - SAR): You have the right to request a copy of the personal data we hold about you, along with detailed explanations of how and why we process it.
• The Right to Rectification: You have the right to demand that we correct inaccurate or incomplete personal information we hold about you without undue delay.
• The Right to Erasure ('The Right to be Forgotten'): You have the right to request that we delete your personal data under certain conditions, such as when the data is no longer necessary for the original purposes, or you have withdrawn your consent and no other lawful basis exists.
• The Right to Restrict Processing: You have the right to request that we temporarily suspend the processing of your personal data (for example, while we verify the accuracy of your data or investigate your objection).
• The Right to Object: You have the right to object to us processing your data under Legitimate Interests. We will cease processing unless we can demonstrate compelling, overriding legitimate grounds that supersede your rights.
• The Right to Data Portability: You have the right to request that we transfer your personal data to you or directly to another data controller in a structured, commonly used, and machine-readable format.

How to submit a request: You may submit a data protection rights request by emailing [Email Address] or writing to the postal address in Section 2. Please identify yourself, describe the right you wish to exercise, and provide enough information for us to locate the relevant records. You do not need to use a special form. If you are making a request on behalf of a student or another person, please provide evidence that you are authorised to act for them.

Identity verification: To protect personal data, we may ask for reasonable information or documents to verify your identity, and, where relevant, your authority to act for another person. We will request only information reasonably necessary for verification and will handle it securely. Please do not send original identity documents unless we specifically ask you to do so.

Response time: We will normally respond without undue delay and within one month of receiving your request. If a request is complex or we receive several requests from you, the applicable law may allow an extension of up to a further two months. If an extension is needed, we will tell you within the first month and explain why.

If we cannot comply: Some rights apply only in particular circumstances, and legal exemptions may apply. If we refuse to act on a request, we will explain the reasons, where the law requires us to do so, and tell you about your options to complain to the Information Commissioner's Office (ICO) and seek a judicial remedy. If you are dissatisfied with our handling of a request, please first contact us using the details in Section 2 so that we can review the matter.

8. Right to Withdraw Consent

Where we rely on your explicit consent as our lawful basis for processing your personal data (such as for certain non-essential marketing, special category data collection, or particular application procedures), you have the absolute right to withdraw your consent at any time.

To withdraw your consent, please contact us directly using the details provided in Section 2 of this policy. Once received, we will immediately stop the processing of your data for that specific purpose, unless there is another legally valid lawful basis under the UK GDPR that allows us to continue.

9. Right to Lodge a Complaint with the ICO

We strive to handle your personal data securely and in full accordance with your expectations. However, if you believe we have not processed your data in compliance with the UK GDPR, you have the legal right to lodge a formal complaint with the UK supervisory authority, the Information Commissioner's Office (ICO).

The ICO can be contacted using the following details:

Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline Telephone: 0303 123 1113

Website: https://ico.org.uk/

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including: SSL Encryption, password-protected systems, secure cloud storage, restricted physical and digital access controls, two-factor authentication, and secure backup procedures. Although we take reasonable precautions, no online transmission can be guaranteed to be completely secure.

11. Cookies

Adiuvo Consultants uses cookies and similar technologies, where applicable, to support website functionality, remember user preferences, and understand how visitors interact with our website. You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the availability or performance of some website features.

12. Children's Privacy

Adiuvo Consultants may provide education counselling and admissions support to applicants under the age of 18. Where required by applicable law, we will obtain appropriate consent from a parent or legal guardian before processing a minor's personal data. We take appropriate steps to handle the personal information of younger applicants responsibly and in accordance with applicable data protection requirements.

13. UKVI Agent Quality Framework Commitment

As an authorized education recruitment agency, we are committed to the principles of the UKVI Agent Quality Framework. We undertake to provide honest, transparent, and ethical advice, protect applicant confidentiality, handle personal data securely, maintain accurate student records, prevent fraud and document manipulation, and act in the best interests of applicants.

14. GDPR Compliance Statement

We are fully committed to complying with the UK General Data Protection Regulation. Our organization strictly follows the core principles of: Lawfulness, Fairness, Transparency, Purpose Limitation, Data Minimization, Accuracy, Storage Limitation, Integrity and Confidentiality, and Accountability.

15. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time to reflect changes in legislation, business practices, or our services. The updated version will always be published on this page with the revised effective date.

16. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Adiuvo Consultants.
Address: Office No.19, 1st Floor, Garden Heights, 8-Aibak Block, New Garden Town, Lahore Gulberg Town
Email: ahmedbilal@adiuvoconsultants.net
Phone: +92 322 4408899
Website:https://adiuvoconsultants.org/