Privacy Policy
Last updated 1 July 2026
Data we collect
We collect account information from partner users, and student data submitted by partners for the purpose of processing applications. This includes contact details, academic history, identity and funding documentation.
How we use data
Data is used to deliver the platform: creating and progressing applications, communicating with institutions, and producing reporting for the partner who owns the record. We do not sell personal data.
Lawful basis and consent
Partners are responsible for obtaining student consent before uploading personal data. Consent records are stored against the student profile and can be withdrawn at any time.
Storage and security
Data is encrypted in transit and at rest. Access is role-based and every record change is logged. Regional data residency is available for partners with local requirements.
Retention
Records are retained for as long as the partner account is active, plus the period required by applicable education and immigration regulations. Deletion requests are actioned within 30 days where no legal obligation to retain applies.
Your rights
Individuals may request access, correction, portability or erasure of their personal data. Requests can be made to privacy@route2uni.com and are answered within one month.
Sub-processors
We use a limited set of infrastructure and communication sub-processors. A current list is available on request and partners are notified before material changes.
Contact
Questions about this policy can be sent to privacy@route2uni.com.