Privacy Policy
Last updated:
This Privacy Policy explains how Pathway Nexus School (“we”, “us”, “our”) collects, uses, discloses, and protects your personal data when you visit our website, apply to our programmes, or interact with us. We act as a “controller” of your personal data under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
1) Who we are
Controller: Pathway Nexus School
Address: 16 Brookstone Yard, Deptford, London SE8 3FY, United Kingdom
Telephone: +44 20 3984 7621
Email: info@pathwaynexus.website
We have not appointed a Data Protection Officer. For all privacy enquiries, please contact us using the details above.
2) Scope
This policy covers personal data we process when you browse our website, complete forms, subscribe to updates, apply or enrol on a programme, communicate with us, or take part in our events and career services. Our programmes are intended for adults (18+).
3) What data we collect
- Identity & contact data: name, email, phone number, country, city.
- Application & enrolment data: CV/portfolio links, education and employment history, goals, availability, admission notes and decisions.
- Financial data: payment status and amounts (processed by our payment providers; we do not store full card details).
- Communication data: messages, call notes, feedback, support requests.
- Usage & technical data: IP address, device and browser type, pages viewed, time on page, approximate location, cookies and similar technologies.
- Marketing preferences: opt-in/opt-out choices for email or messaging.
We do not intentionally collect special category data (e.g., health, religion) or perform credit checks.
4) How we obtain your data
- Directly from you (forms, email, phone, chat, interviews, assignments).
- Automatically via cookies/analytics when you use our website.
- From third parties where you ask us to (e.g., referees, portfolio platforms) or where permitted by law.
5) Purposes & legal bases
- Provide our services (applications, teaching, mentor calls, career support) — Contract / Legitimate interests.
- Improve and secure our website (analytics, debugging, preventing abuse) — Legitimate interests.
- Communicate with you (service messages, admissions decisions) — Contract / Legitimate interests.
- Marketing (newsletters, events) — Consent (you can withdraw at any time).
- Payments and invoicing — Contract / Legal obligation.
- Legal and regulatory (record-keeping, responding to lawful requests) — Legal obligation.
6) Cookies & similar technologies
We use essential cookies to make our site work and optional analytics cookies to understand performance. Where required, we will ask for your consent via a cookie banner. You can change your preferences at any time in your browser settings and (if available) via our “Cookie Settings”.
| Category | Purpose | Typical expiry |
|---|---|---|
| Essential | Security, load balancing, form submissions | Session to 12 months |
| Analytics (optional) | Page usage, device stats, site performance | 1–24 months |
7) Sharing your data
We share data only as needed with:
- Service providers (hosting, analytics, email/CRM, payment processing, video conferencing) under contracts that protect your data.
- Mentors and programme partners to deliver teaching and real-world briefs (limited to relevant information).
- Professional advisers and authorities where required by law or to protect our rights.
- Business transfers in the context of a reorganisation or acquisition, where permitted by law.
We do not sell your personal data.
8) International transfers
Your data may be transferred outside the UK/EEA. Where this happens, we use appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses (as recognised in the UK), plus additional measures where necessary.
9) Retention
- Website analytics: typically 14–24 months.
- Admissions (unsuccessful): up to 12 months after decision.
- Student records and financial data: up to 6 years after the end of the contract (or longer if legally required).
- Marketing data: until you withdraw consent or object, plus a short suppression period to respect your choice.
10) Security
We implement technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and staff training. No method is 100% secure; if we suspect a breach affecting your rights and freedoms, we will notify you and (where required) the UK ICO.
11) Your rights (UK GDPR)
You may have the right to request access, rectification, erasure, restriction, objection (including to direct marketing), and data portability. Where we rely on consent, you can withdraw it at any time.
How to exercise your rights: email info@pathwaynexus.website. We will usually respond within one month.
Complaints: You can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or by writing to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
12) Children
Our services are intended for adults (18+). We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us to delete it.
13) Third-party links
Our website may contain links to third-party sites. Those sites are governed by their own privacy policies, and we are not responsible for their content or practices.
14) Changes to this policy
We may update this Privacy Policy from time to time. Significant changes will be highlighted on this page. Please review it periodically.
15) Contact us
Questions or requests about this policy? Contact our privacy team at info@pathwaynexus.website or write to: Pathway Nexus School, 16 Brookstone Yard, Deptford, London SE8 3FY, United Kingdom.