Privacy Statement

This Privacy Statement explains what personal data UniBridgeEurope ("we", "us") collects when you use unibridgeeurope.com and our services, why we collect it, and the rights you have over it.

Who is responsible

The controller of your personal data is UniBridgeEurope, …, …, Germany, e-mail [email protected].

Data we collect

Account data: when you create an account or sign in with Google or Facebook, we receive your name and e-mail address, and your WhatsApp number if you enter one when signing up. If you sign in with Google or Facebook we do not receive or store your Google or Facebook password.

Information you provide: details you enter in forms, messages you send us, and any documents you upload to prepare your application.

Technical data: basic log information such as IP address and browser type, used to keep the service secure and working.

Sign-up details: when you create an account, we also store your country (the country of residence you entered in our UK eligibility check with the same e-mail address, otherwise the country your IP address points to; you can change it in your profile at any time), the display currency you had chosen, the form or button you signed up through and the page you were on, and the IP address (with the country it points to), browser type and browser language settings of that request. If you sign up with Google, we also store your family name and profile picture; if you sign up with Facebook, your family name.

How we use your data

To create and manage your account, authenticate you and keep you signed in.

To provide our advisory services, respond to your enquiries and process your application materials.

To operate, secure and improve the website.

To set up your new account with your country and currency, to see which parts of the site lead to sign-ups, and to detect duplicate or fraudulent accounts, for example misuse of the referral programme.

Your activity while signed in

While you are signed in, we record the pages you open on the site and how long each one is on screen, and, for the first page of a visit, the website or campaign link that brought you there. Pages you opened in the same browser tab just before signing in are recorded when you sign in.

We also record some of your actions: WhatsApp, e-mail and phone links you click, links you follow to university and programme websites, programmes you open, UniFinder searches, referral links you share, and account actions such as signing in or out, changing your profile or password, removing a saved university or programme, deleting a document or review, telling us your documents are ready and requesting a strategy call.

Our advisers use this record to understand which universities and programmes interest you and to support your application, and we use it to improve the site. It is not used for advertising.

No cookie is set for this and nothing is stored in your browser. Nothing is recorded while you are signed out.

Google Sign-In

If you choose "Continue with Google", Google shares your name, e-mail address and profile basics with us so we can create or access your account. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Facebook Login

If you choose "Continue with Facebook", Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland shares your first and last name, your e-mail address and a user ID for our site with us so we can create or access your account. Facebook shares your e-mail address only if you allow it. We do not receive your Facebook password, friends, posts or other profile data, and we never post on Facebook for you.

We use these data only to create your account and sign you in (Art. 6(1)(b) GDPR), not for advertising. To show the button, our sign-in and sign-up forms load Meta’s Facebook SDK, which sends your IP address and browser information to Meta; offering this sign-in option is our legitimate interest (Art. 6(1)(f) GDPR). Meta processes the sign-in as an independent controller under its own privacy policy (facebook.com/privacy/policy) and may also do so in the United States, under the EU-U.S. Data Privacy Framework.

Deleting your data: choose "Delete account" under "My account", or write to [email protected] — this deletes your account together with the data we received from Facebook. Removing UniBridgeEurope in your Facebook settings (Settings & privacy › Settings › Apps and websites) stops Facebook from sharing data with us, but does not delete your account with us.

Payments

When you book a package, your payment is processed by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin 2, Ireland. We pass Stripe your name, your e-mail address, the package and the amount. You enter your card or bank details on Stripe’s payment page, never on ours; we receive only the payment status and the invoices.

Stripe also uses payment data to prevent fraud and to meet its own legal duties, as an independent controller (stripe.com/privacy). Stripe may process data outside the EU, for example in the United States, under the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

For every booking we store the package, the prices, credits and discounts, the payment and instalment status, the invoices, and when you accepted our terms and asked us to start before the withdrawal period ended, with the IP address of that request.

We need these data to perform your contract (Art. 6(1)(b) GDPR) and to meet our tax and accounting duties (Art. 6(1)(c) GDPR); preventing payment fraud is our legitimate interest (Art. 6(1)(f) GDPR).

WhatsApp

If you write to us on WhatsApp (+49 160 98465118) or we write to you there, we receive your WhatsApp number, the name in your WhatsApp profile, the messages and files you send (such as photos, voice messages and documents), and whether our messages were delivered and read. Our team reads and answers them in our advisers’ system and in the WhatsApp Business app on our company phone.

If the number matches the phone number in your account or one you gave us in a form (for example the UK eligibility check, a free-guide request or a call-back request), we link the chat to your account or enquiry, so your adviser sees it alongside your application. We do this to answer you and provide our services (Art. 6(1)(b) GDPR) and because keeping all our correspondence with you in one place is our legitimate interest (Art. 6(1)(f) GDPR).

You can also connect your WhatsApp yourself: through a personal sign-up link we send you in the chat, or with “Connect WhatsApp” in your account, which opens WhatsApp with a short message and a one-time code for you to send. Either way we save the number in your account and link the chat to it (Art. 6(1)(b) GDPR). If you agree to updates, we send you news about your applications and deadlines on WhatsApp (Art. 6(1)(a) GDPR) — you can switch them off at any time in your account. If you tell us in the chat who you are, for example your e-mail address, our team may link the chat to your account by hand, and may add photos and documents you send us there to your application documents.

For these messages we use the WhatsApp Business Platform of WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland (part of Meta), which processes them on our behalf. Meta may also process them in the United States, under the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. Your use of WhatsApp itself is subject to WhatsApp’s own terms and privacy policy (whatsapp.com/legal).

Chats are deleted from our system automatically 3 years after the last message, together with their files. You can ask us at any time to delete them earlier, in our system and in the app on our company phone.

Sharing

We do not sell your personal data. We share it only with service providers who help us run the service (for example hosting, authentication and payment processing) and where required by law.

Retention

We keep your data for as long as your account is active or as needed to provide our services. You can ask us to delete your account and associated data at any time.

The record of your pages and actions described under "Your activity while signed in" is kept for 13 months; older entries are deleted automatically every month.

The IP address and browser type stored with your sign-up are deleted after 13 months; the other sign-up details are kept with your account.

Bookings, payments and invoices are kept for as long as tax and commercial law require (up to 10 years), even if you delete your account; they are then no longer linked to an account.

Your rights

You may request access to, correction of, or deletion of your personal data, and you may withdraw consent at any time. To exercise these rights, contact us at [email protected].

You may also object to processing based on our legitimate interests, ask for your data in a portable format, and complain to a data protection authority, for example the one responsible for us: the Landesbeauftragte für den Datenschutz Niedersachsen.

Contact

Questions about this statement? Write to [email protected].