1. Introduction
NxtGen Education Ltd. (“we”, “our”, “us”) is committed
to protecting your privacy and handling your personal
information securely.
This Privacy Policy explains:
- what personal data we collect,
- why and how we use it,
- who we share it with,
-
your rights under the UK General Data Protection
Regulation (UK GDPR) and the Data Protection Act.
2. Information We Collect
We may collect and process the following categories
of personal data:
-
Identification Details – full name,
date of birth, gender, national or student ID.
-
Contact Information – email address,
telephone/mobile number, postal and billing address,
emergency contact details, and social media handles
you provide.
-
Course & Learning Records –
course enrolments, modules chosen, attendance,
assessment submissions, grades, certificates,
CPD records, feedback, and learning progress.
-
Application & Enrolment Information –
enrolment forms, identity documents, prior qualifications,
references, and eligibility evidence.
-
Visa & Immigration Information –
passport details, visa status, Resident Permits/Sharecode,
where applicable.
-
Billing & Payment Information –
invoice and payment details, bank or card references,
sponsor/payment authorisation information.
-
Special Category Data – health,
disability or learning support needs, dietary
requirements for events, and other sensitive information
necessary to deliver reasonable adjustments.
-
Usage & Technical Data –
IP address, device and browser information, pages visited,
session times, cookies and analytics data from our website
and learning platforms.
-
Communications – copies of emails,
messages, chat transcripts, support tickets, surveys,
and testimonials where consent is given.
-
Employer / Sponsor Details –
employer name, employer contact, sponsor payment details,
and related documentation.
3. How We Collect Your Data
We collect personal data directly from you when you:
-
Complete NxtGen’s online enquiry, enrolment,
registration, or sign-up forms.
-
Provide documents or evidence as part of enrolment,
assessments, or support requests.
-
Communicate with NxtGen by email, phone, messaging apps,
live chat, or in person.
-
Interact with the NxtGen website, learning platform,
client portal, or social media pages, including through
cookies and analytics.
-
Make payments or financial arrangements for courses
or services.
We may also receive personal data from:
- Awarding bodies, regulators, and partner training organisations.
- Employers, sponsors, or referring organisations.
- Professional referees or third-party education providers.
- Payment processors, verification services, and other service providers.
- Publicly available business directories, websites, or social media profiles.
4. How We Use Your Information
We process your data to:
-
Enrol you on courses and manage registrations,
timetables, and attendance.
-
Deliver course content, assessments, and certification,
including issuing certificates and results.
-
Assess progress, provide feedback, and maintain
learning records.
-
Process payments, refunds, invoicing and manage
account details.
-
Communicate course updates, schedules, support,
and administrative information.
-
Provide reasonable adjustments and learning support
where special category data is provided.
-
Comply with legal, regulatory, and contractual obligations.
-
Improve courses, services, and the website through
monitoring, analytics and quality assurance.
-
Protect the safety, security and integrity of services,
including fraud prevention and investigation.
5. Legal Basis for Processing
We rely on the following lawful bases under UK GDPR:
-
Consent – where you have explicitly
agreed, for example to receive marketing communications
or provide sensitive information for support.
-
Contract – processing necessary to
perform the contract for course delivery and related services.
-
Legal Obligation – where UK law or
regulatory requirements require processing.
-
Legitimate Interests – for business
purposes that do not override your rights, including
service improvement, security, fraud prevention,
and internal administration.
Special Category Data
Where we collect health or disability information,
we rely on:
-
Your explicit consent under Article 9(2)(a), or
-
Substantial public interest under Article 9(2)(g)
where required by law or regulatory obligations.
6. Sharing Your Information
We may share your personal data with:
-
Awarding Bodies, Regulators and Accreditation Partners.
-
Immigration Authorities, such as UKVI,
where applicable.
-
Professional Advisors such as lawyers,
accountants and auditors.
-
Trusted Service Providers and Subcontractors,
including hosting providers, LMS platforms,
payment processors, email and analytics services.
-
Partner Training Providers or Third-Party Delivery Partners.
-
Legal or Regulatory Authorities where required by law.
We do not sell your data to third parties.
7. International Data Transfers
We do not share any learner data outside the UK.
If this changes in future, we will update this
policy and notify you.
8. Automated Decision-Making
We do not carry out automated decision-making or profiling
that has legal or similarly significant effects on you.
If this changes in future, we will update this policy
and notify you.
9. Data Retention
We retain personal data only for as long as necessary.
-
Application records – typically up
to 3 years after the closure of your application or service.
-
Financial and visa documents –
typically up to 6 years for compliance with legal obligations.
10. Your Rights
Under UK GDPR, you have the right to:
Right of access
Request a copy of your personal data.
Right to rectification
Correct inaccurate or incomplete data.
Right to erasure
Request deletion where applicable.
Right to restrict processing
Limit how your data is used.
Right to object
Object to certain processing activities.
Right to data portability
Receive data in a structured, commonly used format.
Withdraw consent
Withdraw consent where consent is the legal basis.
To exercise your rights, contact:
complaints@nxtgenedu.co.uk
You are not legally required to provide personal data
to us, but if you do not, we may be unable to process
your application or provide services.
11. Security
We implement technical and organisational measures to
safeguard your personal data against unauthorised access,
loss, or misuse.
12. Cookies & Website Tracking
We use cookies to help you navigate efficiently and perform
certain functions.
Cookies categorised as “Necessary” are stored in your browser
because they are essential for enabling basic site functionality.
We also use third-party cookies that help us analyse website
usage, store preferences, and provide relevant content and
advertisements. These cookies are stored only with your prior consent.
Necessary
Required for secure log-in and consent preferences.
These cookies do not store personally identifiable data.
Functional
Support functionality such as social sharing,
feedback and third-party features.
Analytics
Help us understand visitor behaviour and metrics
such as traffic sources and bounce rates.
Performance
Help us understand and analyse key website performance
indicators to improve the visitor experience.
Advertisement
Used to provide customised advertisements and analyse
advertising campaign effectiveness.
You can choose to enable or disable some or all cookies,
but disabling certain cookies may affect your browsing experience.
13. Complaints
If you are unhappy with how we handle your data,
please contact us first.
You also have the right to lodge a complaint with the
Information Commissioner’s Office (ICO).
Website:
ico.org.uk
Telephone: 0303 123 1113
14. Data Protection Officer
We are not currently required to appoint a Data Protection Officer.
However, any questions about this Privacy Policy should be directed to:
Data Protection Unit
Email:
quality@nxtgenedu.co.uk
