Privacy Notice for School and University Staff
What is the purpose of this document?
BridgeU is a "data controller". This means that we are responsible for deciding how we hold and use personal information about you. Where we act as a data controller, we are required under data protection legislation to notify anyone who provides personal data to us, either directly or through a third party, of the information contained in this Privacy Notice.
You are being provided with a copy of this Privacy Notice because you use or have expressed an interest in our platform. The notice makes you aware of how and why your personal data will be used, and how long it will usually be kept for. It provides you with certain information that must be provided under the General Data Protection Regulation ((EU) 2016/679) (GDPR) and UK data protection legislation.
For the purposes of the relevant data protection legislation, the data controller is BridgeU Limited (company no. 08989432), with registered address at 1st Floor Suncourt House, 18-16 Essex Road, London, England, N1 8LN so when we mention "BridgeU", "we", "us" or "our" in this Privacy Notice, we are referring to this company which is responsible for processing your data. Bridge U is part of the Kaplan Group of companies however we will not sell your personal data (or any other data you provide us with) in any circumstances.
Please note there is a separate Privacy Notice for Students and Parents which can be found here.
Data protection principles
We will comply with data protection law and principles, which means that your data will be:
- Used lawfully, fairly and in a transparent way
- Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes
- Relevant to the purposes we have told you about and limited only to those purposes
- Accurate and kept up to date
- Kept only as long as necessary for the purposes we have told you about
- Kept securely.
The kind of information we hold about you
We collect, store and use the following personal data via our website:
- The IP address of the device you used to access our website;
- Website browsing and engagement data;
- Any information that you share as part of completing an inquiry, live chat, contact form or event form on our website;
- Any personal data that you provide to us as part of a survey on our website.
In connection with your account on the BridgeU platform, we will collect, store, and use the following categories of personal information about you:
- Your contact and personal information including name, title, name of school or university, city, state and country, telephone number, personal or work email address, and gender.
- A photograph of you where this is uploaded by you.
- Any information you provide to us during any activity carried out and/or uploaded through BridgeU.
- All of the data contained within any further and higher education application forms and supporting documentation prepared and/or submitted through the BridgeU platform such as references.
- The IP address of the device you used to access the BridgeU platform.
How is your personal information collected?
We collect personal information about you from the following sources:
- The school or college or university where you work.
- If your school links their student system to our platform we may also receive information from that system in order to set you up an account on the Bridge U platform.
- Through application portals, such as the Common App, where a student has synced their account in those portals with BridgeU.
- From our specialist data research partners, paid for databases and publicly available resources such as Linkedin.
How we will use information about you
We will use the personal information we collect about you to:
- Communicate with you about the BridgeU platform, products and services, events, webinars, schools, universities, courses or other programs and the application process
- To allow university or school staff to communicate directly with you
- Enable the school to manage, submit and track the schools’ part of student applications
- To improve the function of the Website
- Keep records related to our processes
- Comply with legal or regulatory requirements.
If you are school staff, from time to time we may communicate with you regarding courses and universities which your students may be interested in, including providing you with additional and/or promotional information using the contact details that you have provided to us. You may also be contacted by universities about courses your students may be interested in or to request a call or a visit. You may be contacted by messages read by logging onto the website and/or by email but we do not share your email address with a university unless you agree to when prompted in the platform.
If you are university staff, from time to time we may communicate with you regarding schools where students may be interested in studying courses provided by your institution. You may also be contacted by school staff about these courses. We may also provide you with additional and/or promotional information using the contact details that you have provided to us. You may be contacted by messages which can be read by logging into the website and/or by email but we do not share your email address with a school unless you agree to when prompted in the platform.
You can ask to stop receiving these communications by email at any time by clicking on the unsubscribe links. We will not sell your personal data (or any other data you provide us with) in any circumstances.
You, and we, also have legitimate interests in our processing your data to directly submit and track transcripts, reference letters, and other application documents.
We also may use your personal data for our internal business purposes. This is in our legitimate interests in order to operate as a business and monitor and improve the products and services that we provide. Where possible we will anonymise this information. Please contact us using the contact details in this Privacy Notice if you would like more information.
If you fail to provide personal information
If you fail to provide information, such as your email address, we will not be able to create a user profile for you on our platform and we may not be able to communicate with you regarding our products or services.
Automated technologies or interactions
As you interact with our website and our platform, we may automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies.
Why might you share my personal information with third parties?
We will only share your personal information with the following third parties:
- the school or university (who have provided, or would provide you with access to this platform) so that your institution can monitor the effectiveness and use of the platform. We may also share data with the school’s information management system where they have given us access to it.
- If you are School Staff, institutions to which your students have applied and where you are providing a recommendation, reference or otherwise are included in supporting documentation to an application
- institutions that contact you on the platform but only if you agree to do so
- third party providers such as accountants, auditors and advisers, in order to fulfil our legal, regulatory and other obligations.
- As we are part of a group of companies we may share your personal data with other entities in our group to access administrative support services, as part of our regular reporting activities on company performance, in the context of re-organising or changing the structure of the group or for system maintenance support and hosting of data. If we sell part, or all, of our business to another company, all of the information we have collected about you will be sold with it. If we partner with a new company we might need to share your information with them.
- application portals such as Parchment and the Common App (additional portals may be supported in the future).
All third-party service providers and other entities in the group are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
Our website may contain links to third party websites. If you follow a link to any of those third-party websites, please note that they have their own privacy policies and that we do not accept any responsibility or liability for their policies or processing of your personal information. Please check these policies before you submit any personal information to such third-party websites.
The personal information we process may be processed by staff operating outside of the EEA who work for us or for one of our business partners or service providers. Please contact the Data Protection Officer for further details on the specific safeguards applied to the export of your personal information outside the EEA.
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need-to-know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality. Details of these measures may be obtained from the Data Protection Officer.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
How long will you use my information for?
We will retain your personal information in line with our Retention Schedule in order to provide continued services, to conduct statistical and other analyses of our services, to develop and augment our algorithms and processes, and to ensure that we can respond to any queries raised within a reasonable period. After this period, we will securely destroy your personal information in accordance with our Data Retention Policy.
Rights of access, correction, erasure, and restriction
Your rights in connection with personal information
Under certain circumstances, by law you have the right to:
- Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
- Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
- Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
- Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
- Request the transfer of your personal information to another party.
If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact the Data Protection Officer in writing.
Data protection officer
We have appointed a data protection officer (DPO) to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal information, please contact the DPO.
Email address: DPO@Bridge-U.com
If you are an EU national or resident in an EU country, we have a Representative in the EU who you can write to:-
Kaplan Ireland Education Limited, 13/14 Aungier Street, Dublin 2, D02 WC04 Ireland
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues however we would welcome the opportunity to deal with your concerns before you approach the ICO so please contact us in the first instance.