Privacy Policy

1. Who we are and when this policy applies

Mavera Group Ltd trades as Level Up Education. We provide education guidance and student recruitment support to people considering higher education in the United Kingdom. For personal information we collect for our own website and consultancy purposes, we are the data controller and decide why and how that information is used.

This policy applies when you visit this website, submit an enquiry, contact us by phone, email, WhatsApp or social media, or engage with our education guidance services. A university, college or other organisation may have its own privacy notice when it receives your information.

2. Personal information we may collect

Website and initial enquiry information

• Your name, email address and telephone number.
• Your country, preferred study level and course interests.
• The contents of your message and records of our response.
• Basic technical and security information, such as request logs, device or browser information and IP address, where generated by our hosting or form-delivery providers.

Information used to provide student support

If you decide to work with us beyond an initial website enquiry, we may separately request information needed to assess options or support an application. This can include:

• Education history, qualifications, grades and transcripts.
• Language qualifications and certificates.
• Nationality, date of birth and immigration-related information.
• Identity or passport information where an institution or lawful application process requires it.
• Financial or funding information where relevant to student-finance guidance or an application.
• Information about accessibility, health or support needs where you choose to provide it and it is necessary to arrange support.

Our public website forms do not accept document uploads. Please do not include passport numbers, identity documents, transcripts, financial documents or other sensitive information in a website form.

3. How we collect information

We may collect personal information:

• directly from you or a parent or guardian acting for you;
• during consultations and correspondence with our team;
• from an institution, adviser or other organisation where you have asked for information to be shared or another lawful basis applies;
• automatically through limited hosting, security and form-delivery records.

4. Why we use information and our lawful bases

We only use personal information where data-protection law permits it. Depending on the circumstances, we rely on:

• Steps requested before a contract and contract: to discuss requested services, provide agreed guidance and assist with an application.
• Legitimate interests: to respond to enquiries, administer and improve our services, maintain appropriate records, secure our website and prevent misuse. We consider the impact on your rights before relying on this basis.
• Legal obligation: where records, disclosures or action are required by law, regulation, a court or a competent authority.
• Consent: where we ask for a specific, optional use and you can withdraw that consent. Where special-category information is necessary, we identify an appropriate condition and, where required, seek explicit consent.
• Vital interests:in an exceptional emergency where processing is necessary to protect someone's life.

We do not currently use your information for automated decision-making or profiling that produces legal or similarly significant effects. We do not sell personal information.

5. Website forms, spam protection and local storage

Contact and application enquiries are sent through FormSubmit to our business email address. FormSubmit acts as a service provider involved in transmitting the form information. Its own privacy terms also apply to its processing.

The forms use a hidden honeypot field, a simple arithmetic question and a short submission cooldown to reduce automated spam. The cooldown stores only the time of the most recent successful submission in your browser's local storage. It is not used for advertising or cross-site tracking.

We do not currently place analytics or advertising cookies. If that changes, we will update this policy and introduce any consent controls required by law.

6. Who we may share information with

We share personal information only where necessary and lawful. The recipients may include:

• universities, colleges or education providers you ask us to approach;
• service providers supporting hosting, email, form delivery, secure storage or business administration;
• professional advisers such as accountants, insurers or legal advisers;
• regulators, courts, law-enforcement bodies or other authorities where disclosure is required or permitted by law;
• a buyer, seller or adviser involved in a genuine business reorganisation, subject to appropriate confidentiality.

Cloudflare provides static website hosting and may process limited network and security information. FormSubmit processes information entered into our forms for email delivery. We expect providers handling personal information for us to protect it and use it only for the agreed purpose.

7. International transfers

Some students contact us from outside the UK, and some technology providers may process information in other countries. If personal information is transferred outside the UK, we use an available lawful mechanism, such as UK adequacy regulations, contractual safeguards or another permitted exception. If you ask us to send an application to an overseas institution, we will explain the relevant transfer where necessary.

8. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, safeguarding and dispute-management requirements. Our general approach is:

• general enquiries: normally up to 24 months after the last meaningful contact;
• client and application records: normally up to six years after our service ends, unless a shorter period is appropriate or a longer period is legally required;
• financial and accounting records: for the period required by tax and company law;
• unsuccessful, superseded or unnecessary documents: securely deleted earlier where there is no continuing reason to retain them.

We may retain anonymised information that no longer identifies an individual.

9. How we protect information

We use proportionate technical and organisational measures intended to protect personal information against accidental loss, unauthorised access, alteration or disclosure. Measures include limiting access to people who need the information, using appropriate authentication, maintaining secure systems, reviewing service providers and disposing of records securely.

No online service is completely risk-free. If you believe information has been sent to us insecurely or may have been compromised, contact us immediately.

10. Your data-protection rights

Depending on the circumstances, you may have the right to:

• request access to personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• request deletion or restriction of processing;
• object to processing based on legitimate interests;
• receive certain information in a portable format;
• withdraw consent where processing relies on consent;
• complain about how we have used your information.

These rights are not absolute and exemptions may apply. We may ask for information needed to verify your identity before acting on a request. We normally respond within one calendar month, although the law allows extra time for certain complex requests.

11. Data-protection complaints

If you believe we have handled your information incorrectly, email ani@maveragroup.co.uk and state that you are making a data-protection complaint. Please describe what happened, the information concerned and how you would like the matter resolved.

We will acknowledge a data-protection complaint within 30 days, investigate it appropriately, keep you informed and communicate an outcome without unjustifiable delay.

You can also complain to the Information Commissioner's Office (ICO). We encourage you to contact us first so we have an opportunity to resolve the concern. Visit ico.org.uk/make-a-complaint or call 0303 123 1113.

12. Children and students under 18

Our services may occasionally involve students under 18. We take additional care with their information and may require involvement or authorisation from a parent or guardian. A person under 18 should not send sensitive documents through this website and should speak with a parent, guardian or our team before providing detailed application information.

13. External websites and social media

Our website links to universities, social-media platforms and other third-party services. Those organisations control their own websites and processing. Please read their privacy information before providing personal data to them.

14. Changes and contact details

We may update this policy when our services, providers or legal obligations change. The date at the top shows the latest revision.

This privacy policy should be read together with our Data Protection Policy and Terms of Use.