Privacy Policy
How Advex Direct Ltd collects, uses and protects personal data across the ADVEXDIRECT platform. This policy covers our recruitment partners, institutional partners, and the student data our partners submit through us.
Who we are
Advex Direct Ltd (“ADVEXDIRECT”, “we”) is a company registered in England & Wales, company number 00000000, with its registered office at 4th Floor, 128 Aldersgate Street, London EC1A 4JQ. We are the data controller for personal data processed through this website and the ADVEXDIRECT partner portal.
For student application data submitted by our recruitment partners, we act as a processor on behalf of the partner institution and as a controller for our own compliance and record-keeping obligations.
Data we collect
Partner and institutional contacts. Name, job title, employer, business email, business telephone, country of operation, and the content of your enquiries and correspondence with us.
Agency verification data. Company registration documents, trading addresses, beneficial ownership details, references and counsellor records, collected during vetting.
Student application data. Where a partner submits an application through the portal, this includes identity details, contact details, academic history, qualification documents, English language evidence, financial sponsorship evidence and immigration history.
Technical data. IP address, browser and device information, and portal usage logs, including which user accessed or amended a given application record.
Why we process it
To assess and verify recruitment agencies before granting portal access, and to monitor conduct on an ongoing basis.
To transmit, check and track student applications to partner institutions, and to reconcile confirmed enrolments.
To detect and prevent fraudulent, duplicated or misrepresented applications.
To respond to enquiries, administer partner accounts, and provide support.
To comply with our legal obligations, including record-keeping required by partner institutions and applicable immigration compliance frameworks.
Legal bases
We rely on contract where processing is necessary to perform our agreement with a partner agency or institution; legitimate interests for agency vetting, fraud prevention, service improvement and business correspondence; legal obligation for statutory record-keeping and compliance disclosures; and consent where we send optional partner communications, which you may withdraw at any time.
Sharing your data
We share student application data with the partner institutions to which an application is submitted, and with verification bodies used to authenticate qualification documents.
We share partner contact details with our regional offices where they administer your account.
We use third-party processors for cloud hosting, email delivery, document storage and customer relationship management. Each is bound by a written processing agreement.
We do not sell personal data, and we do not share it for third-party advertising.
International transfers
We operate offices in the United Kingdom, the United Arab Emirates, Nigeria and Bangladesh, and personal data may be transferred between them. Transfers outside the UK are made under the UK International Data Transfer Agreement, UK Addendum to the EU Standard Contractual Clauses, or an applicable adequacy regulation, together with a transfer risk assessment where required.
Retention
Enquiry correspondence is retained for 24 months. Agency verification records are retained for the life of the agreement and six years afterwards, to meet audit and institutional compliance requirements. Student application records are retained for six years from the end of the relevant intake, or longer where a partner institution requires it. Portal access logs are retained for 24 months.
Your rights
Subject to the conditions in UK data protection law, you have the right to access your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent where consent is the basis of processing.
To exercise any of these rights, contact compliance@advexdirect.com. We respond within one month. Where we process student data on behalf of a partner institution, we will refer the request to that institution and assist them in answering it.
You may also complain to the Information Commissioner's Office at ico.org.uk. We would ask you to raise the matter with us first.
Security
Access to the portal is restricted by role and protected by individual credentials; every action against an application record is logged against a named user. Data is encrypted in transit and at rest, documents are stored in access-controlled repositories, and we review permissions on a scheduled basis. Personnel with access to partner or student data are subject to confidentiality obligations and receive data protection training.
Cookies
The public website uses strictly necessary cookies for security and session handling, and analytics cookies to understand which pages partners use. Analytics cookies are set only with your consent, which you may change at any time. The partner portal uses only strictly necessary cookies.
Changes to this policy
We may update this policy to reflect changes in our operations or the law. Material changes will be notified to registered partners by email at least 14 days before they take effect. The date at the top of this page shows the current version.