Legal
Privacy Policy
Clear information. Responsible handling. Respect for trust.
iCollege Life is committed to protecting the personal data of students, families, partners, and website visitors.
This Privacy Policy explains what information we collect, why we use it, how we protect it, and what rights individuals have under applicable data protection laws, including the EU GDPR and UK GDPR where relevant.
1. Who we are
iCollege Life is an education organisation based in Barcelona, working with students, families, and partners internationally.
iCollege Life is operated by iCollege Education Ltd, which acts as the data controller for personal data collected through our website, enquiries, admissions, and programmes.
2. Information we collect
We collect only the information needed for educational, administrative, communication, safeguarding, or service improvement purposes.
This may include:
- Contact and enquiry details
- Admissions and enrolment information
- Academic records, reports, and transcripts
- Assessment information, such as CAT4, English, maths, reading, or Highlands Ability Battery results, where used
- Information relevant to student support, wellbeing, or safeguarding
- Website usage and analytics data
3. How we use personal data
We use personal data to:
- Respond to enquiries
- Manage admissions and enrolment
- Deliver educational support and programmes
- Communicate with students, parents, and partners
- Support student progress, wellbeing, and safeguarding
- Provide assessment, mentoring, and pathway guidance
- Improve our services, systems, and website
We do not sell personal data.
We do not use personal data for automated decision-making.
4. Assessments and student insight tools
Where appropriate, iCollege may use assessments or profiling tools to understand better a student's starting point, learning profile, strengths, needs, and pathway options.
This may include academic baselines, CAT4-style cognitive profiling, English or maths checks, reading assessments, or tools such as the Highlands Ability Battery.
Assessment data is handled confidentially and used only to support responsible educational planning, mentoring, placement, or guidance.
5. Legal basis for processing
We process personal data only where we have a lawful basis to do so.
This may include:
- Consent
- Performance of a contract
- Legal obligations, including safeguarding responsibilities
- Legitimate interests connected to education, administration, communication, and service improvement
The GDPR requires personal data to be processed lawfully, fairly, transparently, and only for appropriate purposes.
6. Sharing personal data
We may share information only where necessary and appropriate with:
- Educators, mentors, tutors, or staff involved in student support
- Trusted academic providers, assessment providers, or pathway partners
- IT, administration, communication, or website service providers
- Safeguarding, legal, or regulatory authorities where required
All partners and providers are expected to use appropriate data protection standards.
7. Children and young people
We take particular care when handling data relating to children and young people.
Such information is used only where necessary for education, support, communication, safeguarding, legal obligations, or agreed programme delivery.
8. Storage and security
Personal data is stored using trusted systems and accessed only by authorised individuals.
We use reasonable organisational and technical measures to protect personal data from unauthorised access, loss, misuse, or disclosure.
Data is kept only for as long as necessary for the purpose it was collected, or as required for legal, safeguarding, contractual, or administrative reasons.
9. International data transfers
Because iCollege works with international students, families, providers, and partners, personal data may sometimes be processed outside the country where it was collected.
Where this happens, we use appropriate safeguards to help keep personal data protected. EU rules include safeguards for international transfers, such as adequacy decisions or standard contractual clauses, where relevant.
10. Your rights
Depending on the circumstances, individuals may have the right to:
- Access their personal data
- Correct inaccurate or incomplete data
- Request deletion of personal data
- Restrict or object to processing
- Withdraw consent where processing is based on consent
- Request a copy or transfer of their data where applicable
The ICO summarises these rights as including access, rectification, erasure, restriction, objection, and related rights.
To make a request, contact us using the details below.
11. Cookies
Our website may use cookies or similar technologies to support functionality, analytics, and website improvement.
12. Contact
For questions about this Privacy Policy or how personal data is handled, please contact:
13. Updates
We may update this Privacy Policy from time to time to reflect changes in law, technology, services, or organisational practice.
The latest version will always be available on this page.
Last updated: May 2026
We handle personal data carefully, responsibly, and only where needed.