Privacy Policy
This Privacy Policy explains how British University collects, processes, stores, and protects users’ personal data when they use the British University mobile application and related digital services.
Introduction
This Policy applies to all users of the App, including students, applicants, prospective students, participants in events and webinars, parents, guardians, and other individuals who use the App or submit information through the App.
British University processes personal data in accordance with applicable Georgian legislation, including the Law of Georgia on Personal Data Protection. The University applies appropriate technical and organizational measures to ensure the security, confidentiality, and lawful processing of personal data.
By using the App or submitting information through the App, the user confirms that they have read this Policy.
1. Data Controller
The data controller is British University.
Contact details:
University name: LLC British University
Identification code: 405365698
Address: 92 Vepkhistkaosani street, Tbilisi, Georgia
Email: info@britishuni.edu.ge
Website: www.britishuni.edu.ge
2. Personal Data Processed Through the App
Depending on how the user interacts with the App, British University may process the following categories of personal data:
Account and identification data: name, surname, email address, phone number, user ID, authentication details, and account status;
Applicant, student, or participant data: programme of interest, registration information, submitted forms, event or webinar registration, attendance information, academic or administrative requests, and related communication;
Technical and device data: IP address, device type, operating system, browser or app version, language settings, login time, usage logs, diagnostic data, and security logs;
Communication data: messages, requests, feedback, support inquiries, form responses, and notification preferences;
Media and participation data: participation in webinars, live sessions, recorded sessions, photographs, video or audio recordings where applicable and where users are properly informed;
Financial or payment-related data: payment status, transaction reference, invoice-related information, or other financial records where applicable. British University does not intentionally collect full payment card data unless this is processed through an authorized payment provider;
Uploaded or submitted documents: documents submitted by users for admissions, registration, events, academic administration, or other university-related purposes.
British University processes only the data necessary for the relevant purpose.
3. Purposes of Processing
British University may process personal data through the App for the following purposes:
To create and manage user accounts;
To provide access to educational content, webinars, live sessions, announcements, forms, and university information;
To manage event registrations, applications, student or applicant inquiries, and academic or administrative requests;
To communicate with users about university services, events, academic activities, deadlines, updates, and support matters;
To send service notifications, reminders, announcements, and, where permitted, informational or promotional communications;
To ensure the security, stability, functionality, and improvement of the App;
To prevent unauthorized access, misuse, fraud, or technical incidents;
To comply with legal, regulatory, academic, financial, accounting, and reporting obligations;
To protect the rights, property, security, and legitimate interests of British University, users, students, staff, and third parties.
4. Legal Grounds for Processing
Depending on the specific activity, British University processes personal data on one or more of the following legal grounds:
Consent of the data subject;
Performance of a contract or steps taken at the request of the data subject before entering into a contract;
Compliance with legal obligations;
Performance of statutory, academic, administrative, or university-related duties;
Legitimate interests of British University or a third party, provided that such interests do not override the rights and freedoms of the data subject;
Protection of vital interests, public interest, or other grounds permitted by applicable law.
Where consent is used as the legal basis, the user may withdraw consent at any time, unless another lawful ground for processing applies.
5. Use of Third-Party Service Providers
The App may use third-party service providers for hosting, authentication, analytics, notifications, video streaming, webinar delivery, forms, email communication, payment processing, technical support, and security.
Such providers may include categories such as cloud hosting providers, authentication providers, video or webinar platforms, analytics providers, communication tools, form providers, payment processors, and technical service providers.
These providers may process personal data only for the relevant service purpose and, where required, on the basis of appropriate contractual, technical, and organizational safeguards.
6. International Data Transfers
Some third-party services used by the App may store or process data outside Georgia.
Where personal data is transferred to another country or international organisation, British University will ensure that such transfer is carried out in accordance with applicable law and with appropriate safeguards where required.
7. Push Notifications and Communications
The App may send push notifications, email messages, SMS messages, or other communications related to university information, events, services, deadlines, security notices, or academic and administrative updates.
Users may manage certain notification settings through the App or their device settings.
Where communications are sent for direct marketing purposes, users will be informed about their right to withdraw consent or object to such communication through a simple and accessible mechanism.
8. Minors
The App may be accessed by prospective students, applicants, school pupils, parents, guardians, and other users.
Where British University processes the personal data of minors and consent is required by law, British University may request the involvement or consent of a parent, guardian, or legal representative.
British University takes into account the best interests of minors when processing their personal data.
9. Live Sessions, Webinars, and Recordings
The App may provide access to live sessions, webinars, online meetings, workshops, or recorded educational and informational content.
Where sessions are recorded, users will be informed through appropriate means. Recordings may be used for educational, communication, quality assurance, university-related, or archival purposes.
Users must not record, copy, publish, or distribute sessions or recordings without authorization from British University.
10. Data Storage
Personal data is stored only for the period necessary to achieve the relevant purpose, comply with legal obligations, protect legitimate interests, resolve disputes, maintain academic and administrative records, or ensure security.
Storage periods may differ depending on the category of data. For example:
Account and login data may be stored while the account is active and for a reasonable period afterward;
Application, student, academic, and administrative records may be stored in accordance with applicable legal, academic, and university retention requirements;
Financial and accounting records may be stored for the period required by law;
Technical logs and security data may be stored for a limited period necessary for security, diagnostics, and incident prevention;
Recordings and media files may be stored for the period necessary for the relevant educational, university-related, or legal purpose.
After the applicable retention period expires, data is deleted, destroyed, anonymized, or archived where permitted by law.
11. Data Subject Rights
Users have the rights provided by the Law of Georgia on Personal Data Protection, including the right to:
Receive information about the processing of their personal data;
Access their personal data and request a copy;
Request correction, updating, or completion of inaccurate or incomplete data;
Request termination of processing, deletion, or destruction of data where permitted by law;
Request blocking of data in cases provided by law;
Request data portability where applicable;
Withdraw consent where processing is based on consent;
Object to or contest automated decision-making where applicable;
Appeal or submit a complaint in accordance with applicable law.
Requests may be submitted through the official contact channels of British University.
12. Security Measures
British University applies appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss, destruction, or unlawful processing.
Such measures may include access controls, authentication, logging, staff confidentiality obligations, internal policies, staff training, secure systems, incident management procedures, and periodic review of security practices.
13. Data Security Incidents
If a personal data security incident occurs, British University will assess the incident, document it, take appropriate measures to reduce possible harm, and notify the relevant authority and/or data subjects where required by applicable law.
14. Updates to this Notice
This App-Specific Privacy Notice may be updated from time to time due to changes in the App, university processes, legal requirements, or technical systems.
The updated version becomes effective upon publication unless a different effective date is indicated.