Green & Orange Ltd ("we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you interact with our website, use our student advisory services, or submit higher education application details.
Green & Orange Ltd is registered as a Data Controller with the UK Information Commissioner’s Office (ICO) under registration reference ZB924247.
Green & Orange Ltd ("we," "us," or"our") is an educational advisory and recruitment agency registeredin England and Wales under Company Registration Number 11359711. Our registeredoffice address is 73 Greenfield Road, London, England, E1 1EJ, United Kingdom.
Green & Orange Ltd acts as the Data Controller for thepersonal information collected through our website, student application forms,and advisory services. We are registered with the UK Information Commissioner’sOffice (ICO) under registration reference ZB924247.
We have appointed a designated Data Protection Lead to oversee our privacy compliance and handle any enquiries regarding your personal data:
Contact details
Data Controller: Green & Orange Ltd
Data Protection Lead: Naimul Islam
Email address: info@greennorange.com
Postal address: 73 Greenfield Road, London, England, E1 1EJ,United Kingdom
Data refers to facts, details, or information recorded in electronic systems or physical paper filing systems.
Personal Data means any information relating toan identified or identifiable living individual. This includes directidentifiers (such as your name or email address) and indirect identifiers (suchas an IP address, student reference number, or location details) that canidentify you directly or indirectly.
Under the UK GDPR, we process your personal data in accordance with seven core principles. Personal data shall be:
1. Lawfully, fairly, and transparently processed.
2. Collected for specified, explicit, and legitimate purposes.
3. Adequate,relevant, and limited to what is necessary.
4. Accurateand, where necessary, kept up to date.
5. Keptfor no longer than is necessary for the processing purpose.
6. Processedwith appropriate security, integrity, and confidentiality.
6. Managedunder our accountability to demonstrate full compliance.
Underthe GDPR, we must always have a lawful basis for using personal data. This maybe because the data is necessary for our performance of a contract with you,because you have consented to our use of your personal data, or because it isin our legitimate business interests to use it.
Your personal datawill, or may be used for one of the following purposes:
• Providing and managing your Account
• Providing and managing your access to our Site
• Personalising and tailoring your experience onour Site Supplying our products and services to you. Your personal details arerequired in order for us to enter into a contract with you.
• Personalising and tailoring our products andservices for you.
• Communicating with you. This may includeresponding to emails or calls from you. Supplying you with information byemail and/or post that you have opted in to (you may unsubscribe or opt out atany time by clicking the unsubscribe button in our email or contacting us viaemail).
• Analysing your use of our Site and gatheringfeedback to enable us to continually improve our Site and your user experience.
• With your permission and/or were permitted bylaw, we may also use your personal data for marketing purposes, which mayinclude contacting you by email and/or telephone and/or text message and/orpost with information, news, and offers on our products and/or services. Youwill not be sent any unlawful marketing or spam.
Wewill always work to fully protect your rights and comply with our obligationsunder the GDPR and the Privacy and Electronic Communications (EC Directive)Regulations 2003, and you will always have the opportunity to opt out. ThirdParties whose content appears on our Site may use third-party Cookies, asdetailed below in Part 14. Please refer to Part 14 for more information oncontrolling cookies. Please note that we do not control the activities of suchthird parties, nor the data that they collect and use themselves, and we adviseyou to check the privacy policies of any such third parties.
We may collect, use, store and transfer different kinds of personal data about you, which we have grouped together as follows:
Identity Data includesfirst name, last name, username or similar identifier, marital status, title,date of birth and sex.
Contact Data includes email addresses includes email address andtelephone numbers.
Technical Data includes internet protocol (IP) address, your logindata, browser type and version, time zone setting and location, browser plug-intypes and versions, operating system and platform, device ID and othertechnology on the devices you use to access this website. We collect thispersonal data by using cookies, server logs and other similar technologies.Please refer to our cookiepolicy for further details.
Interests and Profile Data includes, your interests, your universitypreferences, your course preferences, and other information about you that maybe relevant to an application to a Partner University.
Usage Data includes information about how you interact with anduse our website, products and services.
Marketing and Communications Data includes your preferences inreceiving marketing from us and our third parties and your communicationpreferences.
Purpose Data Used Lawful Basis Responding to enquiries Contact dataLegitimate interests Processing university applicationsIdentity and profile dataContractEmail marketingContact data Consent Website analytics Technical dataLegitimate interests
This website is not intended for anyone under the age of 17, as our partneruniversities require students to be 18 on entry to higher education.
We collect personal information, such as names, addresses, email addresses, andtelephone numbers, when submitted by you during the registration process. Whenyou register with us, you are agreeing that we can collect information fromyou, store it and share it with relevant others, for example:
Partner universities, Student finance and admissions providers, CRM providers, IT hosting providers, Email marketing provider, Professional advisers.
We collect personal information through different methods:
Direct Interactions: Information you provide directly when filling out online forms, emailing us, booking a consultation, or submitting university application files.
Automated Technologies: Technical usage data collected automatically as you browse our website through standard browser cookies and analytical logs.
Third Parties & Public Sources: Academic verification bodies, UCAS, educational partners confirming qualifications, student finance verification sources, or public registers.
Your interactions with us. You may give us your personal data by filling in online forms or by corresponding with us by phone, email or otherwise. This information includes personal data you provide when you:
- Register with us
- Create an account on our website
- Subscribe to publications
- Request marketing to be sent to you
- Enter a competition, promotion or survey
- Provide feedback or contact us.
When we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place. Where transfers occur to countries without a UK adequacy decision, we rely on standard contract safeguards, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to EU Standard Contractual Clauses.
We have implemented appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, altered, disclosed, or accessed without authorization. Access to your personal data is strictly limited to authorized employees, advisors, and service providers who have a legitimate business need to know.
We store personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, accounting, and reporting requirements:
General Enquiries: Retained for 2 years from the date of last contact.
Successful Applicant Records: Retained for 6 years following course completion or service termination to satisfy statutory compliance.
Marketing Preferences: Retained until you withdraw consent or request to unsubscribe.
Under UK GDPR, you have the following rights regarding your personal information:
1. Right of Access: Request copies of your personal data.
2. Right to Rectification: Request correction of inaccurate or incomplete data.
3. Right to Erasure ('Right to be Forgotten'): Request deletion of data where legal grounds allow.
4. Right to Restriction: Request that we temporarily restrict processing.
5. Right to Data Portability: Request transfer of your data to another controller in a structured format.
6. Right to Object: Object to processing based on legitimate interests or direct marketing.
7. Right to Withdraw Consent: Withdraw consent at any time where processing relies on consent
To exercise any of your legal rights or ask questions about this Privacy Policy, please contact us want 1. Data Controller: Green & Orange Ltd
2. Attn: Naimul Islam (Data Protection Lead)
3. Email address: info@greennorange.com
4. Postal address: 73 Greenfield Road, London, England, E1 1EJ, United Kingdom
If you have concerns about how we process your data, please contact our Data Protection Lead first so we can resolve the matter. You also have the right to lodge a formal complaint at any time with the UK data protection supervisory authority:
Authority: Information Commissioner’s Office (ICO)
Website:ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We review and update this Privacy Policy regularly to ensure compliance with updated laws and ICO guidance. Any changes will be posted on this page with an updated effective date and version number.
Effective Date: September 21, 2026.
Version Number: 2.0
