Who we are
Millbank Education helps adults in the UK find and apply for university courses. We are Millbank Education Limited, at Unit 4, 113-115 Fonthill Road, London N4 3HH.
Registered office: 124 City Road, London EC1V 2NX. Registered in England and Wales, company number 14566008.
We are the “data controller” for the information you give us. That means we decide how it is used and we are responsible for looking after it. We are registered with the Information Commissioner’s Office (ICO), registration number ZB548242.
You can contact us about your data at any time: email [email protected], call 020 3488 6212, or write to Millbank Education, Unit 4, 113-115 Fonthill Road, London N4 3HH.
What we collect
We only ask for what we need to help you find and apply for a course.
When you apply or ask us to contact you
- Contact details: your name, mobile number and email address.
- Your course choices: the course, level and subjects you are interested in, where and when you would like to study, and whether you can attend on weekdays.
- Eligibility answers: your date of birth, your status in the UK (for example British citizen, settled status or a visa), how long you have lived in the UK, your highest qualification, whether you have studied at university or had a student loan before, and whether English is your first language.
We save your answers as you complete each step of the form, so that if you stop part way through, an adviser can still call you to help you finish.
When you use the course finder
Your answers to the questions, the courses we suggest, and, if you ask us to send you the suggestions, your first name and mobile number or email address.
When you talk to us
Notes from calls, emails and WhatsApp messages with your adviser, and any documents you choose to share with us later in the process (such as ID, a share code or certificates).
When you visit the website
Basic technical information that every website receives, such as your IP address and browser type, used to keep the site working and secure. If you accept optional cookies, we also collect information about how you use the site (see Cookies).
Your status in the UK and your nationality are not “special category” data under the law, but we know they are personal, and we treat them with extra care. We do not ask for health information, religion or ethnicity.
Why we use it, and our legal reasons
Data protection law says we must have a valid reason (a “lawful basis”) for using your information. Here is what we do and why.
| What we do | Our legal reason |
|---|---|
| Contact you about your application, check which courses and funding you may be eligible for, and help you apply | You asked us to. This is a step you have asked us to take before we provide our service (“contract”), and you have also agreed to us contacting you (“consent”). |
| Send your application to the university or college you choose | You asked us to, as part of our service (“contract”). We always check with you first. |
| Send you course suggestions from the course finder | You agreed to it (“consent”). |
| Keep records of our conversations and decisions | It helps us give you good advice and deal with any questions or complaints (“legitimate interests”). |
| Measure how people use the website, so we can improve it | Only if you accept optional cookies (“consent”). |
| Keep the website secure and stop spam | We need to protect our service and our users (“legitimate interests”). |
| Meet our legal and regulatory duties, such as keeping financial records | The law requires it (“legal obligation”). |
We do not sell your data, and we do not use it to make automatic decisions about you. Our form gives your adviser an early indication of whether student finance is likely, but a person always makes the final judgement with you.
You can withdraw your consent at any time. Just tell us, or use the for cookies.
Who we share it with
- Universities and colleges: when you decide to apply for a course, we share your application details with that university or college. They then become responsible for your data under their own privacy policy.
- Student Finance England: we may help you apply for student finance, but you send that application yourself. We do not send your data to Student Finance England without you knowing.
- Service providers who work for us, under contracts that require them to keep your data safe and only use it on our instructions:
- Cloudflare (website hosting and security)
- Supabase (the secure database where form answers are stored)
- Resend (sends email notifications to our team)
- Microsoft (our business email)
- Calendly (if you book a call through our booking calendar)
- WhatsApp, owned by Meta (if you choose to message us there)
- Google Analytics and Microsoft Clarity (only if you accept optional cookies)
- Authorities: if the law requires us to, for example to prevent fraud.
Data stored outside the UK
Some of our service providers store or process data outside the UK, for example in the European Union or the United States. When this happens, we make sure your data is protected to UK standards, using the safeguards the law allows. These include countries the UK recognises as having good data protection, the UK–US “Data Bridge”, or the UK’s approved contract terms.
How long we keep it
- If you enrol on a course through us: for 6 years after your course starts, because universities can query enrolments and we must keep financial records.
- If you do not go ahead: for 2 years after we last had contact with you, so we can help if you come back for a later start date. After that, we delete it.
- Website analytics: no longer than 14 months.
You can ask us to delete your data sooner at any time (see Your rights).
Your rights
You have the right to:
- ask for a copy of the information we hold about you
- ask us to correct anything that is wrong or incomplete
- ask us to delete your information
- ask us to limit how we use it, or object to how we use it
- ask us to send your information to you or another organisation in a common format
- withdraw your consent at any time, where we rely on consent
To use any of these rights, email [email protected] or call us. It is free, and we will reply within one month. We may need to check your identity first.
Cookies
Cookies are small files a website saves on your device. We only use optional cookies if you say yes on the cookie banner, and you can change your mind at any time with the link at the bottom of every page.
| Type | What it does | When it is used |
|---|---|---|
| Essential | Remembers your cookie choice, and keeps your form answers in your browser while you fill in the form, so they are not lost if the page reloads. Cloudflare may also set a security cookie to block attacks. | Always. These are needed for the site to work, so we do not ask. |
| Analytics: Google Analytics | Counts visits and shows which pages are used, so we can improve the site. Information is combined so it does not identify you. | Only if you accept. |
| Analytics: Microsoft Clarity | Shows how people move around and click on pages, so we can fix things that are confusing. It hides what you type into forms. | Only if you accept. |
| Booking: Calendly | Shows our booking calendar inside the thank-you page. | Only if you accept. If you do not, you can still book on Calendly’s own website using the link. |
Keeping your data safe
The website uses an encrypted connection (HTTPS). Form answers go straight to a secure database that only our team can access, and we limit access to the people who need it to help you. We train our team to handle personal data properly.
Our services are for adults. You must be 16 or over to use our forms.
Questions and complaints
If you have a question or are unhappy with how we have used your data, please contact us first at [email protected] and we will try to put it right.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint or call 0303 123 1113.
We may update this policy from time to time. The date at the top shows when it last changed.