Privacy policy

Wolsey Hall Oxford Privacy Policy

This privacy policy, in conformance with the GDPR, describes how we collect, use, process and share your personal information when you use our website and services.

How and why do we use your personal data?

We use your personal information in the following ways to fulfil our contractual obligations to you and for our legitimate business interest:

  • Provide our courses and services;
  • Process your payments;
  • Understand how our courses and services are used, so that we may develop and improve them;
  • Understand how our website is used, so as to optimise its performance;
  • Send marketing information by email, as requested with your consent, to promote our services;
  • Keep system logs for operation and maintenance purposes;
  • Keep our systems secure;
  • Keep such records as we are required to do by law.

How we collect your data

We collect and process personal information from you when you:

  • Visit our website;
  • Contact us by phone;
  • Email or use our web forms to enquire about or apply for our courses or services;
  • Interact with our courses;
  • Subscribe to our mailing list;
  • Subscribe to or comment on our blog;
  • Respond to or participate in any survey or questionnaire sent by us, or;
  • Make a purchase through the website.

Data you provide to us

Enquiries: We collect information you provide when you make an enquiry to us by phone, email or the Contact Us web form on our website and in our responses and subsequent correspondence. This information may include your name, contact details, age, nationality, country of residence, and details of your enquiry.

Course Applications: If you apply for a course online we store the information you provide in your or your child’s application form and in correspondence.   This may include any or all of the following:

  • Name;
  • Date of birth;
  • Email address;
  • Skype ID;
  • Address for book delivery;
  • Nationality;
  • Interests and activities you provide as being relevant to planning your child’s studies;
  • Preferred method of payment;
  • Academic history where needed to confirm eligibility for a course;
  • Confirmation of parental responsibility.

Where someone else is helping a student under 18 we store their name, contact email address and relationship to the child.

We may store special categories of sensitive data such as race, ethnicity, religious beliefs or health where provided to us as relevant to your or your child’s studies.

Learning Support: We collect the name, date of birth and contact information of the person using the service, information about the type of advice they are seeking where provided, and our advice and correspondence. This may include special categories of data. We also collect the name and contact details of the person paying and the record of payment including date and amount.

University Advice Service: We collect the name, date of birth and contact information of the person using the service, the name and contact details of the person paying and the record of payment including date and amount.

Marketing: We collect your name and contact details when you subscribe to our mailing lists or our blog. Please contact us if you find that your child under 13 has subscribed to our blog or mailing list without your consent and we will remove their details.

Website content: Comment or content you may submit such as essays, assignments, competition entries, feedback and photographs that we may feature with your consent on our web site or blog.

Data we collect from you

When you use our online services such as visiting our website, completing our web forms, participating in our courses and subscribing to our blog or mailing list, we collect technical information. This may include:

  • Your IP address;
  • Date and time of sign up or form submission;
  • Unique device identifiers;
  • Country location;
  • Browser type;
  • Operating system;
  • Information about how visitors use our website and our courses.

We do not link data collected by our website to any other information we hold to identify any individual visitor. Our website uses cookies (small text files placed on your device). Please read our Cookies Policy for more information about how we use cookies.

Our web site features embedded YouTube content and links that allow you to share our content with social media platforms such as Instagram, YouTube, Facebook, Pinterest and Twitter. We do not have any control over how third party sites collect data, and if you choose to follow these links please read the privacy notices of the sites you link to.

How we share your data

We may disclose your personal information to other data controllers and with our trusted suppliers in order to provide our services to you.

To provide our courses: We share the name and email address of enrolled students and, where relevant their parents/guardians with our learning management system partner, Instructure, to create Student and Parent Observer accounts to fulfil our contract to you to provide courses. Instructure share information with us that is provided by students and parent observers during interactions with our courses on Canvas including assignment submissions, grades and messages and participation statistics. Instructure is the joint data controller of the personal information that is collected when you interact with our courses. You can see their privacy policy here.

To order books: We provide the contact details needed to our book suppliers in order to fulfil our contract to provide course books. Our book suppliers and couriers are the data controller of information provided to them. They provide further information about how they process your personal information in their privacy policies:





To process payments: We collect credit card details and keep them only where requested to process payments via PayPal. We keep details of payments including name, date, course or service and amount. PayPal are the data controller of the information we provide to them. You can see their privacy policy here.

We use Stripe to process online payments. Stripe provide us with details of payments made including name, service, date and amount. They do not share your billing information with us. Stripe are the data controller of information provided to them via our web forms. You cans see their privacy policy here.

To provide our services: We work with third-party companies who support our website for payment processing, accounting, marketing and other services which may require them to access information about you. If a service provider needs to access our client’s personal information to perform services on our behalf, they do so under our instructions. We do not share your information with third parties for their own purposes.

Recipients of personal data

We may disclose your personal information:

•  If we are under a duty to do so to comply with any legal obligation; •  In order to enforce or apply our terms and other agreements; •  To protect our rights or property; •  To protect the safety of our clients including with healthcare, social and welfare advisors and with central and local government.

If we sell, transfer, or merge our business or assets in future and, as a result, share your data with other parties, they may use your data in the same way as set out in this notice. If your data becomes subject to a different privacy policy we will contact you in advance.

Lawful basis for processing

The law on data protection sets out a number of different reasons for which a company may collect and process your personal data, including:

•  Where we have your consent; •  Where necessary to perform a contract with you; •  When it is our legal duty; •  Where processing your personal information is in our legitimate interest as long as this is not overridden by your rights and your information is processed in a way that you would reasonably expect. Our legitimate interest is that that the processing is necessary for us to provide the information or services that you have requested or purchased and to improve or promote them.

Sensitive personal information such as religion, race, ethnicity, political beliefs or health information such as learning abilities is classed as Special Category Data under the GDPR. Our legal basis for processing it is our legitimate interest which is to provide you with advice and guidance in relation to a course application or during a course of studies, or in order to use our Learning Support service where you have provided this information. Your interest is that you have provided this information for this limited purpose. We may only process this information if you have also given us your consent. We ask that you only provide such information on course applications and during the course of studies where you give us consent to collect it. We are only able to work with others who are helping a student with their studies where we have consent to share this information with them. Where provided to purchase a Learning Support service consultation we will seek your consent to store this information during the consultation and will seek your consent to share it if you are a student or the parent of a student and you wish us to share the information within the staff team.

Your rights

You have the following rights over the processing and use of your personal data. To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this privacy policy. If you have authorised a third party to submit a request on your behalf, we will ask them to show that they have your permission to act.

Withdrawing your consent: Where you have given us your consent to use your personal data, you have the right to withdraw your consent at any time by writing to us at the email address below. You may withdraw your consent to marketing emails by using the unsubscribe link provided in every email or by contacting us at the email address below and we must always comply with your request.

Access to your data: Please contact us at the email address below if you want us to tell you about any data we hold about you or to request a copy by making a Subject Access Request.

Correcting your data: Please contact us at the email address below if your data is incorrect, out of date or incomplete and we will take reasonable steps to correct it.

Restricting use of your data: You have the right to object to our use of your personal information where we are relying on our legitimate interest to process it. If you object we must stop processing it unless we believe we have a legitimate overriding reason to do so. You have the right to ask us to delete your personal information. We may need to keep your data due to a legal obligation but may be able to restrict the use of your data so that it may only be used for legitimate reasons such as legal claims. In this situation, we would not use or share your information in other ways while it is restricted. If you want to object to how we use your data, or ask us to delete it or restrict how we use it, please contact us at the email address below.

Portability: Where we are processing information that you have provided to us with your consent or to fulfil a contract with you, you have the right to ask us for a copy to be sent to you or another organisation in a format that can be easily reused. Please contact us to request this at the email address below.

Data retention

We retain personal information we have collected for as long as necessary to fulfil the purposes of providing the services you have purchased and for our legitimate business needs to respond to any questions or complaints and to maintain our business records as required by law. When we no longer have a legitimate business need to process your personal information, we will delete or anonymise it. If this is not possible (for example, because your personal information has been stored in backup archives) we will prevent any further processing and store it securely until deletion is possible. Our learning management system partner Instructure will keep all student and parent observer information they have processed for as long as we have an account with them and you may request a copy of this at any time, it may be deleted on request. Each data controller with whom we work will keep information according to their own retention schedules. You can check their privacy policies at the links provided above.

International transfers

We may transfer personal data that we collect from you to our third-party data processors in countries that are outside the European Economic Area (EEA) such as the USA or New Zealand. Your data will be stored securely and under the same protection as data processed within the EEA.

Updating this policy

We will review this policy to make any changes required to comply with legal or other requirements and will publish all changes on our website. This policy applies from 22nd May 2018.


If you have any complaints regarding this policy notice or requests for further information, please write to us by email and we will work with you to resolve, quickly and fairly any complaint you may have. You may also phone us or write to us.   If you have any complaints that we are not able to answer or if you have any concerns about the way that your data is being handled you should contact the Data Privacy Supervisory Authority for the country in which you reside.

For the UK this is the Information Commissioner’s Office:

Phone: 0303 123 1113 Website: Information Commissioner’s Office

Contact us

Please contact us if you have any questions that have not been answered in our privacy policy. Our contact information:

Email: Phone: 0800 622 6599 (UK)  /  Int: +44 (0) 1865 988 307 Address: Wolsey Hall Oxford International Ltd, Midland House, West Way, Oxford, OX2 0PH, Registered in England No. 9270091