Oxbridge International School Ltd
Last updated: 5th June 2026
Oxbridge International School Ltd is a private limited company registered in England and Wales under company number 17254499.
Registered office:
128 City Road, London, United Kingdom, EC1V 2NX
For the purposes of this Privacy Policy, “Oxbridge International School”, “OIS”, “OISUK”, “we”, “us” and “our” refer to Oxbridge International School Ltd.
Oxbridge International School Ltd is not a traditional school, college, university or Ofsted-registered educational establishment. We provide educational travel coordination, cultural exchange support, student visit arrangements, non-formal educational activities, professional training support, educational support services, and related international coordination services.
This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us, submit an enquiry, register interest in our programmes, or use our services.
This policy is designed to reflect the requirements of the UK GDPR and Data Protection Act 2018. The Information Commissioner’s Office states that organisations should explain clearly what personal data they collect, why they use it, the lawful basis for processing, retention, individual rights and international transfers.
2. Personal Data We May Collect
We may collect and process the following categories of personal data:
This may include:
● IP address
● Browser type and version
● Device information
● Pages visited
● Time and date of visit
● Referring website
● Cookie preferences
● Website usage analytics
When you contact us through the website, email, telephone, WhatsApp, social media or enquiry forms, we may collect:
● Full name
● Email address
● Telephone number
● Country of residence
● Organisation, school or institution name
● Role or job title
● Message content
● Preferred method of contact
C. Student, parent and guardian data
Where relevant to educational visits, cultural exchange programmes or student travel arrangements, we may collect:
● Student name
● Date of birth
● Age
● Gender, where relevant for safeguarding, accommodation or travel arrangements
● Parent/guardian name
● Parent/guardian contact details
● Emergency contact details
● Passport or travel document information, where required
● Visa-related information, where required
● Medical, dietary, allergy or accessibility information, where necessary
● School or institution details
● Trip preferences and programme participation information
In limited circumstances, we may collect special category data, such as:
● Health information
● Allergy information
● Dietary requirements connected to religion or medical need
● Disability or accessibility requirements
● Safeguarding-related information
We only collect this information where it is necessary, proportionate and relevant to the safe delivery of our services, or where explicit consent has been provided.
E. Payment and booking information
Where applicable, we may collect:
● Billing name and address
● Payment confirmation details
● Invoice records
● Booking records
● Transaction references
We do not normally store full card payment details. Payments may be processed by third-party payment providers.
3. How We Collect Personal Data
We may collect personal data when you:
● Visit our website
● Complete an online form
● Submit an enquiry
● Subscribe to updates or newsletters
● Contact us by email, telephone, WhatsApp or social media
● Register interest in a programme
● Book or participate in an OIS activity
● Communicate with our staff, representatives or partner organisations
● Attend an event, meeting or presentation
● Provide information through a school, parent, guardian, agent or partner institution
We use personal data for the following purposes:
● To respond to enquiries
● To provide information about our services
● To manage bookings, applications and expressions of interest
● To organise educational visits, cultural exchange activities and training programmes
● To communicate with parents, guardians, schools, partners and participants
● To assess suitability for participation in activities
● To manage safeguarding, welfare and emergency contact requirements
● To arrange travel-related support where applicable
● To issue invoices, receipts and booking confirmations
● To comply with legal, regulatory, tax and accounting obligations
● To improve our website and services
● To send marketing communications, where permitted
● To protect our legal rights and business interests
5. Lawful Basis for Processing
We process personal data using one or more of the following lawful bases:
Where processing is necessary to provide services, manage bookings, respond to service requests or perform an agreement.
Where we must process information to comply with UK law, tax, accounting, safeguarding, company or regulatory requirements.
Where processing is necessary for our legitimate business interests, such as responding to enquiries, improving our services, managing relationships, maintaining records, preventing misuse of our website, and protecting our business.
Where we rely on consent, for example for optional marketing communications, non-essential cookies, some photographs or promotional materials, or certain special category data.
Where processing is necessary to protect someone’s life or safety, for example in a medical or safeguarding emergency.
Where required for special category data, such as certain health or medical information.
Because some OIS services involve students and young people, we take children’s data protection seriously.
Where we collect information about a child, we will usually do so through or with the knowledge of a parent, guardian, school or authorised organisation. We will only collect information that is necessary for the relevant programme, visit, safeguarding purpose, welfare purpose or legal requirement.
We will not knowingly use children’s personal data for unrelated marketing purposes without appropriate consent.
Where appropriate, parents or guardians may request access to, correction of, or deletion of their child’s personal data, subject to legal and safeguarding restrictions.
7. Safeguarding, Welfare and Emergency Information
Where OIS is involved in coordinating visits, trips, cultural exchange activities or student programmes, we may collect safeguarding and welfare information to help protect participants.
This may include emergency contacts, medical notes, allergies, dietary requirements, accessibility requirements, incident records or safeguarding concerns.
Such information will be handled confidentially and shared only where necessary, for example with staff, group leaders, host organisations, medical professionals, emergency services, insurers, safeguarding authorities or relevant legal/regulatory bodies.
UK safeguarding guidance confirms that safeguarding and promoting the welfare of children is everyone’s responsibility and that “children” includes everyone under the age of 18.
We may share personal data with carefully selected third parties where necessary, including:
● Schools, colleges or partner organisations
● Parents, guardians and authorised representatives
● Travel, accommodation or activity providers
● Training providers
● Insurance providers
● Payment processors
● IT and website service providers
● CRM and communication platforms
● Professional advisers, including accountants, lawyers and compliance consultants
● Government, regulatory, safeguarding or law enforcement bodies where required
● Medical or emergency services where necessary
● International partners involved in programme delivery
We will only share personal data where there is a lawful reason to do so and only to the extent necessary.
9. International Data Transfers
OIS may work with international students, families, schools, agents and partner organisations, including those outside the United Kingdom.
This may involve transferring personal data outside the UK. Where we do so, we will take steps to ensure that appropriate safeguards are in place. The ICO explains that organisations must consider whether a transfer is a restricted international transfer and ensure that appropriate safeguards are used where required.
Safeguards may include:
● Adequacy regulations
● International Data Transfer Agreements
● UK Addendum to EU Standard Contractual Clauses
● Contractual safeguards with partners
● Data minimisation
● Restricted access controls
● Secure communication methods
We will keep personal data only for as long as reasonably necessary for the purpose for which it was collected.
Retention periods may depend on:
● The nature of the enquiry or service
● Whether a booking or contract was completed
● Legal, tax or accounting requirements
● Safeguarding considerations
● Insurance requirements
● Dispute resolution requirements
● Whether consent has been withdrawn
Typical retention examples may include:
● General enquiries: up to 24 months
● Booking and financial records: up to 6 years
● Safeguarding records: retained for a period appropriate to the nature of the concern and legal safeguarding requirements
● Marketing records: until consent is withdrawn or the contact unsubscribes
● Website analytics: according to cookie settings and analytics provider retention periods
We take reasonable organisational and technical measures to protect personal data, including:
● Secure systems and access controls
● Password protection
● Limited access to personal information
● Staff and representative confidentiality expectations
● Secure document storage
● Secure deletion where appropriate
● Use of reputable IT and service providers
● Review of data handling procedures
However, no website, email system or online communication method is completely secure. Users should take care when sending sensitive information electronically.
We may send marketing communications about our services, events, programmes, newsletters or updates where we have a lawful basis to do so.
You can unsubscribe from marketing communications at any time by using the unsubscribe link, contacting us, or replying with an opt-out request.
We will not sell your personal data to third-party advertisers.
13. Photographs, Videos and Promotional Content
During events, trips or programmes, photographs or videos may be taken for internal records, safeguarding, promotional, social media or website purposes.
Where images identify children or participants, we will seek appropriate consent where required. Parents, guardians, schools, or participants may request that images not be used for promotional purposes.
14. Your Data Protection Rights
Depending on the circumstances, you may have the right to:
● Request access to your personal data
● Request correction of inaccurate data
● Request deletion of your data
● Object to processing
● Restrict processing
● Request data portability
● Withdraw consent
● Object to direct marketing
● Lodge a complaint with the ICO
To exercise your rights, please contact us using the details below.
For privacy or data protection enquiries, please contact:
Oxbridge International School Ltd
128 City Road, London, United Kingdom, EC1V 2NX
Email: info@oisuk.com
Website: www.oisuk.com
You also have the right to contact the UK Information Commissioner’s Office if you are unhappy with how we handle your personal data.