This statement explains how Albatross Education meets its responsibilities under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Lawful basis We process your personal information on the basis of your consent and to take steps, at your request, to help you apply to university. Where we must keep records by law, we do so on the basis of our legal obligations. Your rights under GDPR - The right to be informed about how we use your data - The right of access to the data we hold - The right to have inaccurate data corrected - The right to have your data erased - The right to restrict or object to processing - The right to data portability How to exercise your rights Contact us using the details on our Contact page. We will respond within one month. Sharing your data We share your data only with the universities, partners and official bodies needed to process your application, and only with your consent. We do not sell your data. Complaints If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. [Please add your company's data protection contact and, if you have one, your ICO registration number.]