Privacy Policy UK

QualyFly® as a Trademark of EDUPLANET LIMITED Privacy Policy

1. Introduction

At EduPlanet Limited, operating under the trademark QualyFly®, we value the privacy of our clients and are committed to protecting their personal data. This Privacy Policy, along with the Legal Notice, Cookie Policy, Sales Policy, Terms andConditions, and any other referenced policies, describes how we collect, use, store, and protect the personal data we obtain through our website, social media, and services.

When you join us, use our website and social media pages, or provide us with your information, you consent to this Privacy Policy and the ways in which we use your information as outlined in this policy. If you do not agree with this policy, please do not provide us with your information or continue using our sites and social media pages.

2. Data Controller’s Identifying Information

• Company Name: EduPlanet Limited
• Trademark: QualyFly®
• Registered Office: 124 City Road, London, United Kingdom, EC1V 2NX
• Company Number: 07608248 (Registered in England and Wales)
• Contact Email: hola@goqualifly.com
• Business Activity: Advisory and consultancy in overseas studies, including connecting with language institutions and higher education, providing trainings, virtual workshops, and support material for each client’s academic project.
• Trademark Registration: QualiFly® is registered as a trademark in Spain. (OEPM Exp. 4165372 / 6)

3. Personal Data Collected on the Website, Social Media, and Purpose of Processing

We collect various types of personal data through our forms on the website, social media, and chatbots, which we use for the following purposes:

• Contact Form: Name, surname, and email address to respond to inquiries, comments, or information requests.
• Blog Comments: Name, email address, and website to identify users who comment on our posts.
• Service Request Process: Name, surname, address, phone number, email address, and tax identification number to manage and process contracted services.
• Newsletter Subscription: Name, phone number, and email address to send informational bulletins about our services, promotions, and updates, with the user’s explicit consent.
• Client Area Access: Email address and password to allow secure access to the user’s account.
• Interaction through Chatbots: Information provided by users through chatbots on our website and social media, such as name, email address, specific questions about study programs, educational preferences, among other relevant data to provide personalised advice.

4. Legal Bases for Data Processing

We will process your personal information in accordance with our obligations under applicable data protection laws and regulations, for the following reasons:

• Consent: For sending newsletters, commercial communications, and data collection through chatbots, we obtain the user’s explicit consent.
• Performance of a Contract: To process service requests and manage contractual relationships.
• Legitimate Interest: To improve our services, conduct internal analyses, optimize the user experience on our website and social media, and personalise interactions through chatbots.

5. Users’ Rights

Users have the right to:

• Access: Request information about the personal data we hold.
• Rectification: Correct inaccurate or incomplete data.
• Deletion: Request the removal of their personal data, unless there is a legal obligation to retain it.
• Restriction of Processing: Restrict the use of their data under certain circumstances.
• Portability: Receive their data in a structured format and transfer it to another controller.
• Objection: Object to the processing of their data for legitimate reasons.
• Non-Existence of Automated Decision-Making: Prevent automated profiling that significantly affects the user.

To exercise these rights, users can contact us via email at hola@goqualifly.com.

6. Data Processors

We collaborate with third parties to provide our services, who act as data processors under strict confidentiality agreements. Below is a list of the main data processors used by EduPlanet Limited / QualiFly®:

• Mailchimp: Used to automate commercial informational bulletins and send to the data holder’s email, advertising products and/or services offered on the website.
  Provider: The Rocket Science Group LLC, United States of America.
  Address: 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
  Legal Basis for Transfers: Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office (ICO).
  Privacy Policy: Mailchimp Privacy
• ActiveCampaign: Used for email marketing and client management.
  Provider: ActiveCampaign, LLC, Chicago, USA.
  Address: 171 W Illinois St, Chicago, IL 60654, USA
  Legal Basis for Transfers: Standard Contractual Clauses (SCCs) approved by the UK ICO.
  Privacy Policy: ActiveCampaign Privacy
• Zapier: Tool used to automate tasks.
  Provider: Zapier Inc., 548 Market St. #62411, San Francisco, CA 94104-5401, United States.
  Contact: contact@zapier.com
  Privacy Policy: Zapier Privacy
• Google G-suite: Tool used for email administration.
  Provider: Google LLC, Mountain View, California, United States.
  Address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  Legal Basis for Transfers: Standard Contractual Clauses (SCCs) approved by the UK ICO.
  Privacy Policy: Google Privacy
• Lead Pages: Tool used to create websites, landing pages, and pop-ups.
  Provider: Avenue 81, Inc., 107 Cheapside, London, United Kingdom.
  Contact: legal@ave81.com
  Privacy Policy: Lead Pages Privacy
• Raiola Networks: Web hosting provider.
  Provider: Raiola Networks S.L., Avda de Magoi, 66, Semisótano, Dcha., 27002 Lugo (Lugo), Spain.
  Privacy Policy: Raiola Networks Privacy
• Calendly: Tool used to schedule meetings.
  Provider: Calendly, 1315 Peachtree St NE, Atlanta, GA 30309, United States.
  Address: 1315 Peachtree St NE, Atlanta, GA 30309, USA
  Legal Basis for Transfers: Standard Contractual Clauses (SCCs) approved by the UK ICO.
  Privacy Policy: Calendly Privacy
• Typeform: Tool used to create online forms and surveys.
  Provider: Typeform SL, Carrer Bac de Roda, 163, local, 08018 Barcelona, Spain.
  Contact: support@typeform.com
  Privacy Policy: Typeform Privacy
• Facebook Pixel: Advertising analysis tool used to understand the actions of data subjects on this website.
  Provider: Facebook, Inc., 1601 Willow Road, Menlo Park, CA 94025, United States.
  Data Controller in Europe: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
  Legal Basis for Transfers: Standard Contractual Clauses (SCCs) approved by the UK ICO.
  Privacy Policy: Facebook Privacy
• Google Analytics: Web analytics service to monitor website usage statistics.
  Provider: Google LLC, Mountain View, California, United States.
  Address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  Legal Basis for Transfers: Standard Contractual Clauses (SCCs) approved by the UK ICO.
  Privacy Policy: Google Privacy
• Zoom: Tool used for video conferencing.
  Provider: Zoom Video Communications, Inc., San Jose, California, United States.
  Address: 55 Almaden Blvd, Ste 300, San Jose, CA 95113, USA
  Legal Basis for Transfers: Standard Contractual Clauses (SCCs) approved by the UK ICO.
  Privacy Policy: Zoom Privacy
• Evernote: Tool to better manage the services offered.
  Provider: Evernote Corporation, United States of America.
  Address: 305 Walnut Street, Suite 300, Redwood City, CA 94063, USA
  Legal Basis for Transfers: Standard Contractual Clauses (SCCs) approved by the UK ICO.
  Privacy Policy: Evernote Privacy
• Skype: Tool used for video conferencing.
  Provider: Microsoft Corporation, Redmond, Washington, United States of America.
  Address: One Microsoft Way, Redmond, WA 98052-6399, USA
  Legal Basis for Transfers: Standard Contractual Clauses (SCCs) approved by the UK ICO.
  Privacy Policy: Skype Privacy
• ManyChat: Tool used to create bots on Facebook pages.
  Provider: ManyChat, INC., United States.
  Address: 642 Fifth Avenue, New York, NY 10016, USA
  Contact: support@ManyChat.com
  Privacy Policy: ManyChat Privacy
• Pay U Latinoamérica: Company used to manage payments on the website.
  Provider: Pay U Latinoamérica, [Specific Address per Country].
  Contact: protecciondedatos@payulatam.com
  Privacy Policy: Pay U Latinoamérica Privacy
• PayPal (Europe) S.à r.l. et Cie, S.C.A.: Company used to manage debit and credit card payments on the website.
  Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxembourg.
  Privacy Policy: PayPal Privacy
• Stripe Inc: Used to manage debit and credit card payments on the website.
  Provider: Stripe Inc., United States.
  Address: 185 Berry Street, Suite 550, San Francisco, CA 94107, USA
  Legal Basis for Transfers: Standard Contractual Clauses (SCCs) approved by the UK ICO.
  Privacy Policy: Stripe Privacy
• Mailtrack: Tool used to send emails and verify their reading by the receiver.
  Provider: THE MAIL TRACK COMPANY, S.L., Calle Córcega, number 301, attic 2ª, 08008 Barcelona, Spain.
  Contact: hi@mailtrack.io
  Privacy Policy: Mailtrack Privacy
• Dropbox: Used for the virtual hosting of documents related to the products or services offered on the website.
  Provider: Dropbox, Inc., California, United States.
  Address: 1050 Brickell Ave, 2nd Floor, Miami, FL 33131, USA
  Legal Basis for Transfers: Standard Contractual Clauses (SCCs) approved by the UK ICO.
  Privacy Policy: Dropbox Privacy
• WhatsApp: Tool used for communication with users, buyers, clients, and participants.
  Provider: WhatsApp Ireland Limited (for users in Europe).
  Address: Suite 8, Block B, Merchant House, 1 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
  Contact: Contact Link
  Privacy Policy: WhatsApp Privacy
• Tello: Tool used for project management and internal communication.
  Provider: Tello, Inc.
  Address: 1234 Elm Street, San Francisco, CA 94102, United States.
  Contact: support@tello.com
  Privacy Policy: Tello Privacy
• Suitedash: Platform used for client follow-ups and management of academic projects.
  Provider: Suitedash, Inc.
  Address: 1425 Broadway, Suite 200, Orlando, FL 32801, United States.
  Contact: support@suitedash.com
  Privacy Policy: Suitedash Privacy

7. International Data Transfers

Some of our data processors are located outside the United Kingdom. We ensure that such transfers comply with the data protection regulations in force in Colombia, Mexico, and the United Kingdom (UK GDPR), through Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office (ICO).

8. Data Security

We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: We use encryption techniques to protect your data during transmission and storage.
• Access Controls: Only authorized personnel have access to your personal data, based on their role and necessity.
• Authentication: Use of strong passwords and, where applicable, multi-factor authentication to secure accounts.
• Firewalls and Antivirus Software: Implementation of firewalls and antivirus software to protect against unauthorized access and threats.
• Regular Audits: Conducting regular security audits and assessments to identify and mitigate potential vulnerabilities.
• Physical Security: Strict physical controls in our premises to restrict access to personal data, including secure storage solutions and surveillance systems.

Additionally, in the event of a data breach, we have procedures in place to detect, report, and investigate any breach of personal data. We will notify the Information Commissioner’s Office (ICO) and affected individuals where required by law.

9. Data Retention

Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal obligations. Specifically:

• Billing and Purchase Data: Retained for the legally required period.
• Newsletter and Blog Comments Data: Retained while the user maintains their subscription or until they request its deletion.
• Data Collected through Chatbots: Retained as long as necessary to fulfill the purpose for which they were collected or until the user requests their deletion.
• Training and Virtual Workshops Data: Retained while the user participates in the workshops and until the corresponding academic project is completed.

We have procedures in place regarding our retention periods which we keep under review, taking into account our reasons for processing your personal data and the legal basis for doing so. Once the retention period has expired, personal data will be securely deleted or anonymised.

10. Use of Cookies

We use cookies and similar technologies to enhance the user experience on our website and social media, analyze traffic, and personalize content and advertising. For more information, please refer to our Cookie Policy.

11. Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Updates will be published on this page, and when necessary, users will be informed through the provided contact channels. Significant changes will be communicated via email or through a prominent notice on our website.

12. Data Collection through Chatbots

At EduPlanet Limited / QualiFly®, we use chatbots both on our website and social media to interact with users and provide personalized assistance. Through these chatbots, we may collect the following types of personal data:

• Personal Identification Information: Name, email address, phone number.
• Educational and Preference Information: Academic interests, desired study programs, geographic location, current educational level.
• Interactions and Inquiries: Specific questions about our services, comments, and requests for additional information.

Purposes of Data Collection through Chatbots

• Personalized Advice: Provide recommendations and advice tailored to the user’s educational needs and goals.
• Service Improvement: Analyze interactions to continuously optimize and enhance the quality of our services and the user experience.
• Effective Communication: Facilitate direct communication with our potential and current clients, efficiently responding to their inquiries and requests.
• Marketing and Promotions: Send relevant information about our programs, promotions, and updates, always with the user’s explicit consent.

Consent and Transparency

By interacting with our chatbots, users are voluntarily providing their personal data. We ensure that users are informed about the purpose of data collection and obtain their consent when necessary, especially for marketing and commercial communications.

Protection and Security of Data Collected through Chatbots

Data collected through chatbots is protected with the same security measures as our other personal data. Only authorized personnel have access to this information, and chatbots are managed by providers who comply with data protection regulations in Colombia, Mexico, and the United Kingdom (UK GDPR).

Users’ Rights Related to Chatbots

Users have the same rights of access, rectification, deletion, restriction of processing, portability, objection, and non-existence of automated decision-making concerning the data collected through chatbots. To exercise these rights, they can contact us via email at hola@goqualifly.com.

13. Data Sharing with Educational Institutions

In addition to the data processors mentioned above, EduPlanet Limited / QualiFly® collaborates directly with various educational institutions, such as language centers, colleges, and universities. This collaboration involves sharing certain personal data of our clients with these institutions to facilitate the admission and enrollment process. Below are the relevant details:

Types of Data Shared

• Basic Personal Information: Name, surname, email address, phone number.
• Academic Data: Current educational level, grades, language certificates.
• Educational Preferences: Desired study programs, geographic location, institution preferences.

Purposes of Data Sharing

• Admission Process: Facilitate the evaluation and admission of clients into selected educational programs.
• Enrollment and Registration: Manage the enrollment and registration in courses or programs offered by the institutions.
• Direct Communication: Allow direct communication between clients and educational institutions to resolve inquiries and provide additional information.

Legal Bases for Data Sharing

• Performance of a Contract: Data sharing is necessary to fulfill the services contracted by the client.
• Consent: Explicitly obtained from the client to share their data with selected educational institutions.

Protection and Security Measures

EduPlanet Limited / QualiFly® ensures that all educational institutions we collaborate with comply with data protection regulations in Colombia, Mexico, and the United Kingdom (UK GDPR). Confidentiality and data processing agreements are established with each institution to guarantee the security and appropriate use of shared data.

Users’ Rights Related to Data Sharing

Users have the right to request the revocation of consent for data sharing with educational institutions at any time. To exercise this right, they can contact us via email at hola@goqualifly.com.

14. Applicable Regulations

United Kingdom (UK GDPR)

EduPlanet Limited / QualiFly® complies with the UK General Data Protection Regulation (UK GDPR), which maintains similar standards to the EU GDPR. This regulation establishes a legal framework for the protection of personal data and the free movement of such data within the UK, ensuring individuals’ rights and setting clear obligations for companies handling personal data.

EduPlanet Limited / QualiFly® is registered with the Information Commissioner’s Office (ICO) in the United Kingdom:

• Registration Reference: ZA937804
• Data Controller:
  • EduPlanet Limited / QualiFly®
  • 124 City Road, London, United Kingdom, EC1V 2NX
  • Contact Email: hola@goqualifly.com

Colombia

EduPlanet Limited / QualiFly® complies with Law 1581 of 2012 on Protection of Personal Data and its regulatory decrees. This law establishes general provisions for the protection of personal data in the country, ensuring the confidentiality, integrity, and availability of information.

Mexico

EduPlanet Limited / QualiFly® complies with the Federal Law on Protection of Personal Data Held by Private Parties. This law regulates the processing of personal data by private entities, guaranteeing the rights of data subjects over their data.

15. Contact

If you have any questions or wish to exercise any of your rights, you can contact us through:

• Email: hola@goqualifly.com
• Postal Address: 124 City Road, London, United Kingdom, EC1V 2NX

This Privacy Policy was last updated on 31th January 2025.