Privacy Notice

1) Who we are (Controller)

“David Kingston College” (“DKC”, “we”, “us”) is a trading name of David Kingston Holding B.V., a private limited liability company incorporated in the Netherlands (KvK 95231501, VAT NL867051085B01).

Correspondence (UK): 5th Floor, 167-169 Great Portland Street, London W1W 5PF, United Kingdom.

Privacy email: admin@dkcollege.co.uk. We have not appointed a Data Protection Officer; please use this address for all privacy enquiries.

2) Scope

This Notice explains how we handle personal data when you browse dkcollege.co.uk, submit forms, request information, apply or enrol, interact with our marketing, or use portals/services linked from our website. Programme-specific notices may appear inside our learning platforms.

3) Data we collect

Data you provide

• Identification & contact: name, email, phone, address, country.
• Applications & enrolment: prior education, course choices, eligibility checks, ID verification (where required).
• Communications: enquiries, support tickets, complaints, feedback.
• Payments (via provider): payment method and transaction metadata (we do not store full card numbers).
• Preferences: marketing opt-in/out, cookie consent choices.

Data collected automatically

• Device/usage: IP address*, device, browser, OS, referrer/UTM, pages viewed, clicks/scroll events, session duration.
• Consent signals: your cookie choices and timestamps.

* We use IP masking/anonymisation where supported (e.g., GA4).

Data from third parties

• Payment status from payment processors.
• Analytics/ads insights from Google and Meta (only if you consent to those cookies).
• Lead source data from campaign tools (subject to your marketing consent).

4) Purposes & lawful bases

• Website operation & security (hosting, load balancing, debug, fraud/abuse prevention) — Legitimate interests.
• Responding to enquiries — Legitimate interests or pre-contract steps.
• Applications, enrolment & student administration — Contract.
• Payments & invoicing — Contract; Legal obligation (tax/accounting).
• Student support & service improvement — Contract; Legitimate interests.
• Analytics (GA4 via GTM) — Consent (non-essential cookies).
• Advertising/retargeting (Meta Pixel; Google Ads if used) — Consent (marketing cookies).
• Compliance & disputes — Legal obligation; Legitimate interests.

You can withdraw consent at any time (see Cookies and Your rights).

5) Cookies, analytics & advertising

We use Google Tag Manager (GTM) to deploy tags and a consent banner to control them.

• Strictly necessary cookies run without consent (PECR allows) for security, load balancing, core functionality.
• Analytics — Google Analytics 4 only runs if you opt in. We enable IP anonymisation, set retention limits, and disable Google signals unless you consent to marketing.
• Marketing — Meta (Facebook) Pixel and other ads tags only run if you opt in; they may collect identifiers for ad measurement and audience creation.

Change your choices: use the cookie banner or the “Cookie settings” link in our footer to update consent at any time. Withdrawing consent does not affect processing already performed.

Joint controllership (Meta Pixel): for certain event data used for ad measurement/targeting, Meta Platforms Ireland and DKC may act as joint controllers under Meta’s Controller Addendum. Meta may independently process data for its own purposes; see Meta’s privacy information.

6) Sharing your data

• Processors/service providers: hosting, email/CRM, form tools, payment processor, LMS/learning platforms, analytics (Google), tag manager (Google), advertising platforms (Meta; Google Ads if used), support tools — all under data-processing terms.
• Authorities/third parties: where required by law, to protect rights/users, prevent fraud, or in corporate transactions.
• Group/partners: as necessary to operate the site and deliver programmes, on a lawful basis.

We do not sell your personal data.

7) International transfers

Some providers process data outside the EEA/UK (e.g., Google LLC; Meta Platforms, Inc.). Where transfers occur, we use appropriate safeguards such as the EU Standard Contractual Clauses and the UK Addendum/IDTA, plus supplementary measures (e.g., encryption, minimisation). Copies can be requested (commercial terms may be redacted).

8) Retention

• Web server logs (security): up to 12 months.
• Analytics events (GA4): 14–26 months (per GA settings).
• Enquiries (forms/email): 24 months after last contact.
• Marketing lists: until you unsubscribe or after 24 months of inactivity.
• Contract/enrolment records: while active + 6 years after end of contract.
• Payments & tax records: 7 years (statutory accounting).

If you request deletion, we keep the minimum necessary to evidence compliance or resolve disputes.

9) Your rights

• Access to your data and a copy.
• Rectification of inaccurate data.
• Erasure (in certain circumstances).
• Restriction or objection to processing (including direct marketing).
• Portability for data you provided under consent/contract.
• Withdraw consent at any time (future processing only).
• Complain to a supervisory authority.

To exercise these rights, email admin@dkcollege.co.uk. We may need to verify your identity.

Supervisory authorities (examples): EU/EEA — your local authority (e.g., Autoriteit Persoonsgegevens in NL); UK — Information Commissioner’s Office (ICO).

10) Children

Our site and services are intended for individuals 16+. If you believe a child under 16 has provided data without appropriate consent, contact us and we will delete it.

11) Security

We use appropriate technical and organisational measures (encryption in transit, access controls, patching, role-based access, logging/monitoring). No system is 100% secure; please use a strong unique password and keep credentials confidential.

12) Automated decision-making & profiling

We do not make decisions with legal or similarly significant effects based solely on automated processing. Where you consent to marketing cookies, we may perform limited profiling to tailor ads and measure effectiveness (e.g., GA4/Meta audiences). You can opt out by refusing marketing cookies and/or changing ad preferences with those platforms.

13) Changes to this Notice

We may update this Notice from time to time. We’ll post the new version with a new Effective date and, where appropriate, notify you via the website or email.

14) Contact us

• General enquiries: admin@dkcollege.co.uk
• Postal: David Kingston College, 5th Floor, 167-169 Great Portland Street, London W1W 5PF, United Kingdom

© 2025 David Kingston Holding B.V. trading as David Kingston College. All rights reserved.