Privacy Policy
Last updated: 1 October 2026
1. Who we are
This Privacy Notice explains how Point Consultancy, a trading name of Point Consultant Limited, collects, uses and protects your personal data when you contact us through this website or use our UK education consultancy and application support services (“we”, “us”, “our”). Point Consultant Limited is a company registered in England and Wales (company number 13287203), with its registered office at Unit 6 Hill View Studios, 160 Eltham Hill, London, SE9 5EA. We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.
For people in Turkey, this notice also serves as our information notice (aydınlatma metni) under Law No. 6698 on the Protection of Personal Data (KVKK). See section 10.
Privacy questions: info@point-consultancy.com.
2. The enquiry form on this website
When you send the enquiry form, we receive your name, email address, phone number (if you give one), the programme you are interested in, who the enquiry is for, when you would like to start, your message and your consent to be contacted. We use this only to answer your enquiry and, if you wish, to arrange a first consultation.
The form is sent to our database with Supabase, hosted in the European Union (Ireland), the same system that runs our application portal, and a copy is emailed to your consultant through our email provider, Hostinger, also in the European Union. The only thing the form keeps in your browser is a random request ID with no personal data, until you close the tab (see our Cookie Policy).
We keep enquiries only for as long as we need them to reply to you and follow up. If you become a client, your enquiry becomes part of your file (section 3).
3. The private application and document portal
If you decide to work with us, we may invite you to complete an online application form and upload documents through a private portal on apply.point-consultancy.com. There we may collect:
- Identity and contact details: full name, date of birth, nationality, address, phone number, email address.
- Passport details: passport number, issue and expiry dates, and copies of passport pages.
- Family details: names and details of your spouse, children, parents or other relatives where relevant to your application.
- Education, employment and financial information: schools and qualifications, employer details, income, business records, tax records, bank statements and other evidence of funds.
- Travel history: previous travel to the UK and other countries, and your plans.
- Uploaded documents: any supporting documents you upload, such as diplomas, transcripts, bank statements, employer letters and translations.
- Special category data, only where an application requires it: for example health information in a medical certificate. We process this only with your explicit consent.
A draft of the application form that you have not yet sent is stored only on your own device and is removed after 7 days. Your private document link expires after 30 days, and we can send you a new one on request; sending a new link cancels the old one.
4. Why we use your data
- To answer your enquiry and give you information about studying in the UK.
- To understand your situation, suggest suitable programmes and schools, and prepare and check the applications you ask us to help with.
- To contact you about your file and our services.
- To meet our own legal and accounting obligations.
5. Our lawful bases
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Answering your enquiry | Article 6(1)(b), steps taken at your request before entering into a contract, and our legitimate interest in replying to people who contact us |
| Assessing your situation and preparing your applications | Article 6(1)(b), performance of our contract with you or steps taken at your request before it |
| Contacting you about your file | Article 6(1)(b) and our legitimate interest in providing the service you asked for |
| Health information or other special category data | Article 9(2)(a), your explicit consent |
| Keeping accounting and legal records | Article 6(1)(c), legal obligation |
6. Who we share your data with
We use the following service providers. Each is bound by a data processing agreement:
- Supabase (European Union, Ireland): database and private storage for enquiries, application answers and uploaded documents.
- Hostinger (European Union): email.
- Vercel (United States): hosting and delivery of this website. Vercel handles technical request data such as your IP address in order to serve our pages; your enquiries, application answers and documents are not stored there.
- Google (United States): the Google Sheets file in which our consultant tracks applications. Only the details shown in the applications list are copied there: reference number, name, email, phone, application type and duration, application centre, and application and document status. Passport numbers, full form answers and uploaded documents are not copied.
With your knowledge and at your request, we share the information an application needs with the organisation you are applying to, such as a school, a university, UCAS or a UK government department.
We do not sell your personal data.
7. International transfers
Your enquiries, application data and documents are stored with Supabase in the European Union, and our email is hosted in the European Union. The UK recognises the EU as providing adequate protection, so these transfers do not need additional safeguards. Our website host, Vercel, may process technical request data in the United States and other countries under the contractual safeguards in its data processing agreement. Our consultant’s application tracking sheet may be processed by Google in the United States and other countries under the contractual safeguards in Google’s data processing terms.
8. How long we keep your data
We keep your application data and documents while we work with you and for a limited period after your file is closed, so that we can answer follow-up questions. You can ask us to delete your file at any time (see section 9). Basic contact and billing records may be kept for longer where the law requires it.
9. Your rights
Under the UK GDPR you have the right to:
- ask for access to the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete your data, subject to the record-keeping obligations above;
- restrict or object to certain processing;
- withdraw your consent at any time, where we rely on consent;
- ask for a copy of your data in a portable format;
- complain to the ICO (ico.org.uk) or, for people in Turkey, to the KVKK Board (see section 10).
To use any of these rights, email info@point-consultancy.com.
10. Notice for people in Turkey (KVKK)
Under Law No. 6698 on the Protection of Personal Data (KVKK), Point Consultancy, as data controller, collects the personal data described in sections 2 and 3 electronically (through this website and the application portal) for the purposes in section 4. The legal grounds are that processing is directly related to setting up or performing a contract with you and, for special category data, your explicit consent (KVKK articles 5 and 6).
Your data is hosted in the European Union through the providers listed in section 6. Under the KVKK this is a transfer of data abroad.
Under article 11 of the KVKK you may ask whether your data is processed, request information about it, learn the purpose of processing and whether it is used accordingly, know the third parties it is transferred to in Turkey or abroad, ask for correction, deletion or destruction, ask for these steps to be notified to those third parties, object to a result against you arising solely from automated analysis, and claim compensation for damage caused by unlawful processing. Send your request in writing to info@point-consultancy.com.
11. Security
- Uploaded documents are kept in private, access-controlled storage, never in a public folder.
- Document links are personal, time-limited and expire automatically.
- Access to your file is limited to your consultant and the team members who need it to work on your file.
12. Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last revised.