Mark Ellis Education Consultancy Ltd (Trading as Mark’s School Oxford) Last Updated: 8 July 2026 Mark Ellis Education Consultancy Ltd (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, contact us, request information, submit an enquiry, fill out our safeguarding forms, or otherwise interact with us. Data Controller: Mark Ellis Education Consultancy Ltd Email: info@marksschooloxford.com If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at the email address above. We may collect and process the following categories of personal data: Identity Data: Such as your full name, relationship to the student, and the name and age of your child. Contact Data: Such as your email address, telephone number, WeChat ID, WhatsApp number, and country of residence. Residential Data: Your permanent residential address outside the United Kingdom. Enquiry & Safe-Guarding Data: Details you provide in contact forms, emails, consultation requests, white paper downloads, or customer onboarding and online safeguarding acknowledgment forms. Education-Related Information: School year, academic history, coursework samples, academic interests, target schools or universities, and general academic support needs. Communications Data: Records of correspondence and digital messages with you. Technical and Usage Data: IP address, browser type, device information, and website usage data, where collected through our website or service providers. Please do not send special category personal data or highly sensitive information unless it is necessary and specifically requested. We may collect personal data: Directly from you when you complete an onboarding or safeguarding form, email us, book a consultation, request a white paper, or otherwise contact us. From your use of our website. From parents or legal guardians acting on behalf of a child. From service providers who support our website and communications, where applicable. We may use your personal data to: Respond to enquiries, manage client records, and provide requested information. Assess whether our services are suitable for you or your child. Arrange consultations, tutoring-related discussions, or admissions support conversations. Send service-related, operational, and emergency communications. Maintain accurate internal business records and administer our operations. Protect our website, systems, users, and remote learning environments. Comply with legal, financial, and regulatory obligations. Establish, exercise, or defend legal claims. If you separately opt in to receive marketing communications, we may also use your details to send updates, insights, guides, or service information. You can unsubscribe at any time. Under UK data protection law, we rely on the following lawful bases to process your information: Consent: Where you explicitly choose to receive marketing communications or insights. Performance of a Contract / Pre-Contractual Steps: To evaluate student profiles, arrange consultations, and deliver our educational advisory and placement frameworks. Legal Obligation: To maintain accurate corporate accounting records, verify client billing entities, and satisfy UK statutory financial, accounting, and tax reporting requirements. Substantial Public Interest (Safeguarding): To process information necessary to ensure child welfare, online safeguarding monitoring, and student protection during remote sessions, in accordance with the Data Protection Act 2018. We understand that many enquiries and services relate to children and young people. In most cases, we expect parents or legal guardians to make initial contact with us and provide relevant information on the child's behalf. Where we process personal data relating to a child, we do so strictly where necessary, appropriate, and proportionate for the relevant educational enquiry, safety monitoring, or service delivery. We do not sell or rent personal data. We may share personal data where necessary with: Specialists, tutors, and consultants matched to your account to deliver our advisory frameworks. Website hosting, email, form, or digital communication service providers. IT, infrastructure, and security providers. Professional advisers, such as legal, compliance, or accounting advisers. Regulators, law enforcement, or public authorities where required by law. Other parties where necessary to establish, exercise, or defend legal claims. If we use third-party service providers, they are required to process personal data only on appropriate instructions and with suitable confidentiality and security measures. Because our educational consultancy operates internationally, our client base, administrative support networks, and consultant teams are cross-border. Consequently, personal data (including names, academic records, and parental contact details) will routinely be transmitted, processed, or accessed globally via secure cloud infrastructure and digital communication platforms. Some of these administrative operations take place in territories outside the United Kingdom which do not currently hold an official UK government adequacy regulation status. In accordance with Article 49 of the UK GDPR, these transfers are conducted because they are strictly necessary for the performance of our consultancy contract with you, ensuring we can deliver our placement and advisory frameworks. When you choose to communicate with us or submit onboarding profiles via third-party messaging applications (such as WeChat or WhatsApp), you acknowledge that your data is concurrently handled subject to the operational terms and privacy protocols of those respective platforms. We do not use automated decision-making or algorithmic profiling systems to make final determinations regarding student placement or consultant matching. Any analysis of a student's academic profile, test scores, or background is conducted with direct human intervention and expert review by our consultancy team. We will keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to respond to enquiries, provide services, meet legal or regulatory requirements, resolve disputes, and enforce our agreements. Financial and invoicing records are securely stored for a minimum of 6 fiscal years to satisfy UK statutory accounting and tax laws. Unconverted enquiry data is retained for future advisory opportunities unless you request its deletion. We may utilize standard tracking technologies, cookies, and analytics tools on our website to optimize our marketing campaigns and evaluate user experience. You can manage your cookie preferences through your browser settings. For more information, please see our Cookie Policy. We take reasonable technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. However, no method of transmission over the internet or electronic storage is completely secure. Our website may contain links to third-party websites. If you follow a link to any external site, please note that those sites have their own privacy policies and we do not accept responsibility or liability for them. Subject to applicable law, you have the right to: Request access to your personal data. Request correction of inaccurate or incomplete personal data. Request erasure of your personal data under certain conditions. Request restriction of processing or object to processing in certain circumstances. Request transfer of your personal data where applicable. Withdraw consent at any time where we rely on consent. To exercise any of these rights, please contact us at info@marksschooloxford.com. If you have concerns about how we handle your personal data, please contact us first at info@marksschooloxford.com and we will investigate the matter without undue delay to resolve the issue. You also have the right to lodge a formal complaint at any time with the UK supervisory authority, the Information Commissioner's Office (ICO), via www.ico.org.uk. We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.1. Who We Are
2. Personal Data We May Collect
3. How We Collect Personal Data
4. Purposes for Which We Use Personal Data
5. Lawful Bases for Processing
6. Children's Data
7. Sharing Personal Data
8. International Transfers
9. Automated Decision-Making and Profiling
10. Data Retention
11. Digital Marketing and Tracking
12. Security
13. Third-Party Links
14. Your Rights
15. Complaints
16. Changes to this Privacy Policy