How we handle college enquiries, accounts and permitted documents. Effective 10 October 2026. Online submissions and public email sign-in are currently closed.
The controller is ALBION GATEWAY COLLEGE LTD, company number 17505643, registered in England and Wales. Admissions: [email protected]. Privacy requests: [email protected]. Our provisional operating location is Central London. Online submissions and public account registration are currently closed.
Forms record the adult enquirer’s or guardian’s name, email and selected contact details; general enquiries also record country, city, interests and message. Academic consultations additionally record university, degree level, subject, module name and code, outline summary, support needs, preferred package, format and language, availability and time zone, preferred start date and referral channel. Page source, campaign tags, required acknowledgements and the optional marketing choice are also recorded to respond, match requested support and manage follow-up. Where a permitted form is available, recruitment and academic support enquiries may include an optional PDF CV or course outline (maximum 2 MB). General enquiries do not request attachments. Recruitment forms also record the chosen role, relevant experience, languages and availability. Do not submit passport copies, health details, children’s personal information, assessed assignments or third-party personal information.
The basis for requested pre-contract enquiries is steps taken at the individual’s request before a contract, where applicable. Other enquiries may require a documented legitimate-interests assessment. College-update emails have a separate, unchecked-by-default option; the system records the choice and provides an unsubscribe route. Automated marketing campaigns are not enabled. A marketing choice is not required to receive a reply to an enquiry.
Cloudflare Pages hosts the website; protected D1 stores enquiry records and private R2 stores permitted documents. Staff downloads require authentication. Cloudflare’s Self-Serve Subscription Agreement incorporates its data processing addendum, including provisions for UK transfers. Purelymail (Add Rabbit LLC) provides college email. Notifications contain a category, reference and protected staff link; replies and sign-in messages require an email address. Suppliers may process data internationally. Public website submissions and email account registration remain closed while the applicable Purelymail processing and transfer arrangements are confirmed. Applicant data is not placed in website source code.
Reference: Cloudflare Self-Serve Subscription Agreement · section 6.1 · Cloudflare customer data processing addendum · Purelymail privacy policy
Unconverted education enquiry records have a five-year retention period from the original submission date. We review necessity and erase unnecessary personal data at expiry; earlier erasure may apply. Any justified exception is documented separately. Administrative edits do not restart the period. Recruitment applications are reviewed six months after submission; continued retention needs a documented current purpose. Account contact and access records are retained while the account is needed for an active enquiry or agreed service, then reviewed for erasure; financial or contractual records are assessed separately for their purpose. Contact [email protected] for access, correction, erasure, restriction, objection or consent withdrawal where applicable. You may complain to the UK Information Commissioner.
Reference: ICO guidance · storage limitation
An adult parent or guardian makes an initial under-18 enquiry using their own contact details. No third-party advertising tracker is installed. Optional career-page visit counts are off until you opt in and can be withdrawn. Website forms use the same college website. Account sessions require a secure cookie; staff administration and private previews use Cloudflare Access and its necessary authentication cookies.
Email sign-in uses the email address, account ID and necessary technical records. One-time links expire in 15 minutes and sessions in eight hours. The database stores token hashes, not a user password. Enrolment records require staff verification before being linked to an account. Recruitment roles are separate from staff administration, and applicants access only their own records or explicitly permitted disclosures. Public sign-in is currently closed.
Students may upload a PDF, PNG or JPEG receipt to their authenticated learning account. Receipts are stored privately and available only to the student and authorised college staff. The Director receives a reference and a protected review link, not the receipt attachment. Receipts are used to reconcile the invoice with actual bank funds; upload does not confirm payment. Redact unrelated balances, account numbers and third-party information. Contact the college for correction or deletion requests.
