Privacy Policy
Last updated: 15 February 2026
We respect your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR — EU 2016/679) and applicable UK data protection law.
1. Data Controller
The data controller responsible for processing your personal data is: URM ENROLL LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Email: contact@enrollurm.com.
2. Data We Collect
We collect: (a) contact details (name, email, phone number) submitted through our forms; (b) organization information and inquiry notes; (c) service preferences and program interests; (d) technical data such as IP address (anonymized), browser type, device type, and pages visited; (e) cookie consent preferences stored locally on your device.
3. Legal Basis for Processing (Art. 6 GDPR)
We process your data based on: (a) your consent (Art. 6(1)(a)) — for analytics and marketing cookies; (b) performance of a contract or pre-contractual measures (Art. 6(1)(b)) — to respond to inquiries and deliver requested services; (c) legitimate interests (Art. 6(1)(f)) — to improve our website and services, provided your rights are not overridden.
4. Analytics & Tracking
With your consent, we use: Google Analytics 4 (GA4) — with IP anonymization enabled (anonymize_ip: true). GA4 collects anonymized usage data to help us improve our website. Data may be transferred to Google LLC (USA) under Standard Contractual Clauses. Meta Pixel — activated only when you consent to marketing cookies. It helps measure the effectiveness of our campaigns. Data is transferred to Meta Platforms, Inc. (USA) under Standard Contractual Clauses. Both services fire only after you provide explicit consent through our cookie banner.
5. Cookie Consent Categories
We use a granular consent system with two opt-in categories: (a) Analytics cookies — used for anonymous site usage statistics (GA4); (b) Marketing cookies — used for campaign measurement (Meta Pixel). Essential cookies (consent storage, language preference) do not require consent and are always active. You can change your preferences at any time via the cookie settings in the footer.
6. Data Sharing & International Transfers
We do not sell your personal data. We share data only with: (a) verified institutional partners required to fulfill your enrollment request; (b) analytics providers (Google, Meta) when you have given consent; (c) authorities when required by law. Where data is transferred outside the EEA/UK, we rely on Standard Contractual Clauses or adequacy decisions.
7. Data Retention
We retain personal data only as long as necessary for the purpose it was collected: inquiry data is retained for up to 24 months; analytics data is anonymized; consent records are stored locally on your device.
8. Your Rights (Art. 15–21 GDPR)
You have the right to: (a) access your personal data (Art. 15); (b) rectification of inaccurate data (Art. 16); (c) erasure / right to be forgotten (Art. 17); (d) restriction of processing (Art. 18); (e) data portability (Art. 20); (f) object to processing based on legitimate interests (Art. 21); (g) withdraw consent at any time without affecting lawfulness of prior processing. To exercise these rights, contact us at contact@enrollurm.com.
9. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In the UK: Information Commissioner's Office (ICO), https://ico.org.uk. In Germany: The data protection authority of the relevant federal state (Landesdatenschutzbeauftragte).
10. Security
We implement appropriate technical and organizational measures to protect your data, including encrypted connections (TLS/HTTPS), access controls, and regular security reviews.