Engage
Menu
Engage

Privacy Policy

English School Institute

The English School Institute (the “Institute”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of all users of its website, including parents, students, prospective students, applicants, staff, and visitors.

This Privacy Policy explains how we collect, use, store, share, and protect personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Cyprus data protection laws.

  1. Data Controller

The data controller responsible for your personal data is:The English School Institute

  1. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identification details (e.g. name, surname)
  • Contact information (e.g. email address, telephone number)
  • Student and parent/guardian details submitted through enquiry or application forms
  • Admissions and entrance examination information
  • Communications sent to us via forms, email, or other channels
  • Technical data, including IP address, browser type, device information, and usage data

We do not knowingly collect personal data from children without the involvement or consent of a parent or legal guardian.

  1. How We Collect Personal Data

Personal data may be collected:

  • When you complete online enquiry, registration, or application forms
  • When you communicate with us by email or telephone
  • When you subscribe to newsletters or updates
  • Through cookies and similar technologies when you use our website
  1. Purposes and Legal Bases for Processing

We process personal data only where permitted by law, for the following purposes and legal bases:

  • Admissions and entrance examinations – performance of a task carried out in the public interest or in the legitimate interests of the Institute
  • Responding to enquiries and communications – legitimate interests
  • Managing applications and enrolment processes – performance of a contract or steps prior to entering a contract
  • Compliance with legal and regulatory obligations – legal obligation
  • Website functionality and security – legitimate interests
  • Marketing communications (where applicable) – consent

Where processing is based on consent, you may withdraw consent at any time.

  1. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

  • Admissions and examination data: retained in line with educational and legal requirements
  • Enquiry data: retained for a reasonable period to allow follow-up
  • Communications: retained in accordance with internal record-keeping policies

When data is no longer required, it is securely deleted or anonymised.

  1. Data Sharing and Disclosure

We do not sell or rent personal data to third parties.

Personal data may be shared only:

  • With authorised Institute staff
  • Where required by law or regulatory authorities

All third parties are required to process data in compliance with GDPR.

  1. International Data Transfers

Personal data is primarily processed within the European Union.

If data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

  1. Data Security

We implement appropriate technical and organisational measures to protect personal data against:

  • Unauthorised access
  • Loss or destruction
  • Alteration or disclosure

Despite these measures, no system can be guaranteed to be completely secure.

  1. Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Request rectification of inaccurate or incomplete data
  • Request erasure of personal data (where applicable)
  • Request restriction of processing
  • Object to processing based on legitimate interests
  • Request data portability
  • Withdraw consent at any time (where processing is based on consent)

Requests can be made using the contact details above.

  1. Cookies

Our website may use cookies and similar technologies to enhance user experience and analyse website usage.

You may manage cookie preferences through your browser settings. Further details are provided in our Cookie Policy, where applicable.

  1. Links to External Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page and will take effect upon publication.

  1. Contact Us

If you have any questions about this Privacy Policy or how we handle personal data, please contact us.