1. Introduction

Unique Mark Limited, trading as Unique Mark - Education Consultancy ("Unique Mark", "we", "us" or "our"), is committed to handling personal information responsibly. This policy explains our processing of personal data under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where relevant, the Privacy and Electronic Communications Regulations (PECR).

This policy applies to uniquemark.co.uk, our communications, and our lead-generation activities on Facebook and Instagram. Please read it before submitting an enquiry.

2. Who we are and how to contact us

For the personal data covered by this policy, the data controller is:

Please put “Privacy Request” in the subject line when contacting us about personal data. We have not appointed a statutory Data Protection Officer; our privacy contact handles data-protection enquiries.

3. Information we collect

We collect only information that is relevant to our services and communications. The categories may include:

4. Facebook and Instagram Lead Ads / Instant Forms

We may advertise courses and services through Meta platforms, including Facebook and Instagram. When you choose to submit an Instant Form, Meta provides us with the information you elect to submit, generally your name, email address and telephone number, and any permitted enquiry selection.

We use this lead data to respond to the request connected with the advert, such as providing course information, arranging a call or helping you take the next requested step. We may receive the lead in our business systems and process it through Google Sheets to record, manage and allocate enquiries. We do not sell Meta lead data or use it for a purpose incompatible with the notice shown in the form.

If you choose to continue to an eligibility assessment, we may ask for further information directly from you through a separate appropriate process. We will explain why it is needed before requesting it.

Meta processes information under its own terms and privacy policy. Its processing may include the provision and security of its platforms, advertising measurement and other purposes described by Meta. Please see Meta's Privacy Policy. We are responsible for our own use of the lead information after receiving it.

5. How we use information and our lawful bases

UK GDPR requires us to have a lawful basis for each use of personal data. Depending on the circumstances, we use the following bases:

Where we rely on consent, you may withdraw it at any time by emailing us or using an unsubscribe option. Withdrawal does not affect processing already carried out before it was withdrawn. Where we rely on legitimate interests, you may object; see Section 10.

6. Eligibility and sensitive personal information

For some courses, eligibility may depend on factors such as UK residency or length of stay, immigration/right-to-work status, or the type of document you hold (for example, passport, indefinite leave to remain, visa category, or refugee/asylum status). We may collect this information only when it is relevant to an eligibility assessment, application, enrolment, funding or legal requirement.

Immigration and residency status are personal data and we treat them as sensitive in practice, even though they are not automatically a UK GDPR “special category” in the strict legal sense. We restrict internal access to colleagues who need the information for the stated purpose and apply safeguards proportionate to the risk. Please do not send passport scans, document numbers or any health, disability, criminal-offence or other special-category information unless we specifically request it through an appropriate secure channel.

7. Who we share information with

We do not sell or rent your personal information. We may share it only where necessary with:

• Meta Platforms, Inc. and/or Meta Platforms Ireland Limited: where you interact with Facebook or Instagram adverts, submit an Instant Form, or communicate through WhatsApp. Meta processes information under its own terms and privacy policies.
• Google: Google Sheets is used to process and manage lead enquiries; Google Analytics 4 is used to understand website use where you consent.
• Colleges, universities, training partners, funding bodies and awarding organisations: only when relevant to an enquiry, eligibility assessment, application, enrolment, funding or legal obligation.
• Our service providers: website hosting, IT/security, communications, CRM and professional-advice providers that support our business and are bound by contractual or legal confidentiality and data-protection duties.
• Authorities and legal advisers: where required by law, to establish/exercise/defend legal claims, or to protect rights, safety and security.

Providers may act as processors on our instructions or, in some cases, as independent controllers under their own terms. We limit access to what is necessary and use appropriate agreements and safeguards.

8. How long we keep information

We retain personal data only for as long as necessary for the purpose collected, taking account of legal, funding, tax, audit and dispute-resolution obligations. Our standard schedule is:

When the applicable period ends, we securely delete or anonymise the information. We may retain limited information where necessary to comply with law, resolve disputes, prevent fraud or enforce our rights.

9. Cookies, Google Analytics 4 and Meta Pixel

Cookies are small files placed on your device. We use strictly necessary technologies to operate our site. We also use Google Analytics 4 (GA4) to understand site performance and the Meta Pixel to measure advertising effectiveness, understand conversions and, where permitted, create or use advertising audiences.

GA4 and Meta Pixel can involve information such as online identifiers, browser/device details, pages visited, actions taken, approximate location derived from IP address and advertising interaction data. The Meta Pixel may enable us to measure whether someone who saw or clicked a Meta advert later took an action on our website.

For questions about the cookies and similar technologies used on this website, email support@uniquemark.co.uk.

10. International data transfers

Some providers we use, including Meta and Google, may process information outside the United Kingdom. Where a restricted transfer occurs, we will use a recognised UK transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), the UK Addendum to standard contractual clauses, or another valid safeguard, together with any required assessment and supplementary measures. Meta's transfer arrangements are described in its own privacy information and applicable data-transfer terms.

11. Your data-protection rights

Subject to UK GDPR conditions and exemptions, you have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of information in certain circumstances;
• request restriction of processing in certain circumstances;
• receive data you provided to us in a portable format where applicable;
• object to processing based on legitimate interests and object at any time to direct marketing;
• withdraw consent where our processing relies on consent; and
• ask for human review of a solely automated decision that has legal or similarly significant effects, if applicable.

To exercise a right, email support@uniquemark.co.uk. We may need to verify your identity. We normally respond within one month; if a request is complex, we will tell you if we need more time.

You can also complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or telephone 0303 123 1113. We would appreciate the opportunity to address your concern first.

12. Security and children

Security

We use reasonable technical and organisational safeguards designed to protect personal data, including HTTPS encryption in transit, restricted access, secure passwords, multi-factor authentication where available, staff awareness, supplier due diligence and procedures for detecting and responding to incidents. We apply additional care to eligibility information by limiting access to staff who need it. No internet transmission or storage system is completely secure, but we work to reduce risk and will deal with reportable personal-data breaches in accordance with applicable law.

Children's privacy

Our services and this advertising campaign are intended for adults aged 18 or over. We do not knowingly use online forms to collect personal data from anyone under 18. If you believe a minor has provided us with information, please contact us so that we can investigate and take appropriate action.

13. Changes to this policy

We may update this policy when our services, technology, legal duties or processing activities change. We will publish the revised version on this page and update the "Last updated" date. We retain an internal change record so material revisions can be traced. Material changes may also be brought to your attention by an appropriate additional notice.

© 2026 Unique Mark Limited, trading as Unique Mark - Education Consultancy. Last updated 16 July 2026.