Last Updated: 07 November 2025
1. Who We Are
IM AMBASSADOR LTD (“IM AMBASSADOR”, “we”, “us”, “our”) is a private limited company registered in England and Wales, providing international education and immigration consultancy services.
Registered Office: 160 Norbury Avenue, London CR7 8AG UK
Email: privacy@imambassador.com
Website: www.imambassador.com
We are the data controller for the purposes of the UK GDPR.
2. Purpose of This Notice
This notice explains how we collect, use, and protect personal data.
By engaging with us or using our website, you agree to the processing of your data in accordance with this Privacy Policy.
Nothing in this policy creates any contractual or legal right against IM AMBASSADOR LTD. We may update or vary this policy at our discretion, and the latest version will always apply.
3. What Data We Collect
We collect information that is necessary and proportionate for our business activities, which may include:
- Identity data: name, date of birth, nationality, ID/passport details.
- Contact data: postal address, email, telephone, WhatsApp or other messaging details.
- Academic/professional data: qualifications, transcripts, employment or reference details.
- Visa and compliance data: immigration history, CAS letters, visa decisions, sponsorship details.
- Financial data: bank details or proof of funds (where required by universities or embassies).
- Technical data: IP address, device type, browser, cookies, and usage statistics.
- Marketing preferences: responses to our campaigns or events.
We collect data directly from you, from publicly available sources, or from third-party partners (such as universities or authorised sub-agents) acting on your behalf.
4. How We Use Your Information
We use personal data for legitimate and necessary purposes including:
- Delivering our education and immigration consultancy services.
- Communicating with you regarding applications, admissions, and visa matters.
- Complying with legal, regulatory, or contractual obligations.
- Administering our relationship with partner institutions and channel partners.
- Marketing relevant services or events (where you have not opted out).
- Ensuring network and information security, auditing, and staff training.
We do not sell personal data.
We may anonymise or aggregate data for statistical or business-planning purposes. Such data is no longer considered personal data.
5. Lawful Bases for Processing
We rely on the following lawful bases:
- Contract: Processing necessary for performance of our services.
- Legal obligation: Compliance with UK, immigration, or education regulations.
- Legitimate interests: Running and protecting our business, developing services, and preventing fraud.
- Consent: Where you have clearly agreed (e.g. marketing communications).
Where consent is withdrawn, prior processing remains lawful.
6. Data Sharing
We may share data, on a need-to-know basis, with:
- Universities, colleges, and authorised education providers;
- UK Home Office, embassies, or visa-processing bodies;
- Our affiliated offices, consultants, and channel partners;
- Professional advisers (lawyers, accountants, auditors); and
- IT, CRM, cloud-storage, and marketing service providers.
We require all third parties to keep your information secure and to process it only under our instruction.
We accept no responsibility for how a third-party organisation independently manages your data once lawfully received in the course of an application or contractual relationship.
7. International Data Transfers
Your information may be transferred to or accessed by our offices or partners outside the UK (e.g. Pakistan, India, Nigeria, Ghana, Indonesia, UAE).
Whenever data is transferred internationally, we ensure that adequate safeguards (such as Standard Contractual Clauses or equivalent measures) are in place.
By submitting your information, you agree that such transfers may occur for service delivery purposes.
8. Data Retention
We keep your data only as long as necessary for legitimate business, legal, or regulatory reasons, generally:
- Client and application files: up to 6 years after service completion;
- Financial and accounting records: 7 years;
- Marketing records: until you unsubscribe.
After these periods, information is securely deleted or anonymised.
9. Data Security
We implement proportionate technical and organisational measures to safeguard data from loss, misuse, unauthorised access, disclosure, or alteration.
While we take reasonable steps to protect your data, no electronic transmission or storage system is completely secure, and we cannot guarantee absolute security.
10. Your Rights
Under the UK GDPR, you may:
- Request access to the personal data we hold about you;
- Request correction of inaccurate data;
- Request deletion or restriction of processing (subject to legal exceptions);
- Object to certain processing, including direct marketing;
- Request data portability in certain cases.
To exercise these rights, please email privacy@imambassador.com.
We may require verification of identity before responding.
We may lawfully refuse a request where it is manifestly unfounded, excessive, or conflicts with our legal obligations.
11. Marketing and Communications
You may receive communications about services or opportunities similar to those you have previously used or enquired about.
You can opt-out at any time by emailing unsubscribe@imambassador.com or using the unsubscribe link in our messages.
Opting out will not affect service-related communications necessary for your applications.
12. Cookies
Our website uses cookies for functionality, analytics, and performance.
You may adjust browser settings to refuse cookies; however, some website features may not function properly as a result.
Details are provided in our Cookie Policy.
13. Third-Party Links
Our website may contain links to external websites.
We are not responsible for and disclaim liability for the privacy practices or content of such third-party sites.
You should review their policies before submitting personal data.
14. Limitation of Liability
To the fullest extent permitted by law:
- IM AMBASSADOR LTD shall not be liable for any indirect, consequential, or incidental damages arising from use or disclosure of personal data in accordance with this policy.
- We do not accept responsibility for unauthorised access or disclosure beyond our reasonable control.
Your use of our services signifies acceptance of this limitation.
15. Changes to This Policy
We may amend this policy at any time.
Updates take effect immediately upon publication on our website.
We encourage you to review it regularly.
16. Contact Us
For any privacy-related queries or complaints, please contact:
Data Protection Officer
IM AMBASSADOR LTD
privacy@imambassador.com