This notice concerns personal information handled by INTERNATIONAL EDUCATION SERVICES GROUP LTD through iepx.org and related company enquiries and engagements. The company is registered in England and Wales under number 17405433, with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom.
For privacy questions or requests, email privacy@iepx.org or use the privacy-request form.
Who is responsible
IESG determines the purposes and handling of personal information used for its own company enquiries, professional relationships and administration. An engagement may also involve information handled on an institution's instructions; the relevant agreement establishes those responsibilities.
EducationB2B, ICEQC and other organisations may be responsible for their own activities and records. Read the notice applicable to the service or system concerned. A link or operating relationship does not make IESG responsible for every record held by another organisation.
Information we receive
The information relevant to company enquiries can include your name, role, organisation, business contact details, country or territory, enquiry content and related correspondence. Service administration can also involve agreed project records, contractual information, invoices and the identity or authority information necessary for a particular task.
Information may come directly from you, from an authorised institutional contact, from correspondence involving the relevant organisations or from a public professional source used to understand an institutional relationship. Where information is obtained indirectly, its source and use must be considered for the activity involved.
Technical connection and security information may be processed to deliver and protect the website, investigate misuse and maintain service reliability. Read the Cookie policy for storage and access technologies.
Why information is used
The following describes the purposes and bases relevant to ordinary company activity:
| Purpose | Basis and interest |
|---|---|
| Consider and respond to a professional enquiry | Legitimate interests in communicating with institutional contacts and assessing a relevant service request; pre-contract steps where the individual is the prospective contracting party |
| Organise and deliver an accepted engagement | Performance of a contract with an individual contracting party, or legitimate interests in administering an institutional engagement and communicating with its representatives |
| Manage invoices, company records and required disclosures | Applicable legal obligations, together with legitimate interests in responsible business administration where relevant |
| Investigate service concerns, resolve disputes and establish or defend claims | Legitimate interests in fair review, accountability and protection of legal rights; legal obligations where applicable |
| Protect the site and information from misuse | Legitimate interests in the security and reliable operation of the service, subject to applicable technology rules |
| Deal with a personal-information request | Applicable legal obligations and proportionate administration of the request |
Where consent is used for a distinct optional activity, that activity requires a clear choice and a way to withdraw it. An ordinary service enquiry is not permission for unrelated marketing.
Information needed for an enquiry
Required fields identify what is necessary to understand and respond to the request. If that information is not supplied, we may be unable to address the enquiry. Optional fields can be left empty.
Do not provide unnecessary student records, identity documents, health information or protected third-party material in a general form. If an engagement requires such information, its purpose, handling basis and transfer arrangements must be established separately before collection.
Access and recipients
Information is available to personnel who need it for the relevant activity. Service providers supporting website infrastructure, security, communications, document handling or administration may process information within their assigned role and applicable arrangements.
Professional advisers, a client institution or an external authority may receive relevant information where necessary for the work, a fair review or a legal requirement. Formal application material is handled under the applicable mandate and procedure; an enquiry does not authorise unrestricted disclosure.
The domain iepx.org is managed through Cloudflare. The treatment of connection information depends on the infrastructure and security functions used for the website; domain management does not mean that every company record is held by that provider.
International handling
Institutional work and service providers can involve more than one country. Before a transfer requiring safeguards is made, the recipient, purpose, destination and applicable transfer basis must be established. Relevant safeguards may include an adequacy basis or approved contractual arrangements, according to the circumstances.
You can request information about the destinations and safeguards relevant to your information from privacy@iepx.org. An institution's decision to cooperate internationally does not remove the need to consider the information shared.
Retention
Information is retained for the purpose for which it is needed and any necessary legal, accounting or dispute period. Relevant criteria include whether an enquiry remains active, whether it led to an engagement, the continuing need for the record, applicable retention duties and whether a legal matter requires preservation.
Unnecessary material should be deleted or anonymised when the relevant purpose ends, subject to a documented reason for retention. Ask the privacy contact for the criteria applying to a particular record category.
Security and decisions
Access, transfer and retention arrangements should reflect the nature and sensitivity of the information. No communication method can be assumed risk-free, so confidential material should use the channel agreed for the engagement.
The institutional enquiry route does not make a legally significant decision about you solely through an automated form result. A form acknowledgement records receipt; it does not approve a service, partnership or certification application.
Your requests and choices
Depending on the circumstances and applicable law, you may ask for access, correction, deletion, restriction or portability of personal information.
You may object to processing based on legitimate interests, including direct marketing where applicable. Explain the activity concerned using the privacy contact. Where use is based on consent, you may withdraw that consent without affecting the lawfulness of earlier use.
We may need proportionate clarification of identity, authority or the records concerned. Please do not send identification documents with your initial request.
Concerns and supervisory authorities
Contact privacy@iepx.org if you are concerned about IESG's handling of information. You can also raise a complaint with the UK Information Commissioner's Office or another authority with jurisdiction over the matter.
Changes and related information
The notice is maintained to reflect the purposes and arrangements for company information. Material changes affecting an existing use may require additional communication. The date in the maintained website record identifies the current version.