Privacy Policy

Edudax ("we", "us", "our") operates the online learning and course marketplace at edudax.com. We connect students with education providers — universities, colleges and professional bodies — worldwide, enabling students to discover, apply for and study courses online.

Edudax is the data controller responsible for the personal data we collect through this website and the services provided through it. Our governing law is England and Wales.

We collect only the personal data necessary to provide our services:

Account data: your name, email address, password (stored as a one-way hash) and role (student, provider or administrator) when you register or sign in.

Student application data: education history, documents you upload (such as transcripts, passports or qualifications), and the information you provide in course applications.

Provider data: organisation details, staff records, course information and commission terms.

Payment data: we process enrolment and tuition payments. Card details are handled by our payment processor and are never stored on Edudax servers.

Usage data: pages visited, device type, approximate location (country/region) and cookies, as described in the Cookies section below.

Communications: messages you send us and messages exchanged between students and providers through the platform.

We use your personal data to:

Create and manage your account and authenticate your sign-in.

Process course applications, enrolments and tuition payments.

Deliver access to learning materials and connect enrolled students with the relevant provider's virtual learning environment (VLE).

Communicate with you about your account, applications, payments and platform updates.

Calculate and administer commissions between Edudax and education providers.

Maintain the security, integrity and performance of the platform.

Comply with our legal, regulatory and contractual obligations.

Under the UK GDPR we rely on the following lawful bases:

Contract: processing necessary to set up and manage your account and to deliver the services you requested.

Legal obligation: where we are required to retain or disclose data by law.

Legitimate interests: to operate, secure and improve the platform, and to prevent fraud.

Consent: for non-essential cookies and optional marketing communications. You can withdraw consent at any time.

We share personal data only where necessary to deliver our services or where required by law:

Education providers: the information needed to assess your application, enrol you and deliver your course, including access to your VLE.

Payment processors: to take and refund payments. They process card data under their own PCI-DSS compliance.

Service providers: hosting, email delivery and analytics providers who act as processors under contract with us.

Authorities: where disclosure is required by law, regulation or court order.

We never sell your personal data.

Because Edudax connects students and providers worldwide, your data may be processed outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements or recognised adequacy decisions, so your data is protected to UK GDPR standards.

We retain personal data only for as long as necessary to provide our services and to meet legal, accounting and regulatory requirements. Account data is kept while your account is active and for a reasonable period after closure to handle any outstanding matters. Application and enrolment records are retained for the duration of your studies and the statutory period thereafter.

We use cookies and similar technologies to operate the site, remember your preferences, and understand how the site is used. Essential cookies are required for the site to function. Optional analytics and marketing cookies are only set if you accept them via the cookie banner.

You can change your cookie choice at any time by clearing your browser storage for edudax.com, which will re-show the consent banner.

Under the UK GDPR you have the right to:

Be informed about how we use your data.

Access the personal data we hold about you.

Rectify inaccurate data and complete incomplete data.

Erase your data in certain circumstances ("right to be forgotten").

Restrict or object to processing.

Data portability.

Withdraw consent at any time where processing relies on it.

To exercise any of these rights, contact us using the details below.

We use appropriate technical and organisational measures to protect your personal data, including encrypted password storage, role-based access control, secure session handling and regular review of our systems. No system is perfectly secure, but we work to keep your data safe and to respond promptly to any incident.

Edudax is intended for users aged 16 and over. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with data, please contact us and we will delete it.

We may update this policy from time to time. We will indicate the date of the last revision below and, where changes are significant, notify you through the platform or by email.

If you have any questions about this privacy policy or how we handle your personal data, please contact us through our contact page. If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.