Privacy Policy
Last updated:13/07/2026 | Effective from: 13/07/2026
Version: 2.0 — see Section 16 (Version History) for a summary of changes from the previous version.
Welcome to Baecons.com (“we”, “us”, “our”, “Baecons”). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website and services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy applies whenever you visit our website, apply for a course, or otherwise interact with us. We process your personal data on the lawful bases set out in Section 5, not on the basis that you have “accepted” this policy by using the site. Where we do rely on your consent (for example, for marketing emails or non-essential cookies), we will ask for it separately and you can withdraw it at any time, as explained below.
Data Controller: BA Educational Consultancy Ltd (trading as Baecons), registered in England and Wales, company number 10108318.
Registered / Operational Addresses:
General contact: admin@baecons.co.uk | +44 (0) 203 602 5080
Data Protection Contact: We have not appointed a statutory Data Protection Officer, as this is not currently required for our size and type of processing. Instead, all data protection queries, requests, and concerns should be sent to our designated Data Protection Contact at privacy@baecons.co.uk, who is responsible for handling these matters. We will keep this designation under review as our processing activities change.
We collect the following categories of personal data. Where we did not collect the data directly from you (for example, from a partner institution or referral agent), we say so below.
| Category | When / How Collected | Purpose / Use |
| Identity & contact data (name, email, phone, postal address) | When you complete contact, enquiry, or “Apply Now” forms | To respond to enquiries and process applications |
| Academic / educational background, course preferences | Provided by you during application or counselling; occasionally shared with us by a partner institution or agent acting on your behalf | To assess your profile and recommend courses or institutions, and support admissions/visa advice |
| Payment / financial data | When payments are processed for courses or training | To process payments, issue invoices and refunds, and keep financial records |
| Technical & usage data (IP address, device/browser info, pages visited, timestamps) | Automatically, when you browse the website | Security, analytics, site performance, fraud detection |
| Cookies / tracking data | Via your browser, where you consent (see Section 10) | To personalise content, remember preferences, and measure traffic |
| Other information you provide (messages, feedback, survey responses) | When you contact us or complete forms | To respond to requests and maintain correspondence records |
The table below maps each main type of data we use to the specific purpose it is used for and the legal basis we rely on, as required for UK GDPR transparency.
| Purpose | Data used | Legal basis |
| Processing your course application / providing consultancy services | Identity & contact data, academic data | Contractual necessity |
| Processing payments, invoicing, refunds | Financial data, identity data | Contractual necessity; legal obligation (accounting records) |
| Sending you marketing emails about courses, events, or promotions | Identity & contact data | Consent (opt-in, see Section 6) |
| Site analytics and improving our services | Technical & usage data, cookies | Legitimate interests (see Section 5.1) |
| Fraud prevention and site security | Technical & usage data | Legitimate interests (see Section 5.1) |
| Regulatory and tax reporting | Financial data, identity data | Legal obligation |
Where we rely on “legitimate interests”, the specific interests we are pursuing are:
Before relying on legitimate interests, we consider whether the processing is necessary, and we weigh our interest against your rights and freedoms (a “balancing test”) — for example, checking that the processing would not be excessive, unexpected, or intrusive, and that it does not involve special category data. Where our interests do not outweigh your rights, we do not rely on this basis, and we will instead seek consent or another lawful basis, or not process the data. You have the right to object to processing based on legitimate interests at any time (Section 8).
Where we send you marketing communications, we do so only where you have opted in — for example, by ticking a consent box on a form, or through a double opt-in confirmation email. We do not add you to marketing lists by default. You can withdraw consent at any time by using the unsubscribe link in any marketing email or by contacting privacy@baecons.co.uk.
We may share your personal data with the following categories of recipients:
We require every third-party processor to sign a data processing agreement committing them to appropriate security and confidentiality obligations, and to only process your data on our instructions.
We have offices in the UK and Nigeria, and some of our service providers are based outside the UK. This means your data may sometimes be transferred to, and processed in, countries including Nigeria, the United States, and the European Economic Area, depending on where our processors (such as hosting, email, or analytics providers) are located.
Countries outside the UK do not all provide the same level of legal protection for personal data as the UK. Where we transfer data internationally, we put safeguards in place so your data continues to be protected to UK standards, such as:
You can ask us for more information about the specific safeguards used for a particular transfer by contacting privacy@baecons.co.uk.
We keep personal data only for as long as necessary for the purpose it was collected, or as required by law. Specific retention periods are:
| Data type | Retention period |
| General enquiries (no application made) | 12–24 months from last contact |
| Client / applicant records (application submitted) | 6 years from the end of our relationship, to meet contractual and regulatory record-keeping needs |
| Financial records (invoices, payment data) | 6 years, as required by UK tax and accounting rules |
| Marketing contact data | Until you withdraw consent or unsubscribe |
| Website technical / analytics data | Up to 26 months |
After the relevant period, we securely delete or anonymise the data. Where a legal claim is reasonably anticipated, we may retain relevant data for longer, for as long as needed to establish, exercise, or defend that claim.
We use cookies and similar technologies for the purposes set out below. On your first visit, we show a cookie banner so you can choose which non-essential cookies to accept; non-essential cookies are not set until you give consent, and you can change your choice at any time via the cookie preference link in our website footer or your browser settings.
| Cookie name | Type | Purpose | Duration |
| [session_id] | Strictly necessary | Maintains your session and form submissions | Session |
| [cookie_consent] | Strictly necessary | Remembers your cookie preferences | 12 months |
| [_ga / analytics] | Analytics (optional) | Measures site traffic and usage patterns | Up to 26 months |
| [marketing/ads cookies] | Marketing (optional) | Measures marketing campaign effectiveness | Up to 12 months |
Note: cookie names above should be updated to match the exact cookies actually set on the live site; we recommend running a cookie audit and keeping this table current, or maintaining it in a separate, linked Cookie Policy.
We do not currently use fully automated decision-making or profiling that produces legal or similarly significant effects on you without human involvement. Any course or institution recommendations you receive involve review by a member of our team. If this changes in the future, we will update this policy to explain the logic involved, its significance, and your right to request human review of any such decision.
Under UK GDPR, you have the following rights, subject to certain exemptions:
To exercise any of these rights, contact us at privacy@baecons.co.uk. We aim to respond within one month, which may be extended by a further two months for complex requests; we will let you know if this applies.
If you are unhappy with how we have handled your personal data, we encourage you to contact us first at privacy@baecons.co.uk so we can try to resolve it. You also have the right to lodge a complaint at any time with the UK’s supervisory authority:
We use appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, damage, or destruction, including:
No system is completely secure, so we also encourage you to use a strong, unique password and to keep your login details confidential.
Our website and general marketing are not directed at children under 16. However, our education consultancy services may be used by, or on behalf of, applicants who are under 18 (for example, students applying to secondary or sixth-form programmes).
Where we knowingly process the personal data of an applicant under 16, we require the involvement and consent of a parent or legal guardian as part of the application process, and we communicate primarily with the parent/guardian regarding that consent. If you believe we hold data about a minor without appropriate parental consent, please contact privacy@baecons.co.uk and we will investigate and delete it where appropriate.
Our site may contain links to external websites operated by third parties, such as partner universities or colleges. This Privacy Policy does not apply to those sites, and we encourage you to review their privacy policies separately.
We may update this Privacy Policy from time to time, for example because of changes in law or our business practices. When we do, we will post the revised policy with an updated “Last updated” date and, for significant changes, notify you by email or a notice on our site.
| Version | Date | Summary of changes |
| 1.0 | 09.10.2025 | Initial published version |
| 2.0 | 13.07.2026 | Added Data Protection Contact; mapped lawful bases to specific processing; expanded legitimate interests, retention periods, and cookie detail; clarified children’s data, international transfer destinations, automated decision-making, and ICO complaint route; removed implied consent-by-use wording |
This policy is governed by the law of England and Wales. If any provision is found invalid or unenforceable, the remainder will continue to apply. Nothing in this policy limits your statutory rights under applicable data protection law.
BA Educational Consultancy Ltd — registered in England and Wales, company number 10108318.
Data Protection Contact: privacy@baecons.co.uk | General: admin@baecons.co.uk | +44 (0) 203 602 5080
Offices in London, Manchester, and Lagos.