Privacy Policy
This policy explains what personal data we collect throughpassion-education.com and its sub-pages — the corporate site, the education-fair registration pages and the partner-school landing pages — what we do with it, who we share it with, and the rights you have over it. It also describes how we handle data we receive from the Meta platform and from Google APIs. We are the data controller for everything described below. You can ask us to delete all of it at any time — seeData Deletion Instructions — and the measures protecting it are set out in our Security Policy.
1. Data we collect
Data you give us
- Fair and school registrations. First and last name, date of birth, email address, phone number (with country code), city and country, preferred language, intended study level and destinations, intended intake, indicative budget range, academic background and, where the registrant is under 18, a parent or guardian’s name and contact details.
- Institution enquiries. Name, work email address, institution, country, area of interest and the content of your message.
- Meta lead forms. Where you submit an instant form on one of our Facebook or Instagram advertisements, Meta passes us the name, email address, phone number and answers you entered there, together with the campaign, ad set and ad the form belonged to and the time you submitted it. We retrieve those leads from Meta Ads Manager and import them into our CRM.
- Correspondence. Anything you send us by email, phone or messaging apps — including our website chat, Telegram and WhatsApp — and the fact, time and duration of a call you make to or receive from us.
- A messaging app you connect to your registration. Where you open our Telegram bot from the link in your confirmation, we record the identifier that platform gives us for the chat, and the date you connected it, so that we can send you reminders and updates about the event there. Connecting is entirely optional, it is never done on your behalf, and you can stop it at any time by sending/stop in that chat.
Data collected automatically
- Technical and campaign data attached to a submission: the page you submitted from, referring URL, UTM parameters, Google (
gclid) and Meta (fbclid) click identifiers, device type, user agent, and the date and time of submission. - Analytics and advertising. Where you accept the relevant cookies, Google Analytics 4 and the Meta pixel set identifiers in your browser and report page views and form submissions to us. Marketing scripts load only after you consent; declining leaves them unloaded.
We do not ask for, and ask you not to send us, passport scans, financial account details, health data or any other special-category data through the forms on this site.
2. Why we use it, and on what legal basis
| Purpose | Basis |
|---|---|
| Registering you for an event, issuing your registration number and admitting you at the door | Performance of a contract / your request |
| Sending you the confirmation email and event-related service messages | Performance of a contract / your request |
| Introducing you to the educational institutions you selected, and passing your registration to them | Your consent, given on the form |
| Sending you information about courses, scholarships and future events | Your consent, withdrawable at any time |
| Answering an enquiry from an institution and managing the partnership | Legitimate interest in running our business |
| Measuring which campaigns produce registrations, and reporting conversions to Google and Meta | Your consent to analytics / marketing cookies |
| Security, fraud prevention, accounting and complying with the law | Legitimate interest and legal obligation |
3. Who we share it with
We disclose personal data only to the following categories of recipient, and only for the purposes set out above. We do not sell personal data, and we do not disclose it to advertising networks or data brokers for their own purposes.
- Educational institutions. Where you consented on the registration form, we pass your registration to the institutions you selected and to institutions participating in the event you registered for, so that they can contact you about their programmes. They become independent controllers of that data and apply their own privacy notices.
- Hosting and infrastructure providers established in the European Union, which host the systems on which we keep registrations and correspondence. They act on our instructions under a data processing agreement and do not use the data for their own purposes.
- Email delivery providers, which send the confirmation and service messages triggered by a registration and, where you consented, our newsletters and event announcements.
- Google LLC. Google Workspace, where a submission is recorded in a private spreadsheet we own and use as an internal operations record, and — where you accept analytics cookies — Google Analytics.
- Meta Platforms Ireland Ltd, as described in section 4.
- Messaging platforms you choose to write to us on, such as Telegram or WhatsApp, which carry the conversation itself — including, where you have connected a messaging app to your registration, the reminders and updates we send you there. Those messages remain subject to the platform’s own privacy policy as well as this one.
- Professional advisers and authorities, where we are legally required or permitted to disclose.
4. The Meta platform
We advertise on Facebook and Instagram, and we use three distinct Meta facilities. In all three we are the controller of the data we hold, and we process it only for the purposes set out in section 2.
- Lead ads. Where you submit an instant form on one of our advertisements, we retrieve that lead from Meta and add it to our contact records, so that we can answer you and, where you asked to be registered for an event, issue your registration and confirmation email. A lead is recorded once, however many times an export containing it is processed.
- The Meta pixel. Loaded in your browser only after you accept marketing cookies, it reports page views and form submissions. Decline, and it is never loaded.
- The Conversions API. We report the fact of a registration to Meta so that advertising can be measured. Contact details are hashed before transmission; we never send a raw email address or phone number to an advertising platform, and a registration is reported once rather than counted twice.
We use data obtained from the Meta platform only to provide and improve the services described in this policy, in accordance with Meta’s Platform Terms and Developer Policies. We do not sell it, we do not transfer it to a data broker, we do not use it to build profiles for anyone other than ourselves, and we do not combine it with data from other sources beyond what is described here. To have it deleted, seeData Deletion Instructions. Data that Meta holds about you in its own systems is controlled by Meta and governed by its privacy policy; we cannot delete it on your behalf.
5. Google API Services — Limited Use
We use Google APIs (Google Sheets) under OAuth, with an access token granted by our own staff account, to write submissions received through this website into a spreadsheet we own. Visitors to this site never sign in with Google, and we never request access to a visitor’s Google account.
Passion Education’s use and transfer of information received from Google APIs to any other app will adhere to theGoogle API Services User Data Policy, including the Limited Use requirements. Specifically, data obtained through Google APIs is used only to provide and improve the functions described in this policy, is not transferred to others except as necessary to provide those functions, to comply with applicable law or as part of a merger or acquisition, is never used for advertising, and is never read by humans except with your explicit consent, for security purposes, to comply with applicable law, or where the data is aggregated and anonymised.
6. International transfers
We operate from the United Arab Emirates, our servers are in the European Union, and some of the providers named above are established in the United States. Where data is transferred out of the EEA, the United Kingdom or Armenia, it is transferred on the basis of the European Commission’s Standard Contractual Clauses or an adequacy decision, or on the basis of your explicit consent to the transfer.
7. How long we keep it
- Event registrations: 24 months after the event, then deleted or anonymised.
- Records kept on your marketing consent: up to 36 months after the consent is given or withdrawn, so that we can evidence it.
- Institution enquiries and partnership correspondence: for the duration of the relationship and 5 years afterwards.
- Leads imported from Meta lead ads: 24 months from the date you submitted the form, then deleted or anonymised.
- Conversations and call records: 24 months from the last message or call.
- Analytics data: according to the retention set in Google Analytics, currently 14 months.
8. Security
We maintain technical and organisational measures appropriate to the risk, including encryption of personal data in transit and at rest, access limited to authorised personnel on a need-to-know basis, and procedures for detecting and responding to security incidents. A summary is published as ourSecurity Policy.
9. Your rights
Subject to the law that applies to you — including the GDPR in the EEA, the UK GDPR, the Republic of Armenia’s Law on Protection of Personal Data, and UAE Federal Decree-Law No. 45 of 2021 — you may ask us to give you a copy of your data, correct it, delete it, restrict or object to our use of it, or provide it in a portable form. Where we rely on consent, you may withdraw it at any time, which does not affect processing carried out before the withdrawal.
Write to ceo@passion-education.com. We answer within 30 days. For deletion specifically, the step-by-step procedure is on the Data Deletion Instructionspage. You may also unsubscribe from marketing emails using the link in any such email, and you may complain to your national data protection authority.
10. Children
Our events are attended by prospective students who may be under 18. Where a registrant is under 18, the form asks for a parent or guardian’s contact details, and registration must be made with their knowledge and consent. If you believe a child has given us data without that consent, write to us and we will delete it.
11. Cookies
Cookies and similar storage that are strictly necessary to make the site and the registration form work are always set. Analytics and marketing cookies are set only after you accept them in the consent banner, and you can change your choice at any time by clearing this site’s data in your browser and choosing again on your next visit.
12. Changes
We publish any new version here with a new version number and effective date. The version in force when you registered is recorded with your registration. Material changes affecting registrations already held will be notified by email.
13. Contact
PASSION CONNECT CONSULTING - FZCO, IFZA Business Park, DDP, Dubai Silicon Oasis, Dubai, United Arab Emirates.
ceo@passion-education.com ·info@passion-education.com
← passion-education.com · Terms of Service · Data Deletion · Security Policy · Legal Information