Privacy, explained with care.

Who we are

This privacy notice explains how WINAR INTERNATIONAL LTD ("WINAR", "we", "us") collects and uses personal data when you use this website or contact us. We are a private limited company registered in England and Wales (company number 14631201).

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the controller of the personal data described here. Contact for all privacy matters: WINAR INTERNATIONAL LTD, Global HQ, 15A St. Annes Road, Beccles, NR34 9JA, United Kingdom. Email info@winarinternational.com or call +44 7443 406869.

Last updated: 14 November 2026.

The personal data we collect

We only collect what we need. Depending on how you use the website, this may include:

• Identity and contact details: your name, email address and, if you choose, your phone number (with country code) and preferred contact method and time.
• Enquiry details: the category of your enquiry, the destination, course or topic you mention, and your message.
• Study plan answers: study level, subject interests, preferred countries, timing, budget range and priorities you enter in Build My Study Plan.
• Endorsement Assistance enquiries: a high-level description of your professional or business background, country of interest and timeline.
• Event registrations: your name, contact details and the event you are interested in.
• Consent records: whether you agreed to be contacted about your enquiry and whether you opted in to updates.
• Technical data: our hosting provider automatically processes your IP address and basic request information to deliver and secure the website. We do not use analytics or advertising tracking.

We never ask for passport numbers, identity documents, bank details or health information through this website. Please do not include them in messages. If you do send special category data, we will only use it where strictly necessary and permitted by law, and otherwise delete it.

Children: our study services are often used by students under 18. If you are under 18, please involve a parent or guardian before submitting an enquiry. We do not knowingly collect personal data from children under 13 through this website.

How we use your data and our lawful bases

Under the UK GDPR we must have a lawful basis for each use of your data:

• To respond to your enquiry and arrange a consultation: taking steps at your request before entering into a contract (Article 6(1)(b)) and our legitimate interest in responding to people who contact us (Article 6(1)(f)).
• To provide services you agree to: performance of a contract (Article 6(1)(b)).
• To send optional updates: your consent (Article 6(1)(a)) and, for electronic marketing, the Privacy and Electronic Communications Regulations 2003 (PECR). You can withdraw consent at any time, and every message includes a way to opt out.
• To refer you to an independent consultant or expert, where you ask for this: your consent (Article 6(1)(a)).
• To keep records and meet our legal obligations, for example accounting and tax records: legal obligation (Article 6(1)(c)).
• To keep the website and our systems secure and prevent misuse: our legitimate interests (Article 6(1)(f)).

Where we rely on legitimate interests, we have balanced them against your rights and you can object at any time (see Your rights).

We do not make decisions about you based solely on automated processing, and we do not profile you for marketing.

Who we share your data with

We never sell your personal data. We share it only where necessary:

• Service providers (processors) who host the website and database, store files and send emails on our behalf, under written contracts that require them to protect your data and use it only on our instructions.
• Independent contractors we engage to help deliver a service to you, such as business plan specialists or researchers. They act under written agreements requiring confidentiality and data protection, and only receive what they need for their part of the work.
• Independent consultants or field experts we refer you to, only with your agreement. They act as separate controllers and are responsible for their own use of your data under their own privacy notices. We will tell you who they are before sharing anything.
• Professionals who introduced your matter to us, where we are completing work on their behalf. We share only what is needed to report on the work they asked us to do.
• Our professional advisers (such as accountants and lawyers) where needed.
• Authorities and regulators where we are legally required to do so.

International transfers

Our team works from the United Kingdom and India, and some of our service providers may store or access data outside the UK. When personal data is transferred outside the UK, we make sure it is protected by an adequacy regulation or by appropriate safeguards, such as the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with any additional measures needed. Contact us for more information.

How long we keep your data

• Enquiries that do not lead to a service: up to 24 months after our last contact, then deleted.
• Client records where we provide a service: for 6 years after the service ends, to meet legal, tax and limitation requirements.
• Marketing consent records: until you withdraw consent, plus a short period to record that you did.
• Information saved in your own browser (Budget Planner, My Study Plan, shortlists): stays on your device until you clear it. We never receive it.

How we protect your data

We use encryption in transit (HTTPS), access controls with individual accounts and role-based permissions, account lockout after failed sign-in attempts, and restricted access so that only authorised administrators can read enquiries. We review these measures regularly. No system is completely secure, but we take appropriate technical and organisational measures for the risks involved.

Your rights

Under the UK GDPR you have the right to:

• be informed about how your data is used;
• access a copy of your personal data;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict how we use your data in certain circumstances;
• data portability, where processing is based on consent or contract and carried out by automated means;
• object to processing based on legitimate interests, and to object at any time to direct marketing;
• withdraw consent at any time, without affecting processing already carried out;
• not be subject to decisions based solely on automated processing.

To use any of these rights, contact us using the details above. We may need to verify your identity. We respond within one month, which may be extended by two further months for complex requests, and there is normally no fee.

Complaints

If you have a concern, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection: ico.org.uk/make-a-complaint, telephone 0303 123 1113, or write to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Cookies and similar technologies

See our Cookies & Preferences page.

Changes to this notice

We may update this notice from time to time. The date at the top shows the latest version. Where changes are significant, we will take reasonable steps to let you know.