1. Overview & Data Controller
British Online Academy (referred to as "BOA", "we", "us", or "our") is committed to maintaining the privacy, confidentiality, and security of all personal data provided by prospective, current, and former students. Operates as a Data Controller in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Personal Information We Collect
When you submit an inquiry, register for a course, or access our online dashboard, we may collect and process the following categories of personal data:
- Contact Details: Full name, email address, contact telephone number, residential address, and country of residence.
- Academic & Professional History: Educational qualifications, prior academic transcripts, English language proficiency certificates, and CV/work experience details.
- Identification Data: Passport or official government-issued ID copies required for UK awarding body registration.
- Financial Data: Billing details, transaction receipts, and payment plan records (processed securely via regulated payment gateways).
- Technical & Portal Usage: IP address, portal login timestamps, assignment submissions, test results, and browser analytics.
3. How We Use Your Data
We process your personal information strictly for the following lawful academic and operational purposes:
- To process course applications and verify entry requirement eligibility.
- To register students with UK Ofqual-regulated awarding organisations for diploma certification.
- To provide access to online learning modules, dashboards, and tutor feedback.
- To process course fee payments, invoice management, and instalment agreements.
- To communicate essential administrative updates, assignment feedback, and academic progression notices.
4. Sharing Data with Third Parties
British Online Academy will never sell, lease, or commercialise student data. We only share essential personal data with trusted third parties under strict confidentiality protocols, including:
- UK Awarding Bodies (e.g. Ofqual Regulated Bodies): For official qualification registration, moderation, and diploma issuance.
- Partner Universities: When a student requests top-up degree progression processing.
- Regulatory Authorities: Where required by UK law, legal process, or regulatory compliance bodies.
5. Data Retention & Security
We implement robust technical, physical, and organizational security measures to protect your data against unauthorized access, loss, or alteration. Academic records and certificate verification data are retained securely in compliance with UK education regulations.
6. Your Rights Under UK GDPR
Under UK GDPR, you hold the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data held about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of data where legal retention periods do not apply.
- Right to Restrict Processing: Request restrictions on specific processing activities.
7. Contact Data Protection Officer
If you have any questions or wishes regarding your privacy or data protection rights, please contact our Data Protection Team at: