This page sets out Uni Compare's data protection position for lead data delivered to your CRM under this integration, in plain terms a university DPO (Data Protection Officer) can use for compliance review.
Roles under UK GDPR
Uni Compare operates as a data processor for the prospect lead data delivered to your CRM, while your university is the data controller for that data once it lands in your CRM.
Uni Compare separately operates as an independent data controller for any direct marketing communications a prospect opts in to receive from Uni Compare itself. That is a parallel relationship between the prospect and Uni Compare; it does not affect the lead data delivered to your CRM.
Lawful basis
The lawful basis for processing is the prospect's submission of the enquiry form on universitycompare.com, where they consented to having their details shared with the universities they enquired about, under Uni Compare's privacy notice. The version of the privacy notice the prospect saw is recorded at the point of capture.
Compliance work
Uni Compare's UK General Data Protection Regulation (UK GDPR) compliance position, consent flows, and privacy wording were developed over a sixteen-week engagement with a London law firm.
Data Protection contact
For data-protection enquiries, contact Uni Compare's Data Privacy Manager. This covers Data Subject Access Requests (DSARs) under UK GDPR Article 15 and breach notifications under Article 33:
Owen O'Neill
Post: The Frames, 1 Phipp St, London EC2A 4PS