Privacy Policy | Babil Abroad

1. Who We Are

Babil Abroad Inc. ("Babil Abroad", "we", "us", or "our") operates the admissions platform available at babilabroad.com and associated subdomains. We are committed to protecting your personal data in accordance with the UK GDPR, EU GDPR, and Turkey's Personal Data Protection Law (KVKK — Law No. 6698).

Data Controller: Babil Abroad Inc.
Registered offices: London, United Kingdom · Istanbul, Turkey · Toronto, Canada
Contact: privacy@babilabroad.com

2. Data We Collect

We collect the following categories of personal data:

Identity data: full name, date of birth, nationality, passport number
Contact data: email address, phone number, postal address
Academic data: transcripts, test scores (IELTS, TOEFL, SAT, GRE, GMAT), degree certificates
Application data: university choices, statements of purpose, reference letters
Financial data: currency preference, scholarship eligibility; we do not store payment card numbers
Technical data: IP address, browser type, device identifiers, cookies
Usage data: pages viewed, features used, search queries on the platform

3. How We Use Your Data

To create and manage your account and student profile
To match you with suitable academic programmes and institutions
To process and submit university applications on your behalf
To communicate application updates, deadlines, and offers
To provide counsellors and schools with student progress visibility (where you have consented)
To comply with legal obligations including anti-money-laundering and visa regulations
To improve platform features through anonymised analytics

4. Legal Basis for Processing

Contract performance: processing necessary to provide the admissions service you signed up for
Legitimate interests: fraud prevention, platform security, product analytics
Legal obligation: complying with UK, EU, and Turkish data-protection and financial regulations
Consent: marketing emails and non-essential cookies (you may withdraw at any time)

5. Data Sharing

We share your data only where necessary:

Partner universities and institutions — to process your application
Authorised counsellors and agencies — where you have consented to representation
Cloud infrastructure providers — AWS (EU/UK regions), Vercel — under data-processing agreements
Email delivery providers — for transactional and notification emails
Regulatory authorities — if required by law

We never sell your personal data to third parties.

6. Data Retention

We retain your personal data for as long as your account is active or as required to fulfil the purposes set out in this policy. Application records are retained for 7 years to comply with financial and educational regulatory requirements. You may request deletion of your account at any time (subject to legal retention obligations) by emailing privacy@babilabroad.com.

7. Your Rights

Under the UK GDPR, EU GDPR, and KVKK you have the right to:

Access the personal data we hold about you
Rectify inaccurate data
Erase your data ("right to be forgotten") in certain circumstances
Restrict processing in certain circumstances
Port your data to another service
Object to processing based on legitimate interests or for direct marketing
Withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any right, contact us at privacy@babilabroad.com. We will respond within 30 days.

8. Cookies

We use essential cookies for platform functionality and optional analytics cookies to improve your experience. You can manage cookie preferences at any time via our Cookie Policy page or your browser settings.

9. International Transfers

Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission. Data transferred to Turkey is handled in accordance with KVKK Article 9 adequacy requirements.

10. Contact & Complaints

For any privacy enquiries: privacy@babilabroad.com

You also have the right to lodge a complaint with your local supervisory authority:

UK: Information Commissioner's Office (ICO) — ico.org.uk
EU: Your national Data Protection Authority
Turkey: Personal Data Protection Authority (KVKK) — kvkk.gov.tr