PRIVACY POLICY

StudyAbroadMarket.com
Operated by Medicto Ltd, United Kingdom
Company Number: 10447946

Last updated: 13 October 2026

This Privacy Policy explains how Medicto Ltd (company number 10447946) (“Medicto”, “we”, “us” or “our”), the operator of StudyAbroadMarket.com (“StudyAbroadMarket.com”, the “Website”, “Platform” or “Services”), collects, uses, stores, shares and protects personal information.

We respect your privacy and are committed to handling personal information responsibly and transparently.

Because StudyAbroadMarket.com is intended for users around the world, different data-protection laws may apply depending on where you live. This Privacy Policy is primarily designed to comply with applicable UK data-protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, while also recognising that users in other jurisdictions may have additional rights under their local laws.

By using StudyAbroadMarket.com, you acknowledge that you have read this Privacy Policy.

---

1. WHO WE ARE

StudyAbroadMarket.com is operated by:

Medicto Ltd
Company Number: 10447946
United Kingdom

For applicable data-protection purposes, Medicto Ltd may act as the data controller for personal information collected through StudyAbroadMarket.com.

If you have questions about this Privacy Policy or how your personal information is handled, please contact us using the contact details provided on the Website.

---

2. WHAT INFORMATION WE COLLECT

Depending on how you use our Website and Services, we may collect different categories of information.

2.1 Information You Provide Directly

You may provide information when you:

• create an account;

• purchase a report;

• request information;

• complete a form;

• contact us;

• subscribe to communications;

• participate in surveys;

• request customer support;

• provide feedback; or

• otherwise interact with the Platform.

This information may include:

• name;

• email address;

• telephone number;

• country of residence;

• nationality;

• age or date of birth where relevant;

• educational background;

• qualifications;

• grades or academic results;

• preferred study destination;

• preferred course or subject;

• budget information;

• university preferences;

• study preferences;

• information contained in documents you voluntarily upload;

• communication history; and

• other information you choose to provide.

You should only provide information that is necessary and appropriate for the Service you are using.

---

3. EDUCATIONAL INFORMATION

Where you voluntarily provide information about your educational background, we may process information such as:

• previous qualifications;

• grades;

• academic subjects;

• university preferences;

• study history;

• work experience;

• language qualifications;

• intended course;

• intended country of study; and

• other information relevant to educational research.

This information may be used to help provide personalised research, comparisons or reports.

We do not guarantee that any assessment or recommendation based on this information is accurate or that it will result in admission to a university.

---

4. INFORMATION COLLECTED AUTOMATICALLY

When you use our Website, we may automatically collect certain technical and usage information.

This may include:

• IP address;

• browser type;

• operating system;

• device type;

• approximate location derived from IP address;

• language settings;

• pages visited;

• time spent on pages;

• referring website;

• interactions with the Website;

• approximate date and time of access;

• error information;

• device identifiers; and

• similar technical information.

We may collect this information using cookies, pixels, logs, analytics technologies and similar technologies.

---

5. COOKIES (COOKIE POLICY)

StudyAbroadMarket.com may use cookies and similar technologies. Cookies are small text files that a website stores on your device. Similar technologies include your browser’s local storage and session storage.

Cookies may be used for purposes including:

• keeping the Website functioning;

• remembering preferences;

• security;

• authentication;

• analytics;

• measuring Website performance;

• understanding how users interact with the Website;

• improving our Services; and

• marketing, where permitted and where appropriate consent has been obtained.

Some cookies may be provided by third-party service providers.

Where applicable law requires consent for non-essential cookies, we will seek the appropriate consent before using them.

Essential cookies

These cookies are needed for the Website to work, to keep it secure and to provide the Services you ask for. They are always on, and they are not used for advertising.

Analytics cookies (only with your consent)

With your permission, we use Google Analytics, provided by Google, to understand how visitors use the Website: for example, which pages are visited and how people find us. This helps us improve the Website. These cookies are not set, and Google Analytics is not loaded, unless you click “Accept analytics cookies” in our cookie banner. We do not use Google Analytics for advertising. Ads on the Website are covered under “Advertising (Google AdSense)” below.

Information collected by Google Analytics is processed by Google as our service provider. You can read more in how Google uses information from sites that use its services.

Advertising (Google AdSense)

We show advertisements on the Website using Google AdSense, a service provided by Google. This helps us keep our free guides and resources free. When a page with ads loads, your browser connects to Google, and Google receives information such as your IP address, browser and device details, and the page you are viewing, so that it can deliver ads, measure them and prevent fraud.

Where advertising cookies are allowed, third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the Internet.

At the moment we do not allow advertising cookies or personalised ads. Our cookie banner only asks about analytics cookies, so we tell Google that advertising cookies and personalised advertising are not permitted. Google may still show ads that are not personalised, using the information above. If we later offer you a choice about personalised ads, we will ask for your consent first where the law requires it, and we will update this policy.

You can opt out of personalised advertising by Google at any time in Google’s Ads Settings, and you can opt out of some third-party vendors’ use of cookies for personalised advertising at www.aboutads.info. You can read more in how Google uses cookies in advertising.

Similar technologies (browser storage)

Payments and other third parties

When you pay for an assessment, PayPal’s payment window may set its own cookies to process your payment securely and prevent fraud. These are controlled by PayPal under its own privacy and cookie policies. Links to other websites, such as university or government websites, are covered by those websites’ own cookie policies.

Your choices

When you first visit, our cookie banner asks whether you accept analytics cookies. You can change your choice at any time using the Cookie settings link at the bottom of every page. If you withdraw your consent, we stop loading Google Analytics and remove its cookies from your browser.

You may also be able to control or delete cookies through your browser settings. Blocking essential cookies may stop parts of the Website, such as logging in or paying for an assessment, from working.

Disabling certain cookies may affect Website functionality.

---

6. HOW WE USE YOUR INFORMATION

We may use personal information for purposes including:

• providing our Services;

• preparing reports;

• responding to enquiries;

• processing purchases;

• providing customer support;

• personalising the Website;

• conducting research;

• improving our Services;

• analysing Website usage;

• maintaining security;

• preventing fraud or abuse;

• communicating with users;

• sending service-related communications;

• sending marketing communications where legally permitted;

• complying with legal obligations;

• enforcing our Terms and Conditions;

• protecting our rights and property; and

• operating and developing StudyAbroadMarket.com.

---

7. AI AND AUTOMATED PROCESSING

StudyAbroadMarket.com uses artificial intelligence (“AI”), machine-learning systems, automated tools and related technologies in certain aspects of our Services.

Depending on the Service you use, information you provide may be processed by AI or automated systems to assist with:

• research;

• information retrieval;

• analysis;

• comparisons;

• report preparation;

• recommendations;

• classification;

• summarisation;

• content generation; and

• other Service functions.

AI systems can make mistakes.

AI-generated or AI-assisted information may be inaccurate, incomplete, outdated or unsuitable for your circumstances.

AI processing does not guarantee:

• university admission;

• visa approval;

• immigration approval;

• scholarship eligibility;

• qualification recognition; or

• any other outcome.

Where automated processing is used, we will seek to comply with applicable data-protection laws regarding automated decision-making and profiling.

You should not rely on an automated recommendation as a substitute for official information or professional advice.

---

8. AI PROVIDERS AND THIRD-PARTY TECHNOLOGY

To provide certain Services, we may use third-party technology providers, including cloud hosting providers, AI providers, analytics providers, payment providers and other service providers.

Where personal information is processed by a third-party provider, we seek to use appropriate contractual, technical and organisational safeguards as required by applicable law.

Depending on the specific Service and technology used, information may be processed by third-party providers in countries outside the United Kingdom.

Website chat assistant (Google Gemini)

Our Website has an AI chat assistant (“Questions? Ask us”) that answers questions using information published on the Website. It is powered by the Gemini API, a service provided by Google. Using the chat is optional: you can always contact us through our contact form instead. We provide the chat assistant on the basis of our legitimate interest in answering visitors’ questions quickly.

Where the chat is available. The chat assistant is not offered to visitors in the United Kingdom, the European Union, the rest of the European Economic Area (Iceland, Liechtenstein and Norway) or Switzerland. To decide whether to show it, we use the approximate country of your connection, which our security and hosting provider Cloudflare works out from your IP address. We also save this country with the conversation (see “What we keep” below).

What is sent to Google. When you use the chat, the question you type, together with the earlier messages in the same conversation and relevant extracts from our Website, is sent to Google so that it can generate an answer. We do not send your name, email address, account details or IP address with your chat messages, but Google receives anything you type into the chat.

How Google may use chat messages. We use Google’s free (unpaid) Gemini API service. Under Google’s terms for its unpaid services, Google may use the messages submitted and the answers generated to provide, improve and develop its products, services and machine-learning technologies, and human reviewers may read, annotate and process them. Google says it disconnects this data from our Google account and API key before reviewers see it. Google may process this information in the United States and other countries, and Google’s own terms govern how long it keeps it. For details, see the Gemini API Additional Terms of Service and the Google Privacy Policy.

Please do not enter personal information. Google’s terms ask that sensitive, confidential or personal information is not submitted to its unpaid services. Please do not type your name, contact details, passport or visa details, health information, financial information or any other personal or confidential information into the chat. To discuss your own situation, use “Email us” in the chat or our contact form.

What we keep. We save each chat conversation on our servers: the questions you type, the answers given, the pages where you used the chat, the approximate country of your connection and the date and time. We use these records to check and improve our answers and our Website, and to deal with misuse. They are not linked to your account, they do not include your IP address, and only our team can see them. We delete them automatically 90 days after the conversation starts. If you email us from the chat, we link your message to the saved conversation. To prevent misuse, we keep a coded (hashed) form of your IP address for up to one hour to limit how many questions can be asked. Your current conversation is kept in your browser’s session storage so that it continues as you move between pages, and it is deleted when you close the browser tab.

Emailing us from the chat. If you choose to email us from the chat, we receive your name, email address and message (and the conversation, if you tick “Include this chat”). These are not sent to Google, and we handle them in the same way as messages sent through our contact form.

Answers can be wrong. Chat answers are generated automatically and may be inaccurate, incomplete or out of date (see section 7). They are general information, not advice, and the chat assistant does not make any decisions about you.

---

9. LEGAL BASES FOR PROCESSING

Where UK GDPR applies, we will process personal information using an appropriate lawful basis.

Depending on the circumstances, this may include:

Consent

Where required, we may ask for your consent before processing personal information for a particular purpose.

You may withdraw consent where applicable.

Contract

We may process information where necessary to provide a Service you have requested or to take steps at your request before entering into a contract.

Legitimate Interests

We may process information where necessary for our legitimate interests, provided those interests are not overridden by your rights and interests.

Examples may include:

• improving our Website;

• preventing fraud;

• maintaining security;

• analysing Website usage;

• communicating with existing users;

• protecting our business; and

• improving our Services.

Legal Obligation

We may process information where necessary to comply with a legal obligation.

Vital Interests

In limited circumstances, information may be processed where necessary to protect someone’s vital interests.

---

10. MARKETING COMMUNICATIONS

Where legally permitted, we may send you information about:

• StudyAbroadMarket.com;

• new Services;

• educational resources;

• reports;

• relevant updates;

• offers; or

• other information we believe may be relevant.

Where required by law, we will obtain your consent before sending marketing communications.

You can unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in the communication or by contacting us.

You may continue to receive essential service-related communications after opting out of marketing.

---

11. PAYMENT INFORMATION

Payments may be processed by third-party payment providers.

Depending on the payment method used, payment providers may collect and process information such as:

• name;

• billing information;

• payment details;

• transaction information;

• IP address; and

• fraud-prevention information.

We may not directly store complete payment-card information where payment processing is handled by a third-party payment provider.

Payment providers have their own privacy policies and terms.

We encourage you to review the relevant provider’s privacy information.

---

12. INFORMATION SHARED WITH SERVICE PROVIDERS

We may share personal information with trusted third-party service providers where necessary to operate StudyAbroadMarket.com.

These providers may include:

• website hosting providers;

• cloud service providers;

• AI technology providers (for example, Google, which powers our website chat assistant);

• payment processors;

• email providers;

• customer-support platforms;

• analytics providers;

• advertising providers (Google, which provides the ads on our Website through Google AdSense);

• security providers;

• database providers;

• communications providers;

• professional advisers; and

• other technology or operational service providers.

Service providers are expected to process information only as necessary to provide their services and in accordance with applicable legal requirements.

---

13. UNIVERSITIES AND EDUCATIONAL INSTITUTIONS

StudyAbroadMarket.com is an independent information platform.

We do not sell your personal information to universities in exchange for promoting those universities.

We do not provide your personal information to a university simply because that university appears on our Website or in a report.

If a future Service specifically involves sending information to a university or educational institution, we will provide appropriate information about that process and, where required, obtain your consent.

---

14. THIRD-PARTY WEBSITES

Our Website may contain links to external websites, including university, government and other third-party websites.

Once you leave our Website, this Privacy Policy generally does not govern information collected by the third-party website.

You should review the privacy policy of the relevant third party.

We are not responsible for the privacy practices, security or content of third-party websites.

---

15. INTERNATIONAL DATA TRANSFERS

Because StudyAbroadMarket.com operates internationally and uses global technology providers, your personal information may be processed or stored in countries outside the United Kingdom.

Where personal information is transferred outside the UK and applicable law requires safeguards, we will seek to use appropriate mechanisms, which may include:

• adequacy regulations or decisions;

• UK International Data Transfer Agreements;

• UK Addendums;

• standard contractual clauses where appropriate;

• other legally recognised transfer mechanisms; and

• appropriate technical and organisational safeguards.

The legal mechanism used may depend on the country receiving the information and the service provider involved.

For example, messages typed into our website chat assistant are processed by Google, which may process them in the United States and other countries (see “Website chat assistant” in section 8).

---

16. DATA SECURITY

We take reasonable technical and organisational measures designed to protect personal information against:

• unauthorised access;

• accidental loss;

• misuse;

• alteration;

• disclosure;

• destruction; and

• other unlawful processing.

However, no internet-based system can be guaranteed to be completely secure.

We cannot guarantee absolute security of information transmitted over the internet.

You are responsible for keeping any account credentials or passwords confidential.

---

17. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

• the nature of the information;

• the purpose for which it was collected;

• whether you have an active account;

• whether you have purchased a Service;

• legal requirements;

• accounting requirements;

• dispute resolution;

• fraud prevention; and

• our legitimate business needs.

When information is no longer required, we may delete it, anonymise it or securely dispose of it.

We delete saved conversations with our website chat assistant automatically 90 days after they start. Google’s terms govern how long Google keeps chat messages (see “Website chat assistant” in section 8).

---

18. YOUR DATA-PROTECTION RIGHTS

Depending on where you live and which laws apply, you may have rights including:

• the right to access personal information;

• the right to correct inaccurate information;

• the right to request deletion;

• the right to restrict processing;

• the right to object to processing;

• the right to data portability;

• the right to withdraw consent;

• rights relating to automated decision-making;

• the right to complain to a data-protection regulator; and

• other rights provided by applicable law.

These rights are not absolute and may be subject to legal exceptions.

---

19. RIGHT TO ACCESS YOUR INFORMATION

Where applicable law provides this right, you may request a copy of personal information we hold about you.

We may need to verify your identity before fulfilling a request.

We may also be permitted to refuse or limit certain requests under applicable law.

---

20. RIGHT TO CORRECT INFORMATION

If information we hold about you is inaccurate or incomplete, you may request that it be corrected.

You should notify us if your information changes.

---

21. RIGHT TO DELETE INFORMATION

Where applicable law provides this right, you may request deletion of your personal information.

We may not always be able to delete information immediately if we are legally required or permitted to retain it.

For example, information may need to be retained for:

• legal compliance;

• accounting;

• fraud prevention;

• dispute resolution;

• enforcement of agreements; or

• other legitimate purposes.

---

22. RIGHT TO OBJECT

Depending on applicable law, you may have the right to object to certain types of processing, including processing based on legitimate interests and certain forms of direct marketing.

Where you object to direct marketing, we will generally stop using your information for that purpose.

---

23. AUTOMATED DECISION-MAKING

Some StudyAbroadMarket.com Services may use AI or automated systems to analyse information or generate recommendations.

We do not intend for automated systems to make legally binding decisions about you.

Where applicable law provides specific rights regarding solely automated decision-making or profiling, we will respect those rights.

If you believe an automated process has produced an incorrect result, you may contact us to request clarification or review where required by applicable law.

---

24. CHILDREN’S PRIVACY

StudyAbroadMarket.com is primarily intended for individuals who are legally able to use the relevant Services and enter into applicable agreements.

We do not knowingly collect personal information from children where doing so would require parental or guardian consent unless the appropriate consent has been obtained.

Where applicable law requires parental or guardian consent for processing a child’s personal information, we will seek to comply with those requirements.

If you believe that a child has provided personal information to us without appropriate consent, please contact us.

---

25. SENSITIVE PERSONAL INFORMATION

Please do not provide sensitive or special-category personal information unless it is specifically requested and necessary for a Service.

Depending on the jurisdiction, sensitive information may include information relating to:

• health;

• racial or ethnic origin;

• religion;

• political opinions;

• biometric information;

• sexual orientation;

• criminal records; or

• other specially protected categories.

If you voluntarily provide sensitive information, we will process it only where permitted by applicable law and where an appropriate legal basis exists.

---

26. INFORMATION ABOUT OTHER PEOPLE

If you provide us with personal information relating to another person, you should only do so where you are legally permitted to provide that information.

Where necessary, you should inform that person about the processing described in this Privacy Policy.

---

27. ANALYTICS

We may use analytics services to understand how users interact with StudyAbroadMarket.com.

Analytics information may help us understand:

• which pages are visited;

• how users navigate the Website;

• which features are used;

• technical problems;

• Website performance; and

• general usage patterns.

Where required by applicable law, we will obtain appropriate consent before using non-essential analytics technologies.

We currently use Google Analytics, and only after you accept analytics cookies in our cookie banner. Section 5 (Cookies) lists the cookies it uses and explains how to change your choice.

---

28. FRAUD, SECURITY AND ABUSE PREVENTION

We may process information to:

• detect fraud;

• prevent abuse;

• protect users;

• protect our Website;

• investigate suspicious activity;

• enforce our Terms and Conditions;

• protect our legal rights; and

• comply with legal obligations.

This may include technical information, transaction information and Website activity.

---

29. LEGAL DISCLOSURES

We may disclose personal information where reasonably necessary to:

• comply with the law;

• comply with a court order;

• respond to a lawful government request;

• protect our legal rights;

• prevent fraud;

• investigate unlawful activity;

• protect the safety of users or others; or

• establish or defend legal claims.

We will seek to limit disclosures to what is reasonably necessary and legally permitted.

---

30. BUSINESS TRANSFERS

If Medicto Ltd or StudyAbroadMarket.com is involved in a merger, acquisition, restructuring, financing, sale of assets or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

Where required, appropriate notices or consents will be provided.

---

31. THIRD-PARTY AI AND TECHNOLOGY PROVIDERS

Some technology providers used by StudyAbroadMarket.com may process information on our behalf.

Depending on the Service, these providers may include providers of:

• AI models;

• cloud computing;

• databases;

• analytics;

• payment processing;

• email;

• customer support;

• security;

• hosting; and

• other technical infrastructure.

We seek to use reputable providers and appropriate contractual and technical safeguards.

However, third-party providers operate their own systems and may have their own terms and privacy policies.

---

32. AI DATA USE

Where we use third-party AI providers, we seek to configure and use those services in a manner appropriate to the Services we provide and applicable data-protection requirements.

The exact processing of information may vary depending on the AI or technology provider involved.

Users should avoid submitting unnecessary sensitive personal information into free-text fields or documents unless it is specifically required for the Service.

---

33. NO SALE OF PERSONAL INFORMATION TO UNIVERSITIES

StudyAbroadMarket.com does not sell your personal information to universities simply because you use our Website or purchase a report.

We do not accept payment from universities in exchange for promoting them or selling users’ personal information to them.

Where a specific service involves a university or another third party receiving your information, the relevant process will be explained to you and will be subject to applicable law.

---

34. MARKETING PARTNERS

We may work with technology providers or marketing service providers to operate our Website and communicate with users.

Where applicable, we will comply with consent and opt-out requirements.

We do not authorise third parties to use personal information for purposes incompatible with the purposes for which it was collected.

---

35. DATA ACCURACY

You are responsible for providing accurate information when using our Services.

You should inform us if information you have provided changes.

We are not responsible for consequences resulting from inaccurate or incomplete information supplied by you.

---

36. PRIVACY OF REPORT CONTENT

If you purchase a report or provide information for research purposes, information contained in your submission may be processed as necessary to provide the requested Service.

We may retain relevant information for legitimate business, legal, security and record-keeping purposes, subject to applicable law.

---

37. AGGREGATED AND ANONYMISED INFORMATION

We may create aggregated or anonymised information from data collected through the Website.

Where information has been properly anonymised so that individuals cannot reasonably be identified, it may be used for purposes including:

• research;

• statistics;

• analytics;

• product development;

• Website improvement; and

• business analysis.

Anonymised information is not treated as personal information where applicable law recognises it as anonymous.

---

38. YOUR RESPONSIBILITY

You are responsible for:

• keeping your account credentials secure;

• providing accurate information;

• avoiding unnecessary sensitive information;

• reviewing third-party privacy policies where relevant; and

• taking reasonable precautions when using online services.

---

39. INTERNATIONAL USERS

If you access StudyAbroadMarket.com from outside the United Kingdom, you acknowledge that your personal information may be processed in the United Kingdom and other countries where our service providers operate.

Different countries may provide different levels of data protection.

Where applicable law requires specific safeguards for international transfers, we will seek to implement those safeguards.

---

40. PRIVACY RIGHTS IN DIFFERENT JURISDICTIONS

Privacy rights vary internationally.

Depending on your location, you may have rights under laws including, where applicable:

• UK GDPR;

• EU GDPR;

• California privacy laws;

• other United States state privacy laws;

• Canadian privacy laws;

• Australian privacy laws;

• New Zealand privacy laws;

• Brazilian data-protection laws;

• Singaporean privacy laws;

• Indian data-protection laws; and

• other applicable national or regional privacy legislation.

The rights available to you depend on the law applicable to your circumstances.

Nothing in this Privacy Policy is intended to remove or restrict mandatory privacy rights that cannot legally be excluded.

---

41. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time.

Changes may be made to reflect:

• changes to our Services;

• changes to technology;

• changes to AI systems;

• changes to third-party providers;

• changes in law;

• regulatory guidance; or

• changes to our privacy practices.

The updated version will be published on StudyAbroadMarket.com with a new “Last updated” date.

Where required by law, we will provide additional notice or obtain consent.

---

42. CONTACT US

If you have questions about this Privacy Policy, want to exercise an applicable privacy right, or have concerns about how your personal information is being processed, please contact Medicto Ltd using the current contact details published on StudyAbroadMarket.com. You can reach us through our contact page.

Medicto Ltd
Company Number: 10447946
United Kingdom

---

43. DATA-PROTECTION COMPLAINTS

If you believe that your personal information has been handled improperly, we encourage you to contact us first so that we can investigate the matter.

If UK data-protection law applies to you, you may also have the right to complain to the UK Information Commissioner’s Office (ICO).

You may also have the right to complain to the data-protection authority in your country or jurisdiction where applicable.

---

44. IMPORTANT PRIVACY NOTICE

By using StudyAbroadMarket.com, you acknowledge that:

• we may collect and process information necessary to provide our Services;

• we may use AI and automated technologies in some Services;

• AI-generated or AI-assisted information may contain errors;

• information may be processed by third-party technology providers;

• information may be transferred internationally where permitted by law;

• we do not guarantee the accuracy or completeness of information generated or processed through our Services;

• we do not sell your personal information to universities simply because you use our Website;

• you should avoid providing unnecessary sensitive personal information;

• you may have privacy rights depending on your location; and

• you should review this Privacy Policy periodically for updates.

Nothing in this Privacy Policy is intended to remove or restrict any privacy or data-protection right that cannot legally be excluded or restricted under applicable law.