Privacy Policy

UniPrepVisa · JECE MULTI LINKS LIMITED

trading as JECE Overseas Studies, MYUNICAMP, JECE Poland Study Visas, and UniPrepVisa

📅 Effective: 1 August 2026🔄 Last Updated: August 2026

We are committed to protecting your personal data in full compliance with the UK GDPR and EU GDPR. This Privacy Policy explains what data we collect, why we collect it, and your rights. It forms part of our Terms & Conditions.

1. Who We Are (Data Controller)

JECE MULTI LINKS LIMITED, operating UniPrepVisa, is the Data Controller responsible for your personal data. Contact us at support@uniprepvisa.com for any privacy-related questions.

2. What Data We Collect

We collect the following categories of personal data:

  • Registration data: full name (as on passport), email address, telephone number, country of origin
  • Interview content: video/audio recordings, text transcripts, and AI-generated evaluation feedback
  • Payment metadata: Paystack transaction references, purchase type, credit amounts — we never store card/bank details (processed solely by Paystack)
  • Usage data: session timestamps, interview type, session status, band scores, credit balance
  • Technical data: IP address (for country detection only, not stored persistently), browser type (standard server logs)

3. Why We Process Your Data (Legal Bases)

We process your personal data under the following legal bases (UK/EU GDPR Article 6):

Contractual Necessity (Art. 6(1)(b))

To create your account, process credits, deliver interview sessions, and generate evaluation reports. Without this processing, we cannot provide our service.

Legitimate Interests (Art. 6(1)(f))

To maintain platform security, prevent fraud, enforce anti-collusion measures, and send service-critical communications (e.g. payment confirmation).

Consent (Art. 6(1)(a))

For any optional marketing communications. You may withdraw this consent at any time.

Legal Obligation (Art. 6(1)(c))

To comply with applicable laws including financial record-keeping requirements.

4. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We share data only with trusted processors:

  • Paystack — payment processing; subject to their own PCI-DSS and privacy framework
  • Google (Gemini AI) — interview transcripts sent to Gemini API for evaluation under Google's enterprise data processing agreement
  • Neon — encrypted database hosting in compliant data centres
  • Uploadcare — video/audio file hosting for submitted recordings
  • Resend — transactional email delivery (payment confirmations, alerts)

5. Data Retention

  • Account data: retained for the duration of your account plus 2 years after deletion request, unless a longer period is legally required
  • Interview recordings: retained for 12 months from session submission, then automatically purged
  • Thorough Assessment reports: visible for 7 days from unlock, then hidden; underlying data retained for 12 months for audit purposes
  • Payment records: retained for 7 years to comply with financial record-keeping legal obligations
  • Credit ledger entries: retained for 7 years

6. Your Rights Under GDPR

Under the UK GDPR and EU GDPR, you have the right to:

  • Access: request a copy of all personal data we hold about you
  • Rectification: request correction of inaccurate data
  • Erasure ("right to be forgotten"): request deletion of your account and associated data
  • Restriction: request that we limit processing in certain circumstances
  • Data portability: receive your data in a structured, machine-readable format
  • Object: object to processing based on legitimate interests
  • Withdraw consent: where processing is based on consent, withdraw it at any time

To exercise any of these rights, email support@uniprepvisa.com. We will respond within 30 calendar days. You also have the right to complain to the ICO at ico.org.uk.

7. Security

  • All data in transit is encrypted using TLS 1.3
  • Passwords are hashed using Argon2id — we never store plaintext passwords
  • Database access is restricted to authenticated backend services only
  • Payment card data is never transmitted to or stored on our servers — Paystack handles this entirely
  • Session tokens are cryptographically random and expire after inactivity
In the event of a data breach affecting your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR Article 33.

8. Cookies & Tracking

We use only essential cookies necessary for the platform to function:

  • Session cookie: maintains your authenticated session (httpOnly, Secure, SameSite=Strict)
  • Theme preference cookie: remembers your day/night mode selection (local only, no tracking)

We do not use advertising cookies, tracking pixels, Google Analytics, or Facebook Pixel.

9. International Data Transfers

Some service providers (e.g. Google Gemini API) may process data outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) and the ICO’s International Data Transfer Agreement (IDTA).

10. Contact & Complaints

We will acknowledge your request within 3 business days and respond fully within 30 calendar days.

GDPR Compliant · UK & EU Data Protection

Last updated: August 2026

UniPrepVisa · JECE MULTI LINKS LIMITED · All rights reserved.