top of page

Privacy Statement


Student First Group Limited (“we”, “our” or “us”) takes the security of and our legal responsibilities around your personal data seriously. This statement explains relevant information about our processing of your personal data collected via this website.

Personal data is any information relating to an identified or identifiable living person.  We process personal data for numerous purposes, and the means of collection, lawful basis of processing, use, disclosure, and retention periods for each purpose may differ.


We collect personal data concerning our own personnel as part of the administration and management of our business activities.  Employees should refer to Employee Handbook.

Data retention

We retain the personal data processed by us for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation).
In the absence of specific legal, regulatory or contractual requirements, our baseline retention period for records and other documentary evidence created in the provision of services is 8 years.

Visitors to our Website

Visitors to our websites are in control of the personal data shared with us.  We may capture limited personal data automatically via the use of cookies on our website.
This website places small text files or cookies onto your computer to collect information about your browsing experience. Our website has been created using the (Wix) platform, Wix places the following cookies on Wix designed sites. 


  • svSession - to identify unique visitors and tracks visitor's sessions on a site

  • hs - for security

  • XSRF-TOKEN - for security

  • smSession - to identify logged in site members

  • TSxxxxxxxx (where x is replaced with a random series of numbers and letters) - for security

  • TSxxxxxxxx_d (where x is replaced with a random series of numbers and letters) - for security

Visitors are also able to send an email by clicking the contact email provided through the website. These emails will contain whatever relevant information you may wish to include in the message.  We ask that you do not provide sensitive information (such as race or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; physical or mental health; genetic data; biometric data; sexual life or sexual orientation; and, criminal records) to us when using our website; if you choose to provide sensitive information to us for any reason, the act of doing so constitutes your explicit consent for us to collect and use that information in the ways described in this policy or as described at the point where you choose to disclose this information.

Corporate Clients

Our policy is to collect only the personal data necessary for agreed purposes and we ask our clients to only share personal data where it is strictly needed for those purposes.

Where we need to process personal data to provide professional services, we ask our clients to provide the necessary information to the data subjects regarding its use.  Our clients may use relevant sections of this privacy statement or refer data subjects to this privacy statement if they consider it appropriate to do so.

Our website does not collect or compile personal data for the dissemination or sale to outside parties for consumer marketing purposes or host mailings on behalf of third parties.

Data controller and contact information

The data controller is Student First Group Limited (registered in England & Wales under registration no. 11225625 and with its registered address at 1 Newton Road, Little Shelford, Cambridge, England, CB22 5HL.

If you have any questions about this privacy statement or how and why we process personal data, please contact us at:
Mail: Student First Group Ltd, New Broad Street House, 35 New Broad Street, London, EC2M 1NH
Phone: 0774 87855247

Individuals’ rights and how to exercise them

Individuals have certain rights over their personal data and data controllers are responsible for fulfilling these rights.  Where we decide how and why personal data is processed, we are a data controller and include further information about the rights that individuals have and how to exercise them below.

Access to personal data

You have a right of access to personal data held by us as a data controller.  This right may be exercised by emailing us at

Amendment of personal data

To update personal data submitted to us, you may email us at

When practically possible, once we are informed that any personal data processed by us is no longer accurate, we will make corrections (where appropriate) based on your updated information.


Withdrawal of consent

Where we process personal data based on consent, individuals have a right to withdraw consent at any time.  To withdraw consent to our processing of your personal data please email us at

Other data subject rights

This privacy statement is intended to provide information about what personal data we collect about you and how it is used.  As well as rights of access and amendment referred to above, individuals may have other rights in relation to the personal data we hold, such as a right to erasure/deletion, to restrict or object to our processing of personal data and the right to data portability.  

If you wish to exercise any of these rights, please send an email to

Data Security

Data transferred over the internet by us and through this website cannot be guaranteed as secure.  Whilst we take appropriate steps to protect your data we cannot guarantee that it will remain secure in transit.  Once data reaches your network it is your responsibility to ensure it remains secure.

Our website is hosted on the platform. provides us with an online platform that allows us to market our services to you. Your data may be stored through’s data storage, databases and the general applications. They store your data on secure servers behind a firewall. is certified under the EU-US Privacy Shield Framework and the Swiss-US privacy Shield Framework as set forth by the U.S. Department of Commerce, regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States, and therefore adheres to the Privacy Shield Principles.


We may use third-party Service Providers to monitor and analyse the use of our Service.

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network. You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page:

Blockify is a web analytics service provided by Omegatheme that offers precision blocking of IP addresses and countries. The data collected by our contracted web analytics provider keeps track of the domains from which you access our website on the World Wide Web and may log IP addresses or other identifiers for statistical purposes. We do this to gather broad demographic information for aggregate use to identify and analyse trends and the results of our marketing efforts and to help diagnose problems with hackers, scrapers, and fraudsters. IP addresses and other identifiers are not linked to personally identifiable information. For more information on the privacy practices of Omegatheme, please visit



We hope that you won’t ever need to, but if you do want to complain about our use of personal data, please send an email with the details of your complaint to We will look into and respond to any complaints we receive.

Changes to this privacy statement

We recognise that transparency is an ongoing responsibility, so we will keep this privacy statement under regular review.

This privacy statement was last updated on 10th April 2024

bottom of page