Privacy Policy - Enrola

Enrola Privacy Policy

1. General Provisions

This Privacy Policy (hereinafter — Policy) determines the procedure for processing and protecting information about users (hereinafter — User) of the Enrola website, available at https://enrola.ai/, Telegram bot and mini-app (hereinafter — Platform), owned and managed by ENROLA GLOBAL LTD, a company registered in England and Wales under number 16588390, with registered office at: 126 East Ferry Road, London, Greater London, United Kingdom, E14 9FP (hereinafter — Company).

Contact Information:

  • Email: [email protected]
  • Postal address: 126 East Ferry Road, London, Greater London, United Kingdom, E14 9FP
  • Phone: +447470689953
  • Telegram: @enrolaai

2. Data Collection and Use

2.1. On the Enrola Platform we may collect:

  • Identification data (name, contact information)
  • Educational data and academic history (GPA, test results)
  • Learning preferences (country, level, budget)
  • Career interest test results and RIASEC
  • Copies of documents (passport, certificate/diploma, IELTS/TOEFL certificates) — when applying or preparing a visa
  • Technical data (IP address, browser type, cookie data)
  • Platform usage data

2.2. Data is processed for the purposes of:

  • Personalized selection of universities and programs
  • Submitting applications to universities on your behalf
  • Preparing visa documents
  • Improving platform operation
  • Compliance with legal requirements

3. Authentication and Account Access

We offer multiple ways to create an account and log in to the Platform. Depending on the method you choose, we may collect different data:

3.1. Current authentication methods:

  • Email and Password: we collect your email address and store your password in encrypted form
  • Google Sign-In: we receive your email address, name, and profile picture from Google
  • Telegram Login: we receive your Telegram user ID, name, and username

3.2. Future authentication methods

We may add additional authentication options in the future, such as Apple ID, Instagram, Facebook, or other social login providers. When using any third-party authentication service, we receive basic profile information (typically name, email, and profile picture) necessary to create or link your account.

3.3. How we use authentication data

Data from all authentication methods is:

  • Used solely for account creation, login, and identity verification
  • Stored securely in accordance with this Policy
  • Never shared with third parties for marketing purposes
  • Never used for advertising purposes
  • Never sold to third parties

Our use of data from third-party authentication providers (such as Google) complies with their respective API and data usage policies, including any Limited Use requirements.

You can manage or delete your account data as described in Section 8 (Your Rights).

4. Data Storage and Transfer

4.1. Where your data is stored

Your personal data (name, contacts, documents) are stored on secure servers in Uzbekistan in accordance with the requirements of the Law of the Republic of Uzbekistan "On Personal Data".

4.2. Data transfer to third parties

We may transfer your data to:

  • Universities and their application processing partners — only with your explicit consent at the time of application
  • Technical providers to ensure service operation
  • Government bodies — only upon legal request

Important: When applying to a university through our platform, your documents are transferred to the relevant university and its application processing partners. Transfer is carried out only with your explicit consent at the time of application.

4.3. We never transfer data to:

  • Advertising networks
  • Third parties for marketing purposes without your consent

5. How our recommendations work

Enrola recommendations are based on matching your profile with educational programs. The matching algorithm considers your academic data, career interests, budget, and preferences.

We may receive commissions from universities upon student enrollment. This is standard practice in the educational services industry. Receiving commissions does not affect the order of recommendations — the matching algorithm works the same for all universities regardless of the existence of partnership agreements.

6. Legal Basis for Processing

Data processing is carried out on the basis of:

  • Your consent
  • Necessity for the performance of a contract (provision of services)
  • Legitimate interests of the Company
  • Compliance with legal obligations

This Policy is developed in accordance with:

  • Law of the Republic of Uzbekistan "On Personal Data" dated July 2, 2019 No. ZRU-547 (as amended)
  • UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 — (as amended) — United Kingdom

7. Age Restrictions

The Enrola Platform is intended for students aged 16 and over. Users under 18 are recommended to review this Policy together with their parents.

8. Your Rights

You have the right to:

  • Receive a copy of all your personal data
  • Correct inaccurate data
  • Request full deletion of your data
  • Restrict the ways your data is used
  • Receive data in a machine-readable format
  • Withdraw consent at any time

To exercise your rights, send a request to [email protected] or via Telegram @enrolaai. We will respond within 30 days.

9. Data Retention Periods

  • Account data — until account deletion + 30 days
  • Copies of documents (passport, diplomas) — until completion of admission process + 1 year
  • RIASEC test results — 3 years
  • Technical logs — 90 days

You can request deletion of your data at any time by sending a request to [email protected].

10. Cookies

We use cookies for:

  • Ensuring site operation (mandatory)
  • Analyzing platform usage (can be disabled)
  • Saving your language settings (can be disabled)

You can manage cookies through browser settings or the consent banner on the site.

11. Data Security

We apply modern protection measures: data encryption during transmission and storage, restriction of employee access, regular backups, and security audits.

12. Changes to Policy

We may update this Policy. We will notify you of significant changes via email or notice on the site. Continued use of the Platform means acceptance of the updated Policy.

13. Complaints and Inquiries

For all questions, please contact: [email protected] or @enrolaai.

If you are not satisfied with our response, you have the right to contact the supervisory authority:

  • Uzbekistan: State Personalization Center under the Cabinet of Ministers
  • United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk

Last updated: January 11, 2026.