Privacy Policy

1. Who we are (data controller)

This website is operated by Citizenship and co L.L.C-FZ (trading as “Citizenship & Co. Study”, a division of Citizenship & Co.; “we”, “us”, “our”), a company licensed by the Meydan Free Zone in Dubai, United Arab Emirates under Business Licence No. 2650250.01, with its registered office at Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates. We are the controller responsible for the personal data described in this policy.

For any privacy question or request, contact us at info@citizenship.cc, or call +971 4 294 6199 (landline) or +971 54 166 2288 (mobile / WhatsApp).

2. Information we collect

We only collect what you choose to give us, plus a limited amount of technical information needed to run the site securely. Specifically:

• Assessment-request details you submit through our contact form — the parent or guardian's name, email address and telephone or WhatsApp number; the student's first name (optional), current school stage, curriculum, intended intake year and regions of interest; and anything you write in a message.
• Technical and usage data collected automatically — such as your approximate location (country/region), device and browser type, and the pages you view, gathered through privacy-focused website analytics.

3. Students and children's data

Our services concern students who are often under 18. The form on this website is addressed to a parent or guardian and asks for the student's first name and school stage only — no surname, date of birth, grades, transcripts or identity documents. We do not take payment through this website.

Records, transcripts, test results, passport copies for visa purposes and similar documents are collected only under a signed engagement, from or with the written consent of the parent or guardian, through secure channels, and only to the extent an application requires. A student aged 18 or over may engage us directly.

If you believe a child has sent us information through this website without a parent's involvement, contact us and we will delete it.

4. How and why we use your information

We use your personal data for the purposes below, each with a lawful basis under applicable data-protection law (including the UAE Personal Data Protection Law and, for visitors in the EU/UK, the GDPR):

• To respond to your assessment request and arrange a first conversation (to take steps at your request, and our legitimate interest in responding to you).
• Where you engage us, to plan and deliver the advisory services set out in your engagement letter, including sharing application materials with counsellors working under our instruction (performance of a contract).
• To meet legal and regulatory obligations that apply to our work (compliance with a legal obligation).
• To keep the website secure, prevent abuse, and understand which content is useful (our legitimate interest in operating and improving the site).

5. Cookies and analytics

Analytics cookies are used only with your consent. Where Google Analytics 4 is enabled on this site, a banner asks on your first visit whether we may use it to understand which pages help people most. If you decline, Google Analytics does not set cookies and records nothing about your visit. You can change your choice at any time by clearing this site's data in your browser, after which the banner appears again.

Cloudflare Web Analytics runs without cookies and counts page views in aggregate; it cannot identify you. Strictly necessary cookies that make the site function are exempt from consent.

We do not use advertising cookies, do not build advertising profiles, and do not track you across other websites.

6. Who we share it with

We do not sell or rent your personal information to anyone. We share it only in these limited circumstances:

• Service providers (processors) acting on our instructions under contracts that require them to protect your data: Cloudflare (website delivery and security), our hosting provider in the Netherlands (Worldstream), Resend (transactional email such as enquiry confirmations), Zoho (Bigin CRM, where enquiries are recorded), and Google (Analytics 4, only with your consent and only where enabled). None of them may use your data for their own purposes.
• Counsellors engaged by us to deliver part of your engagement — essay coaching, test planning, interview practice — who receive only the material needed for their part and are bound by confidentiality.
• Universities, test providers and visa authorities — only where the student's application requires it, only with your knowledge, and usually through the student's own accounts as part of a formal engagement.
• Authorities or third parties where we are required to do so by law, regulation, or court order, or to establish, exercise, or defend legal claims.

7. International transfers

We are based in the United Arab Emirates, and our service providers may process data in other countries. Where personal data is transferred across borders, we take steps to ensure it remains protected by appropriate safeguards consistent with applicable law.

8. How long we keep it

We keep assessment-request records only for as long as needed to respond to you and to pursue a possible engagement, and then delete them. Where you become a client, we retain engagement records for the period required to deliver the service and to meet legal and regulatory record-keeping obligations, after which they are securely deleted or anonymised. A student's application materials are returned or deleted at the end of the engagement unless you ask us to keep them.

9. How we protect it

We apply appropriate technical and organizational measures to protect personal data against loss, misuse, and unauthorized access. Within our practice, access is limited to the advisors working on your matter. No method of transmission or storage is completely secure, but we take reasonable steps to safeguard your information.

10. Your rights

Subject to applicable law, you may exercise the following rights in relation to your personal data by contacting us:

• Access — request a copy of the information we hold about you.
• Rectification — ask us to correct information that is inaccurate or incomplete.
• Erasure — ask us to delete your information where there is no overriding legal reason to keep it.
• Restriction and objection — ask us to restrict, or object to, certain processing, including direct marketing.
• Withdraw consent — unsubscribe from updates at any time using the link in any email, or by contacting us.
• Complain — raise a concern with us, and with the competent data-protection authority.

11. Third-party links

This website may link to third-party sites, such as university admissions pages. We are not responsible for the content or privacy practices of those sites; please review their own policies.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. The “last updated” date above shows when it was last revised. Material changes will be posted on this page.

13. How to reach us

To make any privacy request, or if you have questions about this policy, write to info@citizenship.cc or call +971 4 294 6199 (landline) or +971 54 166 2288 (mobile / WhatsApp). We aim to respond within the timeframes required by applicable law.