Effective Date: July 22, 2025

1. Who We Are

This Privacy Policy applies to Gulf Edu Tours, a company registered in Spain, operating international student recruitment tours in secondary schools across the Middle East and Africa.

We are the data controller responsible for the processing of your personal data under the General Data Protection Regulation (GDPR) and Spain’s Organic Law 3/2018 (LOPDGDD).

For any questions or data-related requests, please contact us at:
hello@gulfedutours.com
Gulf Edu Tours, [Insert Full Registered Office Address in Spain]

2. What Data We Collect

We collect and process the following categories of personal data, depending on your interaction with us:

• Identification Data: Name, email address, phone number

• Location and Contact Data: Country of residence, school name, and in some cases mailing address

• Academic Data: (if submitted) education background, study interests, school affiliation

• Usage Data: IP address, browser information, pages visited, time spent on site

• Communication Data: Email or form responses, inquiries, and feedback

We do not knowingly collect data from individuals under 16 without verified parental consent.

3. How We Collect Data

Your personal data is collected when:

• You complete a registration or contact form

• You interact with our staff at events or online

• You access our website (via cookies and analytics tools)

We do not embed YouTube videos on our website. Any links to YouTube or other external platforms are simple redirects and do not trigger third-party cookies from our site.

4. Purpose and Legal Basis of Processing

We process your personal data for the following purposes, under one or more lawful bases:

• Event registration and communication

• Responding to your inquiries

• Improving the website and user experience

• Sharing limited data with university partners

• Complying with legal obligations

5. Data Sharing

We may share your data with:

• University partners participating in recruitment events (only with your consent)

• Analytics and web service providers (e.g., Google Analytics)

• Regulatory or public authorities, if legally required

All third parties are bound by confidentiality and data protection agreements.

6. Cookies and Tracking Technologies

We use cookies to understand how users interact with our site. These include:

• Essential cookies (do not require consent): Used for basic site functionality

• Analytics cookies (require consent): Used to measure website usage through Google Analytics

You can control or withdraw cookie consent anytime via your browser settings.

7. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), it will be protected using:

• Adequacy decisions from the European Commission, or

• Standard Contractual Clauses (SCCs) approved by the European Commission

We do not transfer personal data unless necessary and with appropriate safeguards in place.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described above, or as required by law. This typically means:

• Event-related personal data: up to 5 years

• Analytics data: 14 months (Google Analytics default)

• Communications: as long as needed to respond and comply with any follow-up

9. Your Rights Under GDPR

You have the right to:

• Access your personal data

• Request correction or deletion

• Object to or restrict certain processing

• Withdraw consent at any time

• Receive your data in a portable format

• Lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es

To exercise your rights, contact us at hello@gulfedutours.com.

10. Children’s Privacy

We do not knowingly collect personal data from individuals under the age of 16 without the verified consent of a parent or legal guardian. If you believe your child has submitted data to us, please contact us, and we will delete it promptly.

11. Data Security

We apply appropriate technical and organizational measures to safeguard your personal data against unauthorized access, disclosure, alteration, or destruction.

12. Updates to This Privacy Policy

We may update this policy from time to time. Any changes will be published on this page with the updated effective date. Significant changes will be notified directly where appropriate.