Security, Privacy & Data Practices

MYUNI uses industry-standard authentication provided by our backend platform. User sessions are managed with secure tokens that refresh automatically. Passwords are never stored in plain text.

Access to your eligibility reports, booking details, and personal information is restricted to your account. We do not share login credentials or session data with third parties.

MYUNI runs on a managed cloud platform with built-in infrastructure security, automated backups, and network isolation. The platform provider handles underlying infrastructure patching, DDoS mitigation, and physical security of data centres.

As the application owner, MYUNI is responsible for how we configure access controls, handle your data, and manage our integrations. The platform provider is responsible for the security of the underlying infrastructure.

We collect the information you provide when using our services — such as your name, email address, academic background, and eligibility assessment responses. This data is used to generate your eligibility report, process bookings, and communicate with you about your academic options.

We do not sell your personal information. We use it only for the purposes you expect: delivering our consultancy services, sending transactional emails (such as booking confirmations and eligibility reports), and improving our advice.

MYUNI works with a small number of service providers to deliver our platform:

• Cloud backend & database — hosts your account data, bookings, and eligibility information.
• Stripe — processes payments securely. Stripe handles card details directly; MYUNI does not store payment card numbers.
• Google Calendar — used to schedule and send meeting invitations for booked appointments.
• Email delivery (notify.www.iclb.eu) — sends transactional emails such as eligibility reports and booking confirmations on behalf of MYUNI.

Each of these providers is bound by their own security and privacy commitments. We choose integrations that support encryption in transit and appropriate access controls.

MYUNI uses essential cookies to keep you signed in and to remember your session. We may use basic analytics to understand how visitors navigate our site so we can improve content and usability.

We do not use third-party advertising cookies or tracking pixels for behavioural advertising.

We keep your personal data for as long as it is needed to provide our services and meet legal or accounting obligations. If you request deletion of your account and associated data, we will remove identifiable personal information within a reasonable timeframe, subject to any legal requirements to retain certain records.

You can request a copy of the personal information we hold about you, ask us to correct inaccurate details, or request that we delete your data. To make a privacy request, please email us at info@myuni.online.

We will respond to verifiable requests within a reasonable timeframe. We may need to confirm your identity before processing certain requests to protect your privacy.

If you discover a security issue or vulnerability affecting MYUNI, please report it to us responsibly. Send details to info@myuni.online. We aim to acknowledge reports promptly and will work with you to understand and address valid findings.

MYUNI is committed to handling personal data responsibly and in line with applicable data-protection principles. We do not currently hold third-party security certifications or audit attestations. If that changes, we will update this page.