Security, Privacy & Data Practices

MYUNI's assessment, report and booking services do not require you to create an account, a password or a login session. You provide your details once, at the point of using a service.

The information you submit is stored in a managed, access-restricted database and is processed server-side. Records are not readable by other visitors to the site; administrative access is limited to MYUNI personnel who need it to deliver the service you requested.

MYUNI runs on a managed cloud platform with built-in infrastructure security, automated backups, and network isolation. The platform provider handles underlying infrastructure patching, DDoS mitigation, and physical security of data centres.

As the application owner, MYUNI is responsible for how we configure access controls, handle your data, and manage our integrations. The platform provider is responsible for the security of the underlying infrastructure.

We collect the information you provide when using our services — such as your name, email address, academic background, and eligibility assessment responses. This data is used to generate your eligibility report, process bookings, and communicate with you about your academic options.

We do not sell your personal information. We use it only for the purposes you expect: delivering our consultancy services, sending transactional emails (such as booking confirmations and eligibility reports), and improving our advice.

MYUNI works with a small number of service providers to deliver our platform:

• Cloud backend & database — hosts your account data, bookings, and eligibility information.
• Stripe — processes payments securely. Stripe handles card details directly; MYUNI does not store payment card numbers.
• Google Ads — conversion measurement only, subject to your cookie choice (see Cookies & Analytics below).
• Google Calendar — used to schedule and send meeting invitations for booked appointments.
• Email delivery (notify.www.iclb.eu) — sends transactional emails such as eligibility reports and booking confirmations on behalf of MYUNI.

Each of these providers is bound by their own security and privacy commitments. We choose integrations that support encryption in transit and appropriate access controls.

We keep your personal data for as long as it is needed to provide our services and meet legal or accounting obligations. If you request deletion of your account and associated data, we will remove identifiable personal information within a reasonable timeframe, subject to any legal requirements to retain certain records.

You can request a copy of the personal information we hold about you, ask us to correct inaccurate details, or request that we delete your data. To make a privacy request, please email us at info@myuni.online.

We will respond to verifiable requests within a reasonable timeframe. We may need to confirm your identity before processing certain requests to protect your privacy.

If you discover a security issue or vulnerability affecting MYUNI, please report it to us responsibly. Send details to info@myuni.online. We aim to acknowledge reports promptly and will work with you to understand and address valid findings.

MYUNI is committed to handling personal data responsibly and in line with applicable data-protection principles. We do not currently hold third-party security certifications or audit attestations. If that changes, we will update this page.