GDPR & your data rights
If you are in the European Economic Area or the United Kingdom, the GDPR gives you specific rights over your personal data. This page explains those rights and how to exercise them with us.
- Last updated
- January 2026
1.Your rights
| Right | What it means |
|---|---|
| Access | See what personal data we hold about you, why we hold it, and receive a copy. |
| Rectification | Have inaccurate or incomplete information corrected. |
| Erasure | Ask us to delete your personal data where we no longer need it or where you withdraw consent. |
| Restriction | Ask us to pause processing while a dispute about accuracy or legitimacy is resolved. |
| Portability | Receive the data you provided in a structured, machine-readable format, or have it sent to another provider. |
| Objection | Object to processing based on our legitimate interests, including direct marketing. |
| Withdraw consent | Withdraw consent at any time where processing is based on it, without affecting processing carried out beforehand. |
2.Legal bases we rely on
- Contract — to provide the account, shortlist and comparison features you ask for.
- Consent — for counselling callbacks, marketing communications and non-essential cookies.
- Legitimate interests — to keep the platform secure, prevent abuse and improve the product, balanced against your rights.
- Legal obligation — where we are required to retain or disclose information by law.
3.Making a request
Email privacy@collegeblink.com from the address registered on your account, stating which right you want to exercise. We may ask for information to confirm your identity before acting.
We respond within one month of receiving a valid request. If a request is complex, we may extend that period by up to two further months and will tell you why. There is no charge for a request unless it is manifestly unfounded or excessive.
4.How we protect your data
- Data is encrypted in transit between your browser and our servers.
- Access to personal data is limited to team members who need it to operate the service.
- Passwords are stored hashed and are never visible to our team.
- Processors acting on our behalf are bound by contract to process data only on our instructions.
5.International transfers
ColleZoo operates from India, so personal data of EEA and UK users is transferred outside those regions. Where that happens, we rely on appropriate safeguards such as standard contractual clauses with our processors.
6.Complaints
If you are not satisfied with how we have handled your request, you can complain to your local supervisory authority — the Information Commissioner's Office in the UK, or the data protection authority in your EEA member state. We would appreciate the chance to address your concern first.
Questions about this policy?
Write to us and we'll respond. Our registered office is at H14, Sector 70, Noida, Uttar Pradesh 201305, India.
privacy@collegeblink.com