Privacy Policy

Effective Date: 6 March 2026

Statement-Pro (“Statement-Pro”, “the Platform”, “we”, “our”, or “us”) operates the website https://statement-pro.co.uk and provides educational guidance services relating to personal statements and university application materials.

Statement-Pro is operated by a company incorporated in Estonia. While the company has no physical establishment in the United Kingdom, the Platform provides services to users located in the UK and other jurisdictions.

Protecting your privacy and maintaining your trust are fundamental to how we operate. This Privacy & Cookies Policy explains how we collect, use, store, and protect your personal information when you use our website, communication channels, and services.

This Policy is designed to comply with:

  • UK General Data Protection Regulation (UK GDPR)
  • Data Protection Act 2018
  • Privacy and Electronic Communications Regulations 2003 (PECR)

By accessing or using the Platform, you acknowledge that you have read and understood this Policy.

1. Data Controller

For the purposes of applicable data protection law, the data controller responsible for processing your personal data is:

Statement-Pro
Website: https://statement-pro.co.uk
Contact email: [email protected]

Statement-Pro determines the purposes and means of processing personal data collected through the Platform.

2. Information We Collect

We collect personal information only where necessary to provide and improve our services.

2.1 Information You Provide Directly

When you use the Platform, you may provide personal information including:

  • Name
  • Email address
  • Contact information
  • Payment details processed through secure payment providers
  • Messages exchanged with support staff or Tutors
  • Uploaded documents such as personal statement drafts or application materials

Any documents you upload are used solely for the purpose of providing educational guidance.

2.2 Information Collected Automatically

When you visit our website, certain technical information may be collected automatically, including:

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and navigation behaviour
  • Date and time of visits
  • Referring URLs
  • Approximate geographic location derived from IP address
  • Language and time-zone settings

This information helps us maintain the functionality, security, and performance of the Platform.

3. How We Use Your Information

We process personal data only where there is a lawful basis to do so. Your information may be used for the following purposes:

  • Providing access to educational support services
  • Matching Users with suitable Tutors
  • Communicating about service requests, orders, and support enquiries
  • Processing secure payments
  • Improving the functionality and usability of the Platform
  • Detecting and preventing fraud, abuse, or unauthorised use
  • Maintaining security and technical integrity of the website
  • Sending service-related notifications
  • Sending marketing communications only where you have given consent

We do not sell personal data to third parties.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases when processing personal data:

Contractual Necessity

Processing required to provide services requested by the User, including communication with Tutors and delivery of educational guidance.

Legitimate Interests

Processing necessary for our legitimate business interests, including:

  • maintaining platform security
  • preventing fraud
  • improving services
  • analysing website usage

These interests are balanced against your privacy rights.

Legal Obligations

Processing required to comply with applicable laws, financial regulations, or legal requests.

Consent

Where required by law, including:

  • marketing communications
  • non-essential cookies

You may withdraw consent at any time.

5. Sharing of Information

We share personal data only where necessary to operate the Platform or deliver services.

Information may be shared with:

Tutors and Educational Advisers

Independent Tutors who provide educational guidance through the Platform may receive limited information necessary to deliver services.

Payment Processors

Payments are processed through trusted providers such as:

  • Stripe
  • PayPal
  • other secure payment processors

Statement-Pro does not store full payment card details.

Technology and Infrastructure Providers

We may use trusted providers such as:

  • cloud storage services
  • communication platforms
  • website hosting providers
  • analytics tools

These providers process data under contractual data protection obligations.

We do not allow third parties to use your data for their own marketing purposes.

6. International Data Transfers

Because Statement-Pro operates internationally, your personal data may be processed outside the United Kingdom or European Economic Area.

Where such transfers occur, we ensure appropriate safeguards, including:

  • contractual data protection clauses
  • secure data processing agreements
  • recognised legal transfer mechanisms

These safeguards are designed to ensure your data remains protected to standards consistent with UK GDPR.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy.

Data may be retained for purposes including:

  • providing services
  • maintaining account records
  • complying with tax or financial regulations
  • resolving disputes
  • enforcing contractual agreements

In most cases, personal data related to inactive accounts is deleted or anonymised after up to five years, unless a longer retention period is required by law.

Users may request deletion of their personal data at any time.

8. Your Data Protection Rights

Under UK GDPR, you may have the following rights:

  • Right of access – request a copy of your personal data
  • Right to rectification – request correction of inaccurate information
  • Right to erasure – request deletion of your data
  • Right to restrict processing
  • Right to data portability
  • Right to object to certain types of processing
  • Right to withdraw consent where processing relies on consent

To exercise any of these rights, please contact us at:

[email protected]

We may need to verify your identity before processing requests.

9. Right to Lodge a Complaint

If you believe your data has been processed in a way that does not comply with applicable data protection law, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

Information about this process is available at: https://ico.org.uk

We encourage you to contact us first so we can attempt to resolve the issue.

10. Cookies and Similar Technologies

Our website uses cookies and similar technologies to improve functionality, analyse traffic, and personalise the user experience.

Cookies are small text files stored on your device when you visit a website.

10.1 Types of Cookies We Use

Essential Cookies

Required for the basic operation of the website, such as page navigation and security.

Performance and Analytics Cookies

Help us understand how visitors use our website so we can improve functionality.

Preference Cookies

Store user preferences such as language settings.

Marketing Cookies

Used to display relevant information or communications where consent has been given.

10.2 Cookie Consent

Where required by PECR, we will request your consent before placing non-essential cookies on your device.

You can manage or withdraw cookie consent through your browser settings or cookie preferences on our website.

11. Marketing Communications

We may send educational updates, platform news, or promotional information only where you have opted in to receive such communications.

Users may unsubscribe from marketing communications at any time by:

Service-related communications (such as order updates or support responses) may still be sent where necessary.

12. Data Security

We take appropriate technical and organisational measures to protect personal data, including:

  • encrypted connections (HTTPS)
  • secure payment processing
  • restricted access to sensitive information
  • monitoring for unauthorised access or security risks

Although we take reasonable steps to safeguard information, no system can guarantee absolute security.

13. Protection of Minors

The Platform is intended primarily for users aged 18 and older.

If users under 18 wish to use the service, this should occur with the knowledge and consent of a parent or legal guardian.

If we become aware that personal data has been collected from a minor without appropriate consent, we will take steps to remove such information.

14. Third-Party Websites

Our website may contain links to third-party services or platforms. We are not responsible for the privacy practices of those external services.

Users should review the privacy policies of any third-party websites they visit.

15. Changes to This Policy

We may update this Privacy & Cookies Policy from time to time to reflect:

  • legal or regulatory changes
  • updates to our services
  • improvements to our privacy practices

The Effective Date at the top of this page indicates the latest revision.

Continued use of the Platform after updates indicates acceptance of the revised Policy.

16. Contact Information

If you have questions about this Privacy & Cookies Policy or wish to exercise your privacy rights, please contact us: