Privacy Policy

Information we collect

1.1 From website visitors and general inquiries

When you visit our site, we may collect non-personal information such as browser type, device type, and technical data about how you connect to our site.

1.2 From Student Consultant applicants (application form)

When you apply to join our consulting programme through our application form, we collect:

• Name and surname
• Email address
• University you attend (or most recently attended)
• CV (PDF or Word document, up to 15MB), which you upload and which is stored securely

1.3 From enrolled Student Consultants

Once accepted into the programme, we additionally collect and process:

• Programme activity data: training material access and progress, and team/cohort assignment
• Performance and evaluation data: Project Coordinator assessments, rankings, and evaluation results generated during and at the end of each client project
• Certification records: certificates issued and the evaluation supporting them
• Payment information, where applicable, processed via a third-party payment processor (we do not store full card details ourselves)
• Any further communications you send us regarding your participation in the programme

1.4 From prospective clients (organisation enquiry form)

When an organisation submits an enquiry to receive consulting support, we collect, from the individual completing the form:

• Name and surname
• Organisation name
• Position held at the organisation
• Email address
• Organisation website URL (optional)
• Organisation size
• Country in which the organisation is primarily located
• Area of support the organisation is looking to receive
• Details of the challenge(s) the organisation is facing, as described in free text
• Confirmation that you have read and accepted this Privacy Policy (via the acceptance checkbox on the form)

How we use collected information

We use personal information for purposes including:

• Assessing applications: reviewing your role, availability, student/graduate status, university, written response, and CV to decide whether to accept you into the programme
• Assessing client enquiries: reviewing an organisation's size, location, area of support requested, and described challenges to determine fit and to match the enquiry to an appropriate Student Consultant team
• Operating the programme: assigning Student Consultants to teams and issuing certificates
• Evaluating and ranking performance: Project Coordinators use performance data to rank Student Consultants at the end of each client project, which determines advancement to a new client project or promotion to Project Coordinator
• Delivering client projects: enabling Student Consultant teams to carry out research, go-to-market, and branding work on behalf of Clients, informed by the information the Client provided about their organization and challenges
• Communication: responding to inquiries, sending programme updates, application status notifications, and project-related correspondence
• Improving our services: understanding, in aggregate, how applicants, Student Consultants, and Clients use our programme and site
• Billing: processing payments, where applicable, and maintaining records for invoicing purposes

Who we share your data with

We do not sell, trade, or rent your personal identification information to third parties. We may share data in the following circumstances:

3.1 Within the programme

• Project Coordinators may access Student Consultant performance data for evaluation and ranking purposes.
• Team members (fellow Student Consultants on the same client project) may have access to shared work product and, where relevant, contact details needed to collaborate.
• Clients receive the consulting deliverables produced by the Student Consultant team, which may reference business information the Client has shared with us.

3.2 Service providers

We engage third parties to support our operations, including:

• Payment processors, to handle payments securely (if applicable)
• IT and technical support providers, including cloud storage providers (e.g. Google Drive), to maintain and secure our systems

These providers are contractually restricted from using your data for any purpose other than providing services to us.

3.3 Legal and compliance

We may disclose information where required by law, in response to a legal request, or to protect our rights, including sharing data with law enforcement or regulatory authorities.

3.4 Business partners

We may share information with business partners or affiliates in connection with collaborative projects, always with due regard to your privacy rights.

3.5 Consent

Where we intend to share your data with third parties not described above, we will seek your explicit consent first.

Data retention

• Applicant data (including CVs): If you apply but are not accepted, we retain your application data and CV for a reasonable period in case future opportunities arise, or delete it sooner on request.
• Student Consultant data: We retain programme, payment, and performance/ranking data for the duration of your participation and for a reasonable period afterward, to support certification records, references, and legal or contractual obligations.
• Client enquiry and project data: We retain the information submitted through our organisation enquiry form, and any further data shared for the purposes of a consulting engagement, for the duration of the project and for a reasonable period thereafter.
• Website inquiries: Retained for a reasonable period to respond to your inquiry.
• Analytics data: Retained for a period necessary to analyse and improve our online presence.

We may retain data for longer where required by law, regulation, or to defend against legal claims.

How we protect your information

We adopt appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, consistent with applicable data protection laws (including UK GDPR).

We use trusted third-party providers, including cloud storage services such as Google Drive, to store certain data. These providers operate independently under their own privacy policies, which we encourage you to review.

No method of internet transmission or electronic storage is entirely secure. While we strive to protect your personal data, we cannot guarantee absolute security. If you suspect your data has been compromised, please contact us using the details in Section 8.

Your rights

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to our legal and contractual retention obligations
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at the details in Section 8.

Changes to this Privacy Policy

We may update this Privacy Policy at any time. We encourage you to review this page periodically to stay informed of any changes. Continued use of our Services after changes are posted constitutes your acceptance of the revised Policy.

Contact us

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact us at:

Brivon Consulting Ltd
Email: coc@brivonconsulting.com

© 2026 Brivon Consulting Ltd