Back to home

StudyMarket Privacy Policy (Pilot)

Effective Date: 1 May 2026

This Privacy Policy explains how Rokket Digital Ltd (“we”, “us”, or “our”) collects, uses, shares, and protects personal data when you use StudyMarket (the “Platform”).

1. Who We Are

It also explains how data may be shared between users of the Platform and the responsibilities that apply to such sharing.

StudyMarket is operated by:

Rokket Digital Ltd Company number 12535365 Suite 301, 179 Whiteladies Road Bristol, BS8 2AG United Kingdom

For the purposes of UK data protection law, Rokket Digital Ltd acts as a data controller in relation to the operation of the Platform.

2. Information We Collect

We may collect and process the following categories of information:

Account & Identity Information

  • Name
  • Email address
  • Phone number
  • Job title
  • Company or organisation details

Profile & Business Information

  • Business descriptions
  • Services offered
  • Partnership interests
  • User-generated profile content

Platform Activity

  • Communications and interactions on the Platform
  • Messages, enquiries, and connection requests
  • Usage and engagement information

Technical Information

  • IP address
  • Browser type and device information
  • Log data and analytics information
  • Cookie and session data

Where We Obtain Agency Contact Details

Where you are a contact at an education agency, we may hold your business contact details without having obtained them from you directly. We obtain them from publicly available and industry sources, including subscription industry directories, accreditation and quality-assurance schemes, national and international trade association member registers, self-listing agency directories, and our own records of previous contact. We use them to introduce StudyMarket to agencies whose business is placing students with education providers. You can ask us at any time what we hold, where we obtained it, and to stop contacting you.

3. How We Use Personal Data

We use personal data to:

  • Create and manage user accounts
  • Operate and maintain the Platform
  • Facilitate connections between education agents and education providers
  • Enable users to communicate with each other
  • Provide customer support
  • Send service-related communications
  • Monitor usage and performance during the pilot phase
  • Improve and develop Platform features
  • Protect the security and integrity of the Platform
  • Comply with legal and regulatory obligations

4. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases where applicable:

Performance of a Contract

Where processing is necessary to provide the Platform and related services.

Legitimate Interests

Including:

  • operating and improving the Platform
  • facilitating business networking
  • preventing misuse or fraud
  • maintaining Platform security

We ensure our legitimate interests are balanced against users’ rights and freedoms.

Legal Obligations

Where processing is necessary to comply with applicable laws or regulatory requirements.

Consent

Where consent is required by law, including for certain marketing communications or non-essential cookies.

5. Sharing of Personal Data

We do not sell personal data.

We may share personal data in the following circumstances.

5.1 Sharing Between Platform Users

The Platform is designed to enable education agents and education providers to connect and communicate.

As part of this process, users may share business contact details and other relevant information with each other.

Each user is independently responsible for how they use personal data received through the Platform.

Independent Controller Relationship

Users receiving personal data through the Platform act as independent data controllers under applicable data protection law.

This means each user:

  • determines its own purposes and means of processing
  • is responsible for its own compliance with UK GDPR and other applicable laws
  • must provide appropriate privacy information where required
  • must process personal data lawfully and fairly

Users must only use shared personal data for legitimate business relationship and partnership purposes.

Users must not:

  • sell personal data
  • use personal data for unrelated marketing without an appropriate lawful basis
  • retain personal data longer than necessary
  • share excessive or irrelevant personal data

5.2 Service Providers

We use trusted third-party providers to help operate the Platform, including:

  • Clerk, authentication and account management
  • Resend, Email communications
  • DigitalOcean, database hosting
  • Airtable, CRM and lead enrichment data storage
  • Google Maps, address and location autocomplete
  • Google Analytics 4, site usage analytics (only with your cookie consent)
  • Deepgram, voice-to-text transcription for proposal notes
  • Sentry, error monitoring and diagnostics
  • Vercel, application hosting and file storage
  • Anthropic, AI-assisted features (e.g. proposal drafting)
  • Woodpecker, outbound email campaign delivery
  • Brevo, marketing email and contact management
  • MillionVerifier, Email address verification
  • DeepL, translation of dynamic content and proposal fields into other languages
  • Bunny.net, image hosting for AI-extracted programme images and generated partner certificates

These providers process data on our behalf and are contractually required to protect it appropriately.

5.3 Legal Requirements

We may disclose personal data where required to:

  • comply with applicable law
  • respond to legal requests
  • protect rights, safety, or security
  • investigate fraud or misuse

5.4 Business Transfers

If Rokket Digital Ltd is involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction.

6. International Transfers

Some third-party providers may process personal data outside the United Kingdom.

  • adequacy regulations
  • Standard Contractual Clauses (SCCs)
  • other lawful transfer mechanisms where applicable

Where this occurs, we take appropriate safeguards to protect personal data, including:

6.1 Our Processors and Their Locations

The service providers listed in section 5.2 process personal data in the following locations:

  • United States: Clerk, DigitalOcean, Airtable, Google Maps, Google Analytics 4, Deepgram, Resend, Sentry, Vercel, Anthropic, Woodpecker, MillionVerifier
  • European Union: Brevo, DeepL (Germany), Bunny.net (Germany)

Transfers to these providers rely on Standard Contractual Clauses, UK adequacy mechanisms, or another lawful transfer mechanism applicable to that provider, as required by UK GDPR.

7. Data Retention

We retain personal data only for as long as reasonably necessary to:

  • provide and operate the Platform
  • evaluate and improve the pilot
  • comply with legal obligations
  • resolve disputes
  • enforce agreements

When personal data is no longer required, we will delete or anonymise it where appropriate.

8. Data Security

We implement reasonable technical and organisational measures designed to protect personal data against:

  • unauthorised access
  • misuse
  • loss
  • disclosure
  • alteration
  • destruction

However, no online platform or transmission method can be guaranteed completely secure.

9. User Responsibilities

Users of the Platform are responsible for:

  • ensuring they have an appropriate lawful basis for processing personal data received through the Platform
  • complying with applicable data protection laws
  • implementing appropriate security measures
  • responding to applicable data subject requests relating to their own processing activities

If a user becomes aware of a personal data breach involving Platform-derived data, they are responsible for complying with any applicable legal obligations relating to that breach.

10. Your Rights

Under UK GDPR, individuals may have rights including:

Requests can be sent to:

  • access to personal data
  • correction of inaccurate data
  • deletion of personal data
  • restriction of processing
  • objection to processing
  • data portability
  • withdrawal of consent where applicable
  • privacy@rokket-digital.co.uk

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

11. Cookies

We use cookies and similar technologies to operate and improve the Platform.

Further information will be provided in our Cookie Policy.

12. Third-Party Services & Links

The Platform may contain links to third-party websites or services.

We are not responsible for the privacy practices or content of third-party services.

13. Pilot Phase Disclaimer

StudyMarket is currently operating in a pilot phase.

During this period:

  • features and data flows may evolve
  • functionality may change
  • aggregated or anonymised data may be used to help improve the Platform

Users should exercise appropriate care when sharing information through the Platform.

14. Changes to This Policy

We may update this Privacy Policy from time to time.

Any updates will be posted on the Platform with an updated effective date.

Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

15. Contact

For privacy-related questions or requests, contact: