Last updated 20 October 2026
Privacy and cookie notice
This notice covers this website, interest registrations and account sign-in for the September 2027 pilot. Document uploads and payments are not available yet. Please do not send passports, certificates or other sensitive documents by email.
Who is responsible
Graduate Anywhere Limited is the controller, registered in England and Wales under company number 16557768, at 12 Lower Newmarket Road, Nailsworth, Stroud GL6 0RW. For privacy questions or deletion requests, email dpo@graduateanywhere.com.
What we use and why
- Enquiries: your email address, name if provided, and message are used to reply and manage your enquiry. Our lawful basis is our legitimate interest in responding to people who contact us; where you ask about entering a service contract, taking steps at your request may also apply.
- Interest registration: when you use the interest form we store your name, email, optional year group, school or college, corridor interest, notes and privacy consent in our Postgres database (Neon), optionally linked to your Clerk account id. We use this to run the pilot waitlist and contact you. Lawful basis: consent (checkbox) and steps toward a service you request.
- Accounts: Clerk processes sign-up and sign-in (email and authentication data) on our behalf. We do not store passwords on our servers.
- Confirmation email: Resend (or a successor provider) may send a confirmation message to the address you provide.
- Requested updates: if you ask for pilot or investor updates, we use your contact details to send those updates on the basis of your consent. You can withdraw that request at any time by emailing our privacy contact.
- Website operation: our hosting provider, Vercel, processes technical request information such as IP address and browser details to deliver and protect the site. We rely on our legitimate interests in operating a secure website.
- Optional measurement: with your separate consent, Google Analytics receives page visits and interactions such as calculator use, or Meta Pixel receives page visits and interactions for campaign measurement. These services may process device identifiers and technical information. Analytics data is not necessarily anonymous.
Your cookie choices
Google Analytics and Meta Pixel are off until you accept their respective categories. Accepting analytics does not accept marketing. Rejecting both still allows you to use the website. To withdraw consent or change a choice, use . Withdrawal reloads the page to stop loaded trackers and removes accessible first-party tracking cookies; it does not automatically delete information already received by a provider.
| Storage | Purpose | Duration |
|---|---|---|
| ga_cookie_consent | Cookie and local storage remembering your choice | One year; a changed notice may require a fresh choice |
| ga-theme | Local storage remembering your chosen theme | Until you clear browser storage |
| _ga and _ga_* | Optional Google Analytics visitor and session measurement | Up to two years |
| _fbp and _fbc | Optional Meta campaign measurement, where set | Typically three months |
Browser settings may shorten storage lifetimes. If persistent storage is unavailable, your choice applies for the current page session. We also load fonts from Google Fonts and Fontshare, which receive the technical information needed to deliver those files.
Sharing and international processing
We use hosting, database, authentication and email service providers to operate the site and handle interest registrations. When you accept optional tracking, information is also shared with Google or Meta for the purposes above. Those providers may process information outside the UK and have their own responsibilities and retention practices. Meta may link website activity to your Meta account. We do not sell enquiry or interest records. Contact us for information about the providers and transfer safeguards relevant to your enquiry.
Provider information: Vercel privacy notice, Neon privacy policy, Clerk privacy policy, Resend privacy policy, Google privacy policy, Meta privacy policy and Fontshare privacy policy.
Retention and deletion
Our retention policy is to keep personal data for no more than two years from collection, unless you request deletion sooner at dpo@graduateanywhere.com. This includes enquiry records and requested-update contact details. We will explain any legal reason that prevents us from fulfilling a particular deletion request. Provider-held data and any data a provider processes independently are also subject to that provider’s policies.
Your rights
Depending on the processing and lawful basis, you may request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. You can withdraw consent without affecting the lawfulness of earlier processing. Contact our privacy email to exercise these rights. You may complain to the Information Commissioner’s Office.
Young visitors and the future service
Students under 18 may use this information site. Optional tracking is off by default and you can reject it without losing access. A parent or guardian can help you with privacy questions. Before launching application or document-handling services, we will provide information specific to those services and complete the relevant safeguards described on our compliance page.