Legal & Compliance
Privacy Policy
Last updated: June 2026 · ETHSUN Executive Education Oxford
Contents
ETHSUN Executive Education Oxford (“ETHSUN”, “we”, “our”, “us”) is committed to protecting your privacy and processing your personal data responsibly and transparently. This Privacy Policy explains how we collect, use, store, and share personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please read this policy carefully. By using our website or engaging with our programmes and services, you acknowledge that you have read and understood this policy.
1. Who We Are
ETHSUN Executive Education Oxford is an independent professional training organisation registered in England and Wales. Our registered address is:
Wood Centre for InnovationQuarry Road, Headington
Oxford, OX3 8SB
United Kingdom
For data protection purposes, ETHSUN Executive Education Oxford is the data controller responsible for your personal data.
2. Data We Collect
We may collect and process the following categories of personal data:
- —Identity data: full name, title, date of birth
- —Contact data: email address, telephone number, postal address
- —Professional data: current employer, job title, professional experience, sector
- —Application data: programme applications, motivational statements, supporting documents
- —Financial data: billing information and payment records (processed securely via third-party payment processors)
- —Technical data: IP address, browser type, device information, and website usage data
- —Communications data: records of correspondence with ETHSUN by email, phone, or through our website forms
- —Marketing preferences: your choices regarding receiving communications from us
We do not knowingly collect data from individuals under the age of 18.
3. How We Use Your Data
We use your personal data for the following purposes:
- —Processing and evaluating programme applications
- —Administering and delivering executive education programmes and services
- —Communicating about programmes, events, publications, and updates relevant to your interests
- —Managing your participation in alumni networks and continuing professional development
- —Processing payments and managing financial records
- —Improving and personalising our website and services
- —Complying with legal and regulatory obligations
- —Responding to queries, complaints, and requests
4. Legal Basis for Processing
We process your personal data on the following legal bases under UK GDPR:
Contractual necessity
To fulfil our obligations under an agreement to provide executive education services.
Legitimate interests
To improve our services, communicate relevant programme information, and manage our business operations, where these interests are not overridden by your rights.
Legal obligation
To comply with applicable laws, regulations, and lawful requests from competent authorities.
Consent
Where you have given explicit consent, including for marketing communications. You may withdraw consent at any time.
5. Data Sharing & Disclosure
We may share your personal data with:
- —Faculty, facilitators, and academic partners involved in programme delivery
- —Learning Delivery Hub partners (Oxford, Davos, Singapore, Abidjan) for programme administration
- —Payment processors and financial service providers
- —IT and website service providers acting as data processors on our behalf
- —Regulatory and governmental authorities where legally required
We do not sell your personal data to third parties. We require all third-party processors to respect the security of your data and to treat it in accordance with applicable data protection law.
6. International Transfers
As a global organisation operating learning delivery hubs in the United Kingdom, Switzerland (Davos), Singapore, and Côte d'Ivoire (Abidjan), some of your data may be transferred internationally. Where data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses or adequacy decisions where applicable.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. In general:
- —Application and enrolment data: retained for 7 years following programme completion
- —Financial and billing records: retained for 7 years in accordance with UK financial regulations
- —Marketing data: retained until you withdraw consent or opt out
- —Website usage data: retained for 12 months
8. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of access
Request a copy of the personal data we hold about you.
Right to rectification
Request correction of inaccurate or incomplete data.
Right to erasure
Request deletion of your personal data in certain circumstances.
Right to restriction
Request that we restrict processing of your data in certain circumstances.
Right to portability
Receive your data in a structured, commonly used format.
Right to object
Object to processing based on legitimate interests or for direct marketing.
To exercise any of these rights, please contact us at compliance@ethsun.org. We will respond within one calendar month of receiving your request.
9. Cookies
Our website uses cookies and similar tracking technologies to improve your browsing experience, analyse site traffic, and serve relevant content. You may control cookie preferences through your browser settings. By continuing to use our website, you consent to our use of essential cookies.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include secure server infrastructure, encryption of sensitive data in transit, and restricted access controls. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email. We encourage you to review this policy periodically.
12. Contact & Complaints
If you have any questions about this Privacy Policy or how we handle your data, please contact our Data Protection Officer:
Data Protection OfficerETHSUN Executive Education Oxford
Wood Centre for Innovation, Quarry Road, Headington, Oxford, OX3 8SB
compliance@ethsun.org
If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.