Privacy Policy

Edu Directory is owned and operated by K4 Consulting Limited, a company registered in England and Wales (company number 16108379), registered with the ICO under registration number ZB918808. If you have any questions about this policy or how your data is handled, please contact us at: admin@k4.consulting

We collect the following personal information, depending on how you use the platform:

Account registration and newsletter subscription

• Your name and email address
• Password (stored in hashed form — never in plain text)
• Organisation name and job role (if provided in your profile)

Sign-in via Google or Apple: If you choose to sign in using Google or Apple, we receive a unique identifier, your email address, and your display name from that provider. We do not receive your password from those services. Your use of Google or Apple sign-in is also subject to their respective privacy policies.

Two-factor authentication (2FA): If you enable two-factor authentication, we store a one-time password (TOTP) secret key linked to your account. This is used solely to verify your identity at login.

Consultant directory applications: If you apply to be listed in the consultant directory, we collect: your full name, email address, professional headline, biography, website URL, LinkedIn and social media handles, location (city and country), areas of specialism, availability type, and an optional profile photo. This information is published on the platform if your application is approved.

Job alert preferences: If you set up job alerts, we store your keyword and location preferences to send relevant email notifications.

Usage data: We record page views on the platform for the purposes of editorial analytics and understanding which content is most useful. No personal identifier is attached to these records.

We use your information for the following purposes:

• To create and manage your account
• To send you the newsletter or email updates you have subscribed to
• To send job alert emails based on your saved preferences
• To verify your identity at login (including 2FA)
• To publish and manage your consultant listing (if applicable)
• To respond to any queries or requests you send us
• To understand how the platform is used and improve its content

Our lawful basis for processing your data is consent: you have actively chosen to register, subscribe, or submit information.

If the platform processes payments (for example, for sponsored listings or premium features), payments are handled by Stripe, a third-party payment processor. K4 Consulting Limited does not store your card details. Stripe processes payment data in accordance with PCI DSS standards and their own privacy policy, available at stripe.com/gb/privacy. We receive transaction records including your name, email, and subscription status from Stripe.

We do not sell your personal data. We may share it with the following trusted third-party service providers who help us operate the platform:

• Stripe — payment processing (see Section 4)
• Email delivery providers — to send newsletters, job alerts, and transactional emails. Any such provider is required to handle your data securely and in line with UK GDPR.
• Cloud hosting infrastructure — our database and application are hosted on secure cloud infrastructure. Data is stored in the UK/EEA or with providers offering equivalent protections.

Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions).

We retain your personal data for as long as your account remains active or as long as you remain a subscriber. If you unsubscribe, close your account, or ask us to delete your data, we will remove it promptly. Anonymised usage data (page views with no personal identifiers) may be retained indefinitely for analytical purposes.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Ask us to correct any inaccurate data
• Ask us to delete your data
• Object to or restrict certain types of processing
• Data portability — receive your data in a structured, machine-readable format
• Withdraw your consent at any time (without affecting the lawfulness of processing before withdrawal)

To exercise any of these rights, email us at admin@k4.consulting and we will respond within 30 days.

Edu Directory uses the following types of cookies:

• Essential / session cookies — required for you to stay logged in and for the site to function correctly. These cannot be disabled without breaking core functionality.
• Payment cookies — if you make a payment, Stripe may set cookies to prevent fraud and process your transaction securely.

We do not use cookies for advertising or third-party tracking. You can adjust your cookie settings in your browser at any time, but disabling essential cookies may prevent you from signing in.

If you are unhappy with how we have handled your personal data, please contact us first at admin@k4.consulting. If you remain dissatisfied, you have the right to raise a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. K4 Consulting Limited is registered with the ICO under registration number ZB918808.

We may update this policy from time to time. Any changes will be posted on this page with an updated date at the top. For significant changes we will notify account holders by email where practical.