- Introduction
International Education Study Consult Ltd (IESC Ltd), referred to as “IESC,” is committed to
protecting the privacy, confidentiality and security of personal information entrusted to us.
We provide education consultancy, student recruitment, university application assistance, career
guidance and related international education support services, Corporate Training, Human Recourse
etc.
In providing these services, we may handle personal information belonging to students, prospective
students, parents, guardians, sponsors, website visitors, institutional partners and other individuals.
This Privacy Policy explains how we collect, use, disclose, store, protect and retain personal
information. It is intended to support our compliance with the applicable data protection laws of
Rwanda and Uganda, including Rwanda’s Law No. 058/2021 relating to the Protection of Personal
Data and Privacy and Uganda’s Data Protection and Privacy Act, 2019, as amended or revised, and
applicable regulations.
This policy applies to our website, offices, consultancy services, application processes and business
communications, to the extent permitted by applicable law. - Who Is Responsible for Your Personal Information?
International Education Study Consult Ltd is responsible for determining how and why personal
information is processed in connection with its services, where it acts as a data controller.
Where IESC processes personal information on behalf of another organisation, its responsibilities will
depend on the arrangement and applicable law.
Company details
Company name: International Education Study Consult Ltd (IESC Ltd)
Website: https://www.iescltd.com/
Official email: info@iescltd.com
Telephone/WhatsApp: +250787369917
Registered or business address: 110072955
Privacy contact or Data Protection Officer: Ronald Wandira +250787369917
info@iescltd.com
WEB: www.iescltd.com - Personal Information We Collect
We collect only information that is relevant and reasonably necessary for the services requested or for another lawful purpose.
3.1 Identity and contact information
This may include full name, date of birth, nationality, residential address, telephone number, email
address and passport or national identification details.
3.2 Academic and educational information
This may include academic transcripts, certificates, examination results, previous educational
institutions, English-language proficiency results, course preferences, university applications,
admission letters and enrolment records.
3.3 Visa and immigration information
Where we provide related assistance, we may handle passport copies, travel history, visa application
forms, previous immigration decisions, supporting letters and other documents required for an
application.
3.4 Financial and sponsorship information
Where necessary, we may process bank statements, proof of funds, sponsor identification, sponsorship letters, employment or income evidence and other documents required to support an education or visa application.
3.5 Parent, guardian and dependant information
We may collect relevant information about parents, legal guardians, sponsors and dependants when
needed to support an application or fulfil a service requested by a student or their authorised
representative.
3.6 Communication records
We may retain enquiries, emails, telephone records, WhatsApp correspondence, feedback, meeting
notes and other communications relating to our services.
3.7 Website and technical information
Depending on the website technologies we use, we may collect IP addresses, device and browser
information, pages visited, cookie preferences and website usage information.
We do not intentionally collect unnecessary information or use technical information for unrelated
purposes. - How We Collect Personal Information
We may collect personal information:
Directly from individuals through forms, applications, emails, telephone calls, WhatsApp and face-to face meetings.
From parents, guardians or sponsors acting with appropriate authority.
From universities, schools, examination bodies and education partners involved in an application.
Through our website and other communication platforms.
From third parties where the individual has authorised the disclosure or another lawful basis permits
it.
Where information is obtained indirectly, we will provide information about its source and processing where required by applicable law. - Purposes for Processing Personal Information
We may process personal information for the following purposes:
Providing education consultancy and career guidance.
Assessing qualifications against university admission requirements.
Preparing, submitting and following up on university applications.
Supporting admissions, enrolment and scholarship applications.
Providing visa documentation assistance where requested.
Communicating with universities, colleges and authorised institutional representatives.
Communicating with parents, guardians and sponsors where authorised or legally permitted.
Managing client records, appointments, enquiries and service agreements.
Processing legitimate business transactions and maintaining accounting records.
Protecting our website, systems, staff, clients and business operations.
Complying with applicable legal obligations and responding to lawful requests.
Improving our services and website.
Sending relevant information about educational opportunities where permitted by law.
We will not use personal information for purposes incompatible with the original purpose unless
another lawful basis permits the processing. - Lawful Basis for Processing
IESC will process personal information only where an appropriate legal basis exists under the
applicable law.
Depending on the circumstances, this may include:
The individual’s freely given, specific and informed consent.
Taking steps requested by an individual before entering into a contract.
Performing a contract for consultancy or application services.
Complying with a legal obligation.
Protecting vital interests where legally applicable.
Another legitimate and legally recognised basis for processing.
Consent will be obtained where required. Where consent is relied upon, individuals may withdraw it,
subject to applicable law and any other lawful basis for retaining or processing the information.
Withdrawing consent does not invalidate processing lawfully conducted before withdrawal. - Sensitive Personal Information
Certain information, including financial, medical, family or other specially protected information, may
be subject to additional legal safeguards.
We will process such information only where a lawful basis and any additional conditions required by
the applicable law are satisfied.
We will restrict access to sensitive documents to authorised personnel and relevant service providers
who need the information for legitimate purposes. - Disclosure to Universities and Other Third Parties
IESC may disclose relevant personal information to:
Universities, colleges and other educational institutions.
Admissions departments and authorised application platforms.
Scholarship providers and education partners.
Visa authorities, embassies and government agencies where necessary and legally permitted.
Parents, guardians and sponsors where authorised or otherwise legally permitted.
Website hosting providers, IT support companies and communication service providers.
Accountants, legal advisers and other professional service providers.
Regulators, courts or law enforcement authorities where disclosure is legally required.
We aim to share only the information necessary for the purpose concerned.
We do not sell personal information to third parties for their independent marketing purposes.
Where an external service provider processes personal information on our behalf, we will put
appropriate contractual and security safeguards in place where required by law. - International Transfers of Personal Information
IESC may assist students applying to institutions in countries outside Rwanda and Uganda. This may
require personal information to be disclosed to universities, application platforms, visa authorities or
service providers located in other countries.
International transfers will be conducted in accordance with the applicable requirements of the country
from which the information is transferred.
9.1 Transfers from Rwanda
Where Rwanda’s Law No. 058/2021 applies, IESC will comply with the applicable requirements
governing the sharing or transfer of personal information outside Rwanda, including any required
supervisory authority authorisation, appropriate safeguards, contractual arrangements or other lawful conditions.
Where information is to be stored outside Rwanda, IESC will comply with the applicable registration
and authorisation requirements for overseas storage.
9.2 Transfers from Uganda
Where Uganda’s Data Protection and Privacy Act applies, IESC will comply with the requirements
governing processing or storage of personal information outside Uganda, including applicable
requirements concerning adequate protection in the receiving country and the individual’s consent.
9.3 Information shared with universities
Where an individual requests or authorises an application to an overseas university, relevant personal information may be shared as necessary for the application. IESC will assess the applicable transfer requirements rather than assuming that submitting an application automatically satisfies every legal requirement. - Storage and Retention of Personal Information
We will retain personal information only for as long as necessary to fulfil the purposes for which it
was collected or to meet applicable legal, contractual and administrative obligations.
Retention periods may depend on the type of information, the status of an application, legal
requirements and the need to resolve disputes.
When information is no longer required, we will securely delete, destroy or anonymise it, subject to
any lawful requirement to retain it.
Storage in Rwanda: Where Rwanda’s law applies, personal information will be stored in Rwanda
unless storage outside Rwanda is permitted under the applicable authorisation and registration
requirements.
Storage in Uganda: Where Uganda’s law applies, storage or processing outside Uganda will be
handled in accordance with the applicable requirements concerning overseas processing, adequate
protection and consent.
We will take reasonable steps to understand where our website, email, cloud storage, application
management and other service providers store personal information. - Security of Personal Information
IESC will implement appropriate technical and organisational measures to protect personal
information against loss, misuse, unauthorised access, alteration, disclosure or destruction.
Depending on the nature of the information and our systems, these measures may include:
Restricting access to authorised personnel.
Using passwords and appropriate access controls.
Maintaining secure document storage and transfer practices.
Providing confidentiality instructions to personnel handling personal information.
Reviewing access permissions and security arrangements.
Assessing the security practices of relevant service providers.
Taking appropriate steps to identify and respond to security incidents.
No electronic system or transmission method can be guaranteed to be completely secure. However, we will take reasonable measures to protect the information entrusted to us. - Personal Data Breaches
If a security incident compromises personal information, IESC will investigate and take appropriate
steps to contain the incident, assess its impact and prevent further harm.
We will notify the relevant supervisory authority and affected individuals where required by the
applicable law, within the prescribed time limits and subject to any applicable exceptions. - Rights of Individuals
Subject to applicable law, individuals may have the right to:
Request access to personal information held about them.
Obtain information about how their information is used and the categories of recipients with whom it is shared.
Request correction of inaccurate, incomplete or outdated information.
Request deletion of information where the legal conditions are satisfied.
Withdraw consent where processing is based on consent.
Object to or request restriction of certain processing activities where the law permits.
Raise concerns about unlawful or inappropriate processing.
Lodge a complaint with the relevant data protection authority.
Exercise any other rights provided under applicable law.
Some rights are subject to legal exceptions. For example, we may need to retain certain records to
comply with the law or defend legal claims.
Requests may be submitted using the contact details in Section 19. We may request reasonable proof of identity to prevent unauthorised disclosure.
We will respond in accordance with the applicable legal requirements and time limits. - Children and Students Under 18
IESC may provide education consultancy and application services to children and young people.
We will take appropriate steps to protect children’s personal information and obtain parental or
guardian consent where required by applicable law.
In particular, where Rwanda’s law applies to the personal information of a child under 16, we will
comply with the relevant parental responsibility and consent requirements, subject to the exceptions
provided by law. We will also comply with Uganda’s requirements governing the collection and
processing of children’s personal information.
We will process children’s information in a manner appropriate to the service and the child’s interests, and will restrict access to authorised persons. - Cookies and Website Technologies
Our website may use cookies or similar technologies to support website functionality, remember
preferences and understand website performance.
Where applicable, we will provide appropriate information about cookies and obtain consent before
using technologies for which consent is legally required.
Visitors may manage cookies through their browser settings. Disabling certain cookies may affect
website functionality.
Where we use third-party analytics, social media integrations, embedded content or similar services,
those providers may process information under their own privacy policies. - Marketing and Educational Updates
IESC may communicate with prospective and current clients about relevant courses, university
admissions, scholarships, application deadlines, events and education opportunities.
Where required by law, we will obtain consent before sending direct marketing communications.
Individuals may opt out of marketing communications at any time. This will not prevent us from
sending essential communications relating to an ongoing application, an existing service or a legal
obligation. - Third-Party Websites and Platforms
Our website may link to university websites, application portals, social media platforms, payment
services and other external websites.
IESC does not control the privacy practices of these external services. Individuals should review the
relevant third party’s privacy policy before submitting personal information through its platform. - Complaints Handling Policy
International Education Study Consult Limited (IESC Ltd) is committed to providing professional,
transparent, fair, and reliable educational consultancy services. We value feedback from students,
parents, guardians, partner institutions, and other stakeholders and take complaints seriously.
a) How to Make a Complaint
A complaint may relate to the quality of our services, communication, application processing, staff
conduct, advice provided, or any other concern regarding our services.
Complaints may be submitted through the following channels:
- Telephone/WhatsApp: +250787369917 or +256 776 027 077
- Email: info@iescltd.com
- In person: At our offices in Kigali, Rwanda.
When submitting a complaint, please provide your name and contact details, a description of the
concern, relevant dates, and any supporting documents. We will handle complaints confidentially and share information only where necessary to investigate and resolve the matter.
b) Complaint Response Timescales
IESC Ltd aims to handle complaints promptly and fairly, following these indicative timescales: - Acknowledgement: Within 3 working days of receiving the complaint.
- Initial review: Within 5 working days of acknowledgement.
- Resolution: Normally within 15 working days of receipt.
- Complex complaints: Where additional investigation is required, we will inform the complainant of
the reason for the delay and provide an expected resolution date.
These timescales are working targets. We will keep complainants informed of significant
developments.
c) Investigation and Resolution
Complaints will be reviewed objectively by an appropriate member of management who is not directly
involved in the matter, where practicable. Depending on the circumstances, possible outcomes may
include an explanation, apology, correction of an error, improvement in service delivery, or another
reasonable corrective action.
Making a complaint will not, in itself, result in unfair treatment or discrimination against the
complainant.
d) Escalation Procedure
If a complainant is dissatisfied with the initial response or proposed resolution, they may request a
review by the Managing Director.
Escalation contact: Ronald Wandira, Managing Director
Telephone/WhatsApp: +25078769917
Email: info@iescltd.com
The request should explain why the initial outcome is considered unsatisfactory and identify any
relevant additional information. IESC Ltd aims to complete an escalation review within 10 working
days, or advise the complainant if further time is required.
Where a complaint remains unresolved, the complainant may seek guidance from an appropriate
consumer protection, data protection, professional, or regulatory authority in the relevant jurisdiction, where applicable.
- Monitoring and Continuous Improvement
IESC Ltd will maintain appropriate records of complaints, decisions, and corrective actions. Complaint
trends will be reviewed periodically to identify areas for improvement and strengthen the quality,
accountability, and reliability of our services.
a) Staff Training and Professional Development Statement
International Education Study Consult Limited (IESC Ltd) recognises that knowledgeable, competent,
and professional staff are essential to delivering quality educational consultancy services.
We are committed to the ongoing training and professional development of our staff and
representatives to ensure they maintain relevant knowledge, skills, and professional standards.
b) Our development activities may include training and updates on:
- University and college admissions requirements and application procedures.
- International student recruitment and ethical education consultancy practices.
- Visa and study permit processes, including the importance of accurate information and compliance
with applicable immigration rules. - Student safeguarding, confidentiality, data protection, and responsible handling of personal
information. - Customer service, professional communication, complaint handling, and stakeholder engagement.
- Changes in education policies, institutional requirements, and relevant laws and regulations in
Rwanda, Uganda, and other jurisdictions in which we operate.
IESC Ltd encourages continuous learning through internal briefings, institutional training sessions,
professional development opportunities, and updates from partner institutions and relevant authorities.
We aim to review staff training needs periodically and encourage employees and representatives to
apply their learning in their daily work. Our commitment to professional development supports
continuous improvement, responsible student guidance, and the delivery of transparent, ethical, and
student-centred services.
- Complaints and Regulatory Authorities
Individuals who believe that their personal information has been handled unlawfully may contact IESC first so that we can review and respond to the concern.
Where the matter remains unresolved, individuals may contact the relevant data protection authority
in accordance with the applicable law.
Rwanda: The Data Protection and Privacy Office, under the National Cyber Security Authority,
oversees the implementation of Rwanda’s personal data protection law. Information is available at
https://dpo.gov.rw/.
Uganda: The Personal Data Protection Office oversees compliance with Uganda’s Data Protection and Privacy Act. Information is available at https://pdpo.go.ug/.
Contacting IESC does not prevent an individual from exercising any right to complain to a competent authority. - Contact Information
For privacy enquiries, access requests, correction requests, deletion requests or complaints, contact:
International Education Study Consult Ltd (IESC Ltd)
Website: https://www.iescltd.com
Official email: info@iescltd.com
Telephone/WhatsApp: +25078769917 or +256776027077
Office address: Kigali Business Centre, KBC 2ND floor KN 5 Rd, Kigali Rwanda
Privacy contact/Data Protection Officer: +25078769917 Ronald Wandira
Please use the subject line “Privacy and Data Protection Request” when contacting us about
personal information. - Registration and Regulatory Compliance
IESC will assess and comply with applicable registration, notification, authorisation and other
regulatory obligations that apply to its activities as a data controller or data processor in Rwanda and Uganda.
This Privacy Policy does not, by itself, constitute a registration certificate, authorisation or regulatory
approval. - Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, information-handling practices,
website technologies or applicable laws.
The current version will be published on our website, with the effective date or last-updated date
indicated at the beginning of the document.
Where legally required, we will notify affected individuals of material changes or obtain any additional consent that may be necessary. - Applicable Law
This Privacy Policy is intended to operate alongside the applicable data protection laws of Rwanda and Uganda.
The relevant legal requirements will be determined by the circumstances of the processing, the
individuals concerned, the location of the processing or storage and the territorial scope of the
applicable legislation.
Nothing in this policy removes or restricts any mandatory rights or protections available to individuals under applicable law.
END OF PRIVACY POLICY
