The National Student Network. NSN UK. 

Privacy Policy

Last updated: 7th March 2026

At the National Student Network UK ("NSN UK", "We", "Us", or "Our"), the UK subsidiary of NSN Global Services, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you access or use our website (the "Website"), services, technologies (such as AI personal tutors), and initiatives (including our flagship campaign 'NSN Safer Living'). We operate in full compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK data protection laws. This Policy applies to all users, including students, educators, partners, and visitors, regardless of location, but is tailored to UK standards.

By using our Website or Services, you consent to the practices described in this Policy. If you do not agree, please do not access or use our Website or Services. We may update this Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted here with a revised effective date, and we will notify you of material changes via email or prominent notices on the Website. Your continued use after changes constitutes acceptance.

1. Data Controller and Contact Information

NSN UK is the data controller for personal data processed through our Website and Services. Our registered office is in Farringdon, London, United Kingdom. For any privacy-related inquiries, complaints, or requests, please contact our Data Protection Officer (DPO) at:

- Email: engage@nsnglobalservices.com
- Registered Address: Farringdon, London, United Kingdom

We aim to respond to all inquiries within one month, as required by UK GDPR. If you believe we have not handled your data appropriately, you have the right to complain to the UK Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

2. Information We Collect

We collect various types of personal data to provide and improve our Services, which focus on student health and wellbeing, support for businesses, governments, and organisations, and innovative technologies. The categories of data we may collect include:

- Personal Identifiers: Such as your name, email address, postal address, phone number, date of birth, or username when you register, contact us, or participate in our programs.

- Contact and Communication Data: Information from emails, forms, surveys, or interactions with our AI tutors, including content of messages and metadata (e.g., timestamps).

- Technical and Usage Data: Automatically collected details like IP address, browser type, device information, operating system, pages visited, time spent on the Website, referral sources, and clickstream data. This may include cookies, web beacons, or similar technologies (see our Cookie Policy for details).

- Health and Wellbeing Data: If you engage with 'NSN Safer Living' or wellbeing resources, we may collect sensitive data such as mental health indicators, stress levels, or wellness preferences, but only with your explicit consent and for the purpose of providing tailored support.

- Educational Data: For AI personal tutors, this includes learning preferences, academic performance metrics, subjects of interest, and progress data to personalise tutoring.

- Payment and Financial Data: If applicable (e.g., for premium services or donations), we collect billing details, but these are processed securely by third-party providers and not stored by us.

- User-Generated Content: Any data you submit, such as feedback, comments, or uploads, which may include personal information.

- Special Categories of Data: We may process sensitive data (e.g., health, ethnic origin, or beliefs) only where necessary for our Services, with your explicit consent, or as permitted by law (e.g., for equality monitoring under the Equality Act 2010).

We only collect data that is necessary and proportionate to our purposes. We do not collect data from children under 13 without verifiable parental consent, and for those under 18, we require additional safeguards (see Section 10).

3. How We Collect Information

We collect data through various methods to ensure transparency and lawfulness:

- Directly from You: When you voluntarily provide it, such as during registration, form submissions, AI tutor interactions, or participation in campaigns like 'NSN Safer Living'.

- Automatically: Via cookies, analytics tools (e.g., Google Analytics), and server logs to track usage and improve functionality. You can manage cookie preferences through your browser settings.

- From Third Parties: Such as partners (e.g., United Nations, We Value You CIC, or tech firms like Saxon Data) when you engage through joint initiatives, or from public sources where lawful.

- Inferred Data: We may derive insights from your interactions, such as learning patterns from AI tutor usage, but only for personalisation and with appropriate safeguards.

All collection is based on legal grounds under UK GDPR, including consent, contract performance, legitimate interests (e.g., improving Services), or legal obligations.

4. How We Use Your Information

We process personal data for specific, legitimate purposes and only as necessary:

- Providing Services: To deliver AI tutors, wellbeing resources, and 'NSN Safer Living' campaigns, including personalising content based on your needs.

- Support and Communication: To respond to inquiries, provide updates, newsletters, or support for students, businesses, governments, and organisations.

- Improvement and Analytics: To analyse usage, enhance Website functionality, develop new technologies, and measure campaign effectiveness using aggregated, anonymised data.

- Marketing: With your consent, to send promotional materials about our Services or partners. You can opt out at any time.

- Compliance and Security: To prevent fraud, ensure legal compliance, protect against misuse, and maintain data integrity.

- Research and Development: For internal research on student wellbeing trends, always anonymised where possible.

We conduct Data Protection Impact Assessments (DPIAs) for high-risk processing and ensure all uses align with your expectations and UK law.

5. Sharing and Disclosure of Information

We share data only when necessary and with appropriate protections:

- Within NSN Group: With our parent company, NSN Global Services, for global operations, subject to UK GDPR adequacy decisions or safeguards.

- Service Providers: With trusted third parties (e.g., cloud hosts like AWS, analytics providers, or payment processors) who act as processors under strict contracts ensuring UK GDPR compliance.

- Partners: Such as the United Nations, World Trade Organisation, We Value You CIC, Orion Care, Global Monetary, Utilities Intelligence Agency, or Saxon Data, for collaborative projects, with your consent or under joint controllership agreements.

- Legal Requirements: To authorities if required by law, such as for safeguarding under the Children Act 1989 or in response to court orders.

- Business Transfers: In the event of mergers, acquisitions, or asset sales, with notice to you.

We do not sell your data. All sharing is minimised and protected by data processing agreements.

6. Data Retention

We retain personal data only as long as necessary for the purposes outlined, or as required by law:

- Account data: For the duration of your active use plus 2 years for audit purposes.
- Health data: Up to 1 year post-engagement, unless consented otherwise.
- Technical logs: 6 months for security analysis.
- Legal records: Up to 6 years under limitation periods.

Data is securely deleted or anonymised when no longer needed. You can request deletion earlier via your rights (see Section 8).

7. Data Security

We implement robust technical and organisational measures to protect data against unauthorised access, loss, or breach, in line with UK GDPR Article 32:

- Encryption for data in transit and at rest.
- Access controls, firewalls, and regular security audits.
- Employee training on data protection.
- Incident response plans, with notification to the ICO and affected individuals within 72 hours of a breach if required.

Despite these measures, no system is infallible; you share data at your own risk.

8. Your Rights

Under UK GDPR, you have rights regarding your data. To exercise them, contact our DPO (no fee in most cases):

- Access: Request a copy of your data.
- Rectification: Correct inaccurate data.
- Erasure: Delete data in certain circumstances (e.g., if consent is withdrawn).
- Restriction: Limit processing while disputes are resolved.
- Objection: Object to processing based on legitimate interests or for marketing.
- Portability: Receive data in a machine-readable format.
- Withdraw Consent: At any time, without affecting prior processing.
- Automated Decisions: Not be subject to solely automated decisions with legal effects (we do not currently use these).

We will respond within one month, extendable if complex.

9. International Data Transfers

As part of NSN Global Services, data may be transferred outside the UK (e.g., to the US). We ensure adequacy through UK International Data Transfer Agreements (IDTAs), Standard Contractual Clauses (SCCs), or other mechanisms approved by the ICO. For details, contact our DPO.

10. Children's Privacy

Our Services are not directed at children under 13. We do not knowingly collect their data without verifiable parental consent. For users under 18, we require additional protections, such as parental involvement for sensitive data. If we discover unauthorised collection, we will delete it promptly. Parents can contact us to review or delete data.

11. Cookies and Tracking Technologies

We use cookies for functionality, analytics, and marketing. Essential cookies are always on; others require consent. See our separate Cookie Policy for details, management options, and opt-out links (e.g., for Google Analytics).

12. Changes to This Privacy Policy

We review this Policy annually or as needed. Changes are effective upon posting. For significant updates affecting your rights, we provide advance notice.

13. Third-Party Links

Our Website may link to third-party sites. We are not responsible for their privacy practices. Review their policies before interacting.

14. Miscellaneous

This Policy is governed by UK law. If any part is invalid, the rest remains enforceable. For questions, contact us as above.

Trademark Notice: NSN and the NSN logo are protected trademarks in the United Kingdom. All rights reserved.