Privacy Policy for TheNext.edu.np
Last Updated: May 8, 2025
This Privacy Policy explains how TheNext Education Consultancy (“TheNext,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal data when you use our website, TheNext.edu.np (the “Website”), and our Services. This policy supplements the information provided in Section 5 of our Terms and Conditions and provides more detailed information about our data processing practices.
Who We Are (Data Controller)
The Next Education Consultancy,
Kathmandu, Nepal,
Email: info@thenext.edu.np.
Phone: +977-01-4010523, is the data controller responsible for the processing of your personal data collected through the Website and our Services.
Personal Data We Collect and How We Collect It
We collect personal data in various ways, including:
Information You Provide Directly:
- Contact Information: When you fill out contact forms, subscribe to newsletters, request information, or communicate with us, we collect your name, email address, phone number, and any other information you provide.
- Account Information: If you create an account on our Website (if applicable), we collect your username, password, and other profile details.
- Application Information: When you apply for educational institutions through our Services, we collect detailed information relevant to your application, such as academic history, transcripts, personal statements, references, visa information, and financial details.
- Feedback and Surveys: If you participate in surveys or provide feedback, we collect your responses and any identifying information you choose to provide.
Information We Collect Automatically:
- Website Usage Data: When you visit our Website, we automatically collect certain information about your device and browsing activity, including your IP address, browser type, operating system, referring URLs, pages visited, the dates and times of your visits, and your navigation patterns on the Website. We collect this information using cookies and similar technologies (as detailed in our Cookie Policy).
- Device Information: We may collect information about the device you use to access our Website, including device model, unique device identifiers, and mobile network information.
Information We Receive from Third Parties:
- Educational Institutions: We may receive updates and information about your application status from the educational institutions you apply to through our Services.
- Partners and Service Providers: We may receive personal data from our partners and service providers who assist us in providing the Services, such as payment processors, marketing platforms, and analytics providers.
Purposes of Processing Your Personal Data
We process your personal data for the following purposes:
- Providing and Managing Our Services: To process your inquiries, facilitate your applications to educational institutions, provide guidance and support, manage your account, and fulfill our contractual obligations.
- Communication: To communicate with you regarding your inquiries, applications, updates, and other relevant information about our Services. This may include responding to your questions, providing customer support, and sending you important notices.
- Personalization and Improvement of Our Website and Services: To understand how you use our Website and Services, personalize your experience, tailor content to your interests, and improve the functionality and user-friendliness of our Website and Services.
- Marketing and Promotions (with Consent): To send you promotional emails, newsletters, and information about our Services or related educational opportunities that we think may be of interest to you. We will only do this if you have given us your explicit consent to receive such communications, where required by law. You can withdraw your consent at any time.
- Legal and Regulatory Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests. This may include retaining records for tax or audit purposes.
- Security and Fraud Prevention: To protect the security and integrity of our Website and Services, and to detect and prevent fraudulent or unauthorized activities.
- Analytics and Research: To analyze trends, track user behavior, and conduct research to improve our Services and understand the needs of our users.
Lawful Basis for Processing Your Personal Data
We will only process your personal data when we have a lawful basis to do so, as outlined in the GDPR, including:
- Consent: You have given us explicit consent to process your personal data for a specific purpose (e.g., for marketing communications).
- Contract: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract (e.g., processing your application to an educational institution).
- Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject (e.g., retaining records as required by law).
- Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided that your interests and fundamental rights do not override those interests. Our legitimate interests may include improving our Services, marketing our Services to prospective clients, and ensuring the security of our Website.
Sharing Your Personal Data
We may share your personal data with the following categories of recipients:
- Educational Institutions: We will share your application information and related personal data with the educational institutions you apply to through our Services.
- Service Providers: We may share your personal data with third-party service providers who assist us in providing our Services, such as IT support providers, payment processors, marketing platforms, analytics providers, and translation services. These providers are contractually obligated to protect your data and only process it according to our instructions.
- Partners: We may share your data with trusted partners who offer services related to education and study abroad, but only with your consent where required.
- Legal Authorities: We may disclose your personal data to legal authorities if required by law or legal process, or if we believe in good faith that such disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity. We will notify you if such a transfer occurs and your personal data becomes subject to a different privacy policy.
International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) that may have different data protection laws than those in your jurisdiction. When we transfer your personal data internationally, we will ensure that appropriate safeguards are in place to protect your data in accordance with the GDPR. These safeguards may include:
- Transferring to countries that have been deemed to provide an adequate level of protection by the European Commission.
- Implementing Standard Contractual Clauses approved by the European Commission with the recipient of the data.
- Relying on other legally permissible transfer mechanisms.
Data Security
We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized access, use, disclosure, alteration, or destruction. These measures include encryption, firewalls, access controls, and regular security assessments. We continuously review and update our security practices to ensure the ongoing confidentiality, integrity, and availability of your personal data.
Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention period will depend on the nature of the data and the purposes for processing. For example, application data may be retained for a longer period than general inquiries.
Your Rights Under the GDPR
As a data subject under the GDPR, you have the following rights:
- Right to Access: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, to access your personal data and certain related information.
- Right to Rectification: You have the right to have inaccurate personal data concerning you corrected and to have incomplete personal data completed.
- Right to Erasure (“Right to be Forgotten”): You have the right to request the erasure of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you have withdrawn your consent.
- Right to Restriction of Processing: You have the right to request the restriction of the processing of your personal data under certain circumstances, such as when the accuracy of the data is contested, or the processing is unlawful.
- Right to Data Portability: You have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller without hindrance from us.
- Right to Object: You have the right to object, on grounds relating to your particular situation, to the processing of your personal data which is based on our legitimate interests or for direct marketing purposes.
- Right not to be subject to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless the decision is necessary for entering into, or performance of, a contract between you and us, or is authorized by law, or is based on your explicit consent.
- Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time. The withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country if you believe that our processing of your personal data infringes the GDPR.
Exercising Your Rights
To exercise any of your rights under the GDPR, please contact us at:
The Next Education Consultancy
Kathmandu, Nepal
Email: info@thenext.edu.np
Phone: +977-01-4010523
We will respond to your request within one month of receipt. This period may be extended by two further months where necessary, taking into account the complexity and number of the requests. We will inform you of any such extension within one month of receipt of your request, together with the reasons for the delay.
Links to Other Websites
Our Website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s website. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policy of every website you visit.
Children’s Privacy
Our Website and Services are not intended for children under the age of [Specify the relevant age, e.g., 16]. We do not knowingly collect personal data from children under this age. If you are a parent or guardian and become aware that your child has provided us with personal data, please contact us immediately. If we become aware that we have collected personal data from a child under the specified age without verifiable parental consent, we will take steps to delete such information from our records.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post any changes on this page and update the “Last Updated” date at the top of the policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.
Contact Us
If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us at:
The Next Education Consultancy
Kathmandu, Nepal
Email: info@thenext.edu.np
Phone: +977-01-4010523
