Confidential handling of parent and student records.

Our plain-English commitment

We use parent and student information only to deliver and improve the admissions advisory engagement the family has requested. We do not sell personal information. We do not trade student records. We do not disclose student data to universities, agents, advertising networks, data brokers, or third-party counselling networks without explicit permission from the parent or student where appropriate.

What we collect

We may collect parent contact details, student name and education stage, academic history, curriculum and stream information, school marks, test records, activities, intended disciplines, preferred countries or regions, budget and funding posture, family constraints, existing shortlists, documents supplied for review, and advisory questions.

We ask families to avoid entering unnecessary sensitive information. We do not need medical, government identification, biometric, financial-account, or immigration-status details unless a specific advisory question genuinely requires limited context.

How we use it

Information is used to prepare the selected admissions advisory report or counselling support, identify eligibility issues, compare course and country fit, generate evidence tasks, verify decision-bearing facts against official sources, support specialist review, schedule or document review sessions, respond to family questions, and maintain engagement records.

We may use de-identified operational patterns to improve our methodology, such as noticing that a particular country route needs clearer eligibility checks. We do not use identifiable student records to advertise outcomes or train public-facing marketing material without permission.

Who sees it

Access is limited to Haldenbrook personnel, counsellors, specialist reviewers, and service providers who need the information to support the engagement. Service providers may include hosting, database, authentication, email, payment, document, analytics, or security vendors. They are expected to process information for the services they provide to us, not for their own independent marketing.

Student records are not shared with universities, third-party counselling networks, marketing partners, or agents unless the family asks us to do so or gives explicit permission.

Payments and third-party services

Where payment links or checkout services are used, payment processors may collect payment information directly under their own terms and privacy policies. Haldenbrook does not intend to store full card numbers or bank credentials in the parent workspace.

Storage, safeguards, and retention

The parent workspace uses authenticated access and database-level access controls. We use reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity of student records. No online system can be guaranteed completely secure, but we design the workflow around limited access, purposeful collection, and controlled review.

We keep engagement records only as long as reasonably needed for advisory delivery, quality review, tax/accounting, legal, dispute-resolution, and business-continuity purposes. Families may request deletion of student records when the engagement is complete, subject to records we are legally or operationally required to retain.

India and the DPDP framework

Haldenbrook Advisory LLP is based in India. Where India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 apply, we aim to handle digital personal data in line with the core DPDP principles of clear notice, lawful and purpose-limited use, data minimisation, accuracy, storage limitation, safeguards, accountability, and grievance redressal.

In DPDP terminology, the individual whose personal data is processed is the Data Principal, and an organisation deciding why and how that data is processed is a Data Fiduciary. For admissions work involving a child, parent or lawful guardian involvement is central to the engagement. We do not undertake behavioural monitoring of children or targeted advertising directed at children.

Families may contact us to understand what personal data is held, request correction or updating, request erasure where applicable, withdraw consent where processing is consent-based, nominate another person where legally relevant, or raise a grievance. We aim to respond to rights and grievance requests within the timelines required by applicable law, including the DPDP framework where it applies.

US and Canada families

Families in the United States and Canada may contact us to request access to personal information, correction of inaccurate information, deletion where applicable, or confirmation of our no-sale/no-sharing position. We will respond within a reasonable period and may need to verify the requester before acting on a request.

For California-style terminology, Haldenbrook does not sell personal information and does not share personal information for cross-context behavioural advertising. For Canadian families, we aim to follow the core privacy principles of identifying purposes, limiting collection, consent, safeguards, openness, access, and retention appropriate to the advisory relationship.

Minors and parent involvement

Admissions advisory often concerns students under 18. The parent or guardian should provide or approve the intake information unless the student is legally able and expected to manage the engagement directly. We do not knowingly invite children to create accounts or submit personal information without family involvement.

Marketing and testimonials

We may send service-related messages about an inquiry or engagement. Promotional messages, if used, should include a reasonable way to opt out. Student names, photographs, essays, school records, outcomes, or testimonials are not published without explicit permission.

International processing

Haldenbrook Advisory LLP is based in India, and our technology providers may process or store information in India, the United States, Canada, or other jurisdictions. By using the service, families understand that information may be processed outside their home country, with safeguards appropriate to the engagement.

Questions and requests

For privacy questions, access requests, correction requests, deletion requests, or concerns about data use, write to [email protected].

Last updated: August 23, 2026. This page is intended to be a clear public statement of our privacy practices. It is not a substitute for jurisdiction-specific legal advice.