We collect minimal personal data — only what is needed to process your order and deliver your report. This notice explains exactly what we collect, why, and who sees it.
UniProfile is a trading name of Higher Education Human Resource Performance Analytics Limited, a company registered in England and Wales (company number 13330562). We are the data controller for personal data collected through this website.
Contact: support@uniprofile.co.uk
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For visitors from the EEA, we also comply with EU GDPR.
We collect only what is needed to fulfil your order. No marketing data is collected without your separate consent. We do not sell your data.
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| Email address | Stripe checkout | Delivering your report; sending your Stripe receipt | Contract performance (Art. 6(1)(b) UK GDPR) |
| Name (if provided) | Stripe checkout | Order identification | Contract performance |
| Payment details | Stripe — we never see raw card data | Payment processing | Contract performance |
| University and report type (as an order reference code) | The order form on uniprofile.co.uk, attached to your Stripe payment as an order reference | Fulfilling your order | Contract performance |
| Stripe payment ID | Stripe | Order reference, refund processing | Contract performance |
| IP address and device data | Stripe / Cloudflare | Fraud prevention, site security | Legitimate interests |
Payment processing is handled by Stripe Payments Europe Limited. Stripe acts as a data processor on our behalf for order processing, and as an independent controller for fraud prevention and financial regulatory purposes. Raw card details never pass through our systems — they are handled entirely by Stripe.
See Stripe's privacy policy for full details of their processing.
We retain order records (email address, university name, report type, Stripe payment ID) for 6 years from the date of purchase, in line with UK limitation periods for contract claims. Delivered PDF reports are deleted from our systems after 90 days unless you request otherwise.
Our infrastructure runs on Google Cloud Platform in the London (europe-west2) region. Stripe may process data in the United States under standard contractual clauses (SCCs) approved by the European Commission. No other international transfers take place.
Under UK GDPR — and EU GDPR for EEA residents — you have the following rights. To exercise any of them, email support@uniprofile.co.uk with your order reference. We aim to respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk / 0303 123 1113.
Our checkout is hosted by Stripe (buy.stripe.com) and is subject to Stripe's cookie policy.
The uniprofile.co.uk site is served via Cloudflare, which sets __cf_bm — a security cookie used for bot management. This is an essential cookie; it does not track you across sites and does not require consent.
We use Cloudflare Web Analytics to understand site traffic (page views, referrer, country, device type). This is cookieless and privacy-first — no cross-site tracking, no fingerprinting, and no personal data is shared with us. See Cloudflare's privacy policy for details.
No advertising or marketing cookies are set on this site.
We will update this page if our processing changes. Material changes will be flagged with an updated “Last updated” date at the top.
For any privacy queries: support@uniprofile.co.uk
Higher Education Human Resource Performance Analytics Limited
Company number 13330562, registered in England and Wales.
Consumers resident in other jurisdictions may have additional rights under their local consumer protection law that these terms do not affect.