Thymes Education Consulting ("Thymes", "we", "us", or "our") is the trading name of Thymes International Company Limited. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share and protect your personal data when you use our website or our education consultancy services. This Privacy Policy has been prepared in accordance with the UK General Data Protection Regulation (UK GDPR) and other applicable data protection laws.


 

1. Who We Are

Data Controller

Thymes International Company Limited

Trading as Thymes Education Consulting

Level 12 (Rooftop), Tower D, Shwe Moe Kaung Condominium
Corner of Maegin Street & Moe Kaung Road
Yankin Township, Yangon 11081

Myanmar

Email: contact@thymesinternational.com

Website: www.thymesinternational.com

2. Personal Data We Collect

Depending on the services you request, we may collect:
 

• Identity and contact information (such as your name, date of birth, nationality, address, email address and telephone number);

• Educational and application information (including academic records, qualifications, English language results, supporting documents and visa-related documents);

• Financial information where required for applications or payments;

• Technical information such as your IP address, browser type, device information and website usage;

• Communications between you and Thymes; and

• Any other information necessary to provide our services.
   

We only collect personal data that is necessary for the purposes described in this Privacy Policy.


 

3. How We Collect Personal Data

We collect personal data:
 

• directly from you;

• through our website;

• through enquiry and application forms;

• through email, telephone or meetings;

• from parents or guardians where appropriate;

• from educational institutions or business partners where authorised by you; and

• from publicly available sources where permitted by law.
  
  
   

4. Purposes of Processing and Lawful Basis

​

We process your personal data only where we have a lawful basis under Article 6 of the UK General Data Protection Regulation (UK GDPR). Depending on the purpose of processing, we rely on one or more of the following lawful bases:
 

• Performance of a Contract – We process your personal data to provide our education consultancy services, process applications to educational institutions, assist with visa applications, communicate updates regarding your applications, and fulfil our contractual obligations or take steps at your request before entering into a contract.

• Legal Obligation – We process personal data where necessary to comply with applicable laws, regulations, court orders, or requests from government or regulatory authorities.

• Legitimate Interests – We process personal data where it is necessary for our legitimate business interests, including responding to enquiries, improving our website and services, maintaining the security of our systems, preventing fraud, managing our business operations, and protecting our legal rights, provided that these interests are not overridden by your rights and freedoms.

• Consent – Where required by law, we will process your personal data based on your consent, such as sending marketing communications or processing certain categories of personal data. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.
   

Where we process special category personal data, such as health information required for accommodation arrangements, visa applications, or accessibility support, we will only do so where an appropriate condition under Article 9 of the UK GDPR applies, including obtaining your explicit consent where required by law.


 

5. Who We Share Personal Data With
 

Where necessary, we may disclose your personal data to:
 

• universities, colleges and schools;

• immigration authorities and visa application centres;

• accommodation providers;

• insurers where requested;

• payment providers;

• IT service providers and cloud hosting providers;

• professional advisers;

• auditors;

• regulators;

• government authorities; and

• other third parties where required by law or with your consent.
   

We only share information necessary for the relevant purpose.


 

6. International Transfers
 

As an international education consultancy, we regularly transfer personal data to educational institutions, immigration authorities and service providers located outside the United Kingdom and outside Myanmar.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR. These safeguards may include:
 

• the UK International Data Transfer Agreement (IDTA);

• the UK Addendum to the European Commission Standard Contractual Clauses;

• transfers to countries benefiting from a UK adequacy regulation; or

• another lawful transfer mechanism recognised under UK GDPR.
   

Where appropriate safeguards cannot be applied, we will rely only on a permitted derogation under Article 49 UK GDPR where legally applicable.


 

7. Data Retention
 

We retain personal data only for as long as necessary for the purposes for which it was collected.

Our general retention periods are:
 

• Enquiries that do not become clients: up to 2 years

• Student application records: up to 7 years after completion of services

• Financial and accounting records: 7 years or longer where required by law

• Marketing records: until consent is withdrawn or you opt out

• Website analytics: generally up to 26 months
   

Where legal proceedings, regulatory investigations or contractual obligations require longer retention, we will retain data until those matters are concluded.
 

After the applicable retention period, personal data is securely deleted or anonymised.


 

8. Automated Decision-Making and Profiling
 

Thymes does not make decisions based solely on automated processing, including profiling, which produce legal effects or similarly significant effects on individuals.

All decisions relating to admissions advice, application support and our services involve meaningful human review.


 

9. Cookies
 

Our website uses cookies and similar technologies to:
 

• maintain website functionality;

• analyse website traffic;

• improve user experience; and

• remember user preferences.
   

You may disable cookies through your browser settings, although certain website functions may not operate correctly.


 

10. Marketing
 

Where permitted by law, we may send information regarding:
 

• universities;

• scholarships;

• education events;

• webinars;

• promotions; and

• our education services.
   

Where consent is required, we will obtain it before sending marketing communications.

You may withdraw your consent or unsubscribe at any time.


 

11. Your Rights
 

Subject to applicable law, you may have the right to:
 

• access your personal data;

• request correction of inaccurate information;

• request deletion of your personal data;

• restrict processing;

• object to processing;

• withdraw consent where processing is based on consent;

• request data portability where applicable; and

• lodge a complaint with the relevant supervisory authority.
   

We will respond to requests in accordance with applicable data protection legislation.


 

12. Security
 

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures include access controls, secure storage, staff confidentiality obligations and appropriate security technologies.


 

13. Changes to This Policy
 

We may update this Privacy Policy from time to time.
 

The latest version will always be published on our website together with the revised effective date.


 

14. Contact Us
 

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

Thymes Education Consulting
Trading Name of Thymes International Company Limited

Level 12 (Rooftop), Tower D, Shwe Moe Kaung Condominium
Corner of Maegin Street & Moe Kaung Road
Yankin Township, Yangon 11081
Myanmar

Email: contact@thymesinternational.com

Website: www.thymesinternational.com