Privacy and Cookies

How UCL EdTech Labs collects, uses, and protects your personal information.

Privacy Policy

Information We Collect

We collect information you provide directly to us, such as when you:

• Submit an application or register interest in our programs
• Contact us via email or other communication methods
• Participate in our programs or events
• Subscribe to our newsletter or updates

Types of Information

• Personal Information: Name, email address, phone number
• Professional Information: Company details, role, experience
• Application Data: Responses to application questions
• Usage Data: How you interact with our website

How We Use Your Information

• Process and evaluate program applications
• Communicate about programs, events, and opportunities
• Provide customer support and respond to inquiries
• Improve our services and user experience
• Comply with legal obligations

Legal Basis for Processing

We process your personal data based on:

• Consent: When you provide explicit consent
• Contract: To perform our contractual obligations
• Legitimate Interest: For program administration and improvement
• Legal Obligation: To comply with applicable laws

Information Sharing

We do not sell, trade, or rent your personal information. We may share information with:

• UCL departments and affiliated organizations
• Program partners and sponsors (with consent)
• Service providers who assist with our operations
• Legal authorities when required by law

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate information
• Erase your data (right to be forgotten)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent

Cookie Policy

What Are Cookies

Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience and understand how our site is used.

Cookies We Use

We use two kinds of cookie, and only two. We do not use advertising or cross-site tracking cookies, and we do not sell or share data with advertisers.

• Essential. A single session cookie (connect.sid) is set only when a member of staff signs in to the administrative area. It keeps that person signed in, expires after 7 days, and is never set by ordinary browsing of this site. Essential cookies do not require consent.
• Analytics. Google Analytics 4, loaded through Google Tag Manager, sets _ga and _ga_<container ID>. They count visits and show us which pages are used, so we can improve them. Both expire after two years. These are set only if you accept them.

Your Choice

On your first visit we ask whether you accept analytics cookies. Rejecting takes exactly one click, the same as accepting. If you reject, or if you simply close the page without answering, Google Tag Manager is never loaded and no analytics cookie is set.

Your answer is remembered in your browser's local storage, not in a cookie. You can change it at any time using the Cookie settings link in the footer of every page; choosing to reject also deletes any analytics cookies already set. You can additionally control or clear cookies through your browser settings.

Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy or as required by law. Application data is typically retained for 7 years.

Contact Information

For privacy-related questions or to exercise your rights, contact:

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page.

Last updated: September 7, 2026