-
Destination ▾
TOP INSTITUTIONS IN
Last updated: 01 October 2026
Version: 1.0
About This Policy
Key Terms
Information We Collect
Sensitive Information
How We Collect Information
Why We Use Your Information
Who Receives Your Information
Service Providers, Sub-Agents and Partners
Institutional Documents and Correspondence
Internal Data Access Governance
Payment Processing and Third-Party Gateways
Marketing and Personalised Content
Cookies and Tracking Technologies
App Permissions
Calls, Messages, Meetings, and Communication Records
International Data Transfers
Data Retention
Deletion and Removal Requests
Data Security and Technical Safeguards
Security Incident Management and Breach Notification
Your Rights and Choices
Consent and Legal Basis
Protection of Minors and Dependent Accounts
Third-Party Information Submissions
Links to External Websites and Third-Party Services
Changes to This Policy
Legal Contact Details and Inquiries
1.1 Corporate Identity and Overview
LEC Abroad Limited ("LEC Abroad", "we", "us", "our") is an education consultancy company registered in Bangladesh. We provide comprehensive study-abroad advisory and application facilitation services to students seeking higher education at overseas institutions. Our services include admission counselling, university and course selection, application processing, scholarship guidance, training and credibility-interview preparation, and pre-departure briefing and assistance. We may also provide English-language and test-preparation training.
1.2 Registered Corporate Address
Haji Hossain Plaza (Level-02), Staff Quarter, Demra, Dhaka-1360, Bangladesh.
1.3 Scope and Applicability
This Privacy Policy applies to personal information collected, processed, stored, or shared when you interact with us through any of the following channels:
Visiting or interacting with our official website (www.lecabroad.com)
Downloading or using our mobile application on iOS or Android devices
Registering, accessing, or managing a user profile, or having an account created on your behalf by an authorised representative
Communicating with our team via telephone, SMS, email, WhatsApp, live chat, virtual video meetings, or in-person consultations
Engaging with our authorised sub-agents, regional branch offices, or channel partners regarding study-abroad applications
Attending education fairs, webinars, university seminars, or promotional events organised by us
Using any counselling, training, assessment, or application support service we offer
1.4 Exclusions and Third-Party Scope
This policy does not apply to the independent data handling practices of third-party organisations, including foreign universities, educational institutions, government embassies, visa application centres, or third-party payment platforms. Their data processing activities are governed exclusively by their respective privacy notices, as outlined in Sections 7, 11, and 25.
1.5 Legal Basis, Consent, and Mandatory Data Requirements
By registering an account, uploading application documents, or using our counselling services, you acknowledge and consent to the handling of your personal data as set out in this policy (see Section 22). Providing core personal information—including identity details, contact records, and academic background—is a mandatory requirement for us to evaluate, process, and submit your university applications. If you choose to withhold required core information, we may be unable to provide counselling or application support services.
To ensure clarity throughout this Privacy Policy, the following terms carry specific meanings:
Personal Information: Any information relating to an identified or identifiable natural person, including name, contact details, passport credentials, financial records, or academic transcripts
Sensitive Information: High-risk personal data categories requiring heightened safeguard standards
Processing: Any operational activity performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, retrieval, consultation, disclosure, transmission, restriction, or destruction
Data Fiduciary (or Data Controller): The entity determining the purposes and means of processing personal data (LEC Abroad)
Service Providers: Third-party commercial vendors providing essential technical, hosting, communication, software, or payment infrastructure under contractual obligations
Sub-Agents and Channel Partners: Independent education counsellors, agencies, or organisations assisting student applicants locally and forwarding data to us under authorised agency agreements
Recipients: External institutions, foreign universities, government agencies, embassies, or evaluation bodies receiving personal data to fulfil study-abroad applications
Your Application: Any academic admission, scholarship facilitation, visa guidance, credibility interview preparation, or language training service requested through our platform
We collect only personal information reasonably necessary to provide our services and operate our business. Not every individual provides every category of information, and details may be submitted directly by you or by an authorised sub-agent or partner assisting with your application.
3.1 Account Information
Registration details provided when setting up a profile, including full name, primary email address, mobile phone number, date of birth, and account credentials (stored in protected form).
3.2 Identity and Civil Records
Government-issued identification documents and associated details, including passport credentials, national identification records, citizenship details, full name, gender, nationality, country and city of residence, photographs, and signatures.
3.3 Academic Records and Qualifications
Official educational transcripts, marksheets, academic certificates, diploma records, and institutional qualification documents required by target universities or evaluation bodies.
3.4 Language Proficiency and Standardised Test Records
Standardised examination records, test report forms (TRFs), scores, candidate numbers, and verification credentials (e.g., IELTS, TOEFL, PTE, GRE, SAT, or GMAT results).
3.5 Application Dossier Materials
Written application documents, statements of purpose (SOPs), personal essays, curriculum vitae (CV), letters of recommendation (LORs), employment histories, and professional reference details.
3.6 Institutional Communications and Admission Status
University correspondence, conditional and unconditional offer letters, Confirmation of Acceptance for Studies (CAS), course enrolment confirmations, and any other application status updates.
3.7 Financial Verification and Visa Documentation
Financial verification documents, financial guarantee letters, proof-of-funds records, sponsorship documentation, bank statements, income tax records, visa documentation, visa application copies, and credibility interview materials required for admission or visa processing.
3.8 Family, Guardian, Sponsor, and Referee Data
The names, relationship, contact details, occupation, and identity documents of parents, guardians, or sponsors, and the name and contact details of referees, where an application or visa process requires them.
3.9 Supplementary Documentation
Any other document or information needed to process your application.
3.10 Communication Logs and Engagement Records
Written and electronic communication records across all channels—including emails, SMS, messaging platforms, live chats, consultation notes, and meeting records (see Section 15).
3.11 Financial Transaction Data
Where payment features are active: transaction history, amount, date, payment method, reference number, and account holder name. We do not store complete credit or debit card credentials on our servers without consent (see Section 11).
3.12 Technical Information
Technical and system data collected during visits, including IP address, device type, operating system, browser configuration, application version, access log data, and unique device or session identifiers.
3.13 Engagement Preferences and Event Attendance
Preferences and engagement records, including preferred study destinations, course interests, communication choices, registration and attendance history for events or seminars, promotional media captured at events (processed with explicit consent), and training progress or results if enrolled in our preparation courses.
3.14 Health and Medical Clearance Records
Medical clearance certificates, health insurance files, or vaccination records explicitly required by foreign universities, immigration authorities, or visa processing bodies. Submitting or uploading health documents constitutes explicit consent for us to process and share them for your application and visa processing.
4.1 Categories of Sensitive Information
We treat high-risk personal data categories with heightened protection and confidentiality, including:
Passport copies, national identity card (NID) credentials, and government registration numbers
Financial guarantee letters, proof-of-funds documentation, bank statements, tax records, and payment credentials
Visa documentation, embassy correspondence, and immigration assessment records
Personal, financial, and contact records belonging to parents, legal guardians, or financial sponsors
Facial photographs, digital signature samples, and biometric identifiers
Health clearance records, medical history, or vaccination certificates (where required by destination countries or universities)
Any additional data category defined as sensitive or special category data under applicable law
4.2 Processing Grounds and Explicit Consent
We collect and process sensitive information strictly when necessary to fulfil your requested services, evaluate applications, comply with embassy or institutional requirements, or satisfy legal obligations. Submitting or uploading sensitive information constitutes explicit consent for us to collect, store, and process that information as described in this policy (see Section 22).
4.3 Access Controls and Data Segregation
Access to sensitive information is restricted on a need-to-know basis. Only authorised personnel, partner institutions, or verified service providers directly involved in processing your application or supporting your visa workflow are granted access (see Sections 7 and 10).
4.4 Discretionary and Mandatory Submissions
We do not request sensitive information unless it is directly required for your application or chosen service. While providing optional details is at your discretion, withholding mandatory sensitive documents may prevent us from completing specific stages of your application, admission, or visa processing.
5.1 Direct Collection Channels
We collect information directly from you when you:
Register an account, complete profile forms, or submit digital inquiries
Upload documents through our website or mobile application
Communicate with our education counsellors via in-person meetings, telephone, email, live chat, video conferences, WhatsApp, or SMS
Register for or attend education fairs, university seminars, webinars, or spot-assessment sessions
Execute fee payments or complete service purchases through our platform, where available
Respond to customer feedback requests, surveys, or service evaluations
5.2 Indirect Collection from Third Parties
Where necessary for your application, we may collect information from:
Authorised sub-agents, local channel partners, or educational representatives who gather your records locally and transfer them to us
Universities, colleges, and educational institutions to which you apply, regarding offer letters, enrolment status, or institutional requests
Standardised testing authorities and verification bodies to confirm test report authenticity
Commercial service providers, background verification services, or financial institutions assisting with your application workflow
Our other partners and service providers involved in your application
5.3 Automated Technical Collection
When you navigate our website or mobile application, technical diagnostic information, device data, and usage metrics are collected automatically using cookies, server access logs, and web analytics tools (see Section 13).
5.4 Collection from Authorised Representatives
If you authorise a parent, legal guardian, family member, or other representative to manage your application or communicate with us on your behalf, we may collect personal information directly from them under your authorisation.
We process your personal information strictly for the specific operational, administrative, and legal purposes outlined below, or for compatible purposes that align with your reasonable expectations. Our lawful bases for processing your data include: fulfilling our contractual obligations to provide requested education consultancy services; complying with statutory and legal duties; serving our legitimate business interests in operating and securing our platforms; and relying on your explicit consent where required by law.
6.1 Service Delivery and Application Management
Creating and managing your account, using your account and contact information
Confirming your identity and eligibility, using your identity and academic information
Assessing your profile and suggesting suitable universities, courses and scholarships, using your academic, English-test, preference and application information
Preparing, reviewing and submitting your applications, using your identity, academic, English-test, application, family and additional documents
Providing scholarship guidance, using your academic, financial and application information
Providing visa-related support and credibility-interview preparation, using your identity, financial, application, visa and family information
Providing pre-departure briefing and assistance, using your account, contact and application information
Providing English and test-preparation training, if you enrol, using your account, contact and training information
Keeping copies of university offers, letters and correspondence in your profile for your future use, using your application and university records
6.2 Client Communication
Contacting you regarding application updates, deadlines, and administrative notices
Responding to your questions, support requests, or complaints
6.3 Payment Processing
Processing service payments, issuing receipts, and keeping financial records where payment features are enabled
6.4 Marketing and In-App Personalisation
Sending promotional offers, course updates, and event invitations, only if you have opted in (see Section 12)
Displaying relevant universities, courses, and scholarships within our website and app based on your profile preferences
6.5 System Operations, Security, and Quality
Securing our network systems, maintaining data privacy, and preventing fraud or misuse
Fixing technical bugs, testing app performance, and improving service quality
6.6 Legal, Regulatory, and Dispute Management
Maintaining mandatory business, tax, and administrative records
Complying with applicable laws, court orders, or lawful government and embassy requests
Enforcing our Terms of Service and resolving disputes
7.1 Principle
We share your personal information on a need-to-know basis to fulfil your application requests, deliver advisory services, or comply with legal requirements.
7.2 Specific Sharing
Where necessary to process your requested application or related services:
Application information and supporting documents may be shared with the university or institution you apply to, where necessary to assess your eligibility, process your admission, communicate with you about your application, or meet admission requirements. This may include your passport and NID information, academic certificates and marksheets, English-test results, CV, personal statement, references, experience letters and other documents submitted as part of your application
Relevant application information and supporting documents may be shared with an authorised education partner or sub-agent where necessary to assist with your application or provide related services. The application status and progress may also be shared with the sub-agent or partner who referred you
Your English-test results may be shared with the relevant test provider where necessary to verify the results or other information relating to your test
Relevant personal and application information may be shared with our visa application support provider where necessary to support your visa application and related services. This may include passport and NID information, financial guarantee letters, proof-of-funds documents, visa copies and other visa-related documents
Financial guarantee letters, proof-of-funds documents, visa copies and other information or documents may be shared with the relevant embassy, immigration authority or visa authority where required for your visa or immigration process
Information relating to your parents, guardians, sponsors or referees may be shared with a university, institution, embassy or visa authority where required for your application or related process
Payment information may be shared with the payment provider you use, only as needed to complete your payment (see Section 11)
Your contact details and relevant information may be shared with providers of messaging, email, live-chat, video-meeting and other communication or technology services where necessary to contact you and provide our services
Your information may be accessed or processed by our office(s) or internal team(s), including those located outside your country of residence, where necessary to provide our services and process your application
Offer letters and correspondence received from universities or institutions may be accessed by our staff working on your application and provided to you as part of our services
7.3 Other Disclosures
We may also disclose information:
To courts, government bodies, regulatory authorities, or law enforcement where required by law
To protect the legal rights, safety, property, or operational security of LEC Abroad, our clients, or the public
To professional advisers, lawyers, auditors, and insurers, where reasonably necessary
To a buyer or successor in the event that LEC Abroad Limited undergoes a merger, acquisition, or corporate restructuring, provided the receiving party agrees to uphold data protection standards consistent with this policy
7.4 With Your Consent
We will share your information with third parties outside the scope of this policy only with your explicit consent, unless required by law.
7.5 Recipients Abroad
Because our core services involve placing students in overseas institutions, your personal information will necessarily be transferred across international borders. Foreign recipients (such as international universities, foreign embassies, and credential verifiers) process your data in accordance with their respective national laws and privacy policies as independent data controllers.
8.1 Technology and Service Providers
We engage trusted technology vendors and service providers to support our platform infrastructure—including cloud hosting, messaging platforms, email distribution, live chat, video conferencing, and system development. Authorised technical personnel and system maintainers access operational data to build, host, secure, and maintain our digital services.
8.2 Operational Limits and Safeguards
Service providers and technology partners are granted access to personal information on a need-to-know basis to perform designated operational functions. We require all technical vendors and software partners to adhere to standard confidentiality obligations and implement appropriate technical and organisational security controls.
8.3 Independent Platform Providers
Certain external platform providers—such as payment processors, messaging networks, and video conferencing tools—operate as independent data controllers under their own terms and privacy policies once you interact with their services directly.
8.4 Education Partners and Visa Specialists
Authorised education partners, institutional representatives, and visa application support providers receive personal information as required to process admissions, evaluate qualifications, and assist with student visa applications.
8.5 Sub-Agents and Referral Partners
Where an application is initiated through an authorised sub-agent or channel partner who collects and transfers personal documents to us:
Transferred information is integrated into your application file and managed strictly under this policy
The referring partner may receive application status and progress updates as described in Section 7.2
Referring partners are contractually obligated to obtain your authorisation before collecting and transmitting your personal documents to us
8.6 Independent Practices of Sub-Agents
Referring sub-agents and channel partners operate as independent entities and maintain their own record-keeping practices. While our agreements contractually require partners to maintain strict confidentiality and use student data solely for your application, LEC Abroad is not responsible for personal information managed by third-party agents outside our direct systems.
9.1 Delivery of Official Documentation
When a target university, college, or educational institution issues an offer letter, acceptance confirmation, document request, or official decision regarding your application, we promptly transmit or make it accessible to you.
9.2 Digital Archival and Account Access
We retain a copy of official admissions correspondence within your secure account profile to support subsequent processing stages, visa applications, institutional enrolment, or future academic reference.
9.3 Restricted Access
Access to official university correspondence is restricted to assigned counselling staff, authorised institutional representatives, and relevant personnel directly involved in managing your file.
9.4 Retention Standard
Institutional records and correspondence are stored and maintained in accordance with the general retention standards set out in Section 17.
10.1 Access Control Principle
Access to personal information within LEC Abroad Limited is restricted to authorised employees, counsellors, and operational personnel who require such access to process applications, provide student support services, or perform system administration.
10.2 Role-Based Security Controls
System permissions are managed through Role-Based Access Controls (RBAC), ensuring personnel only view records necessary for their specific role. All employees and contracted staff are bound by strict non-disclosure and confidentiality obligations within their employment or engagement agreements.
10.3 Personal or Unauthorised Use
Personnel are strictly prohibited from using, copying, or exporting student data for personal, non-operational, or unapproved commercial purposes. Any unauthorised access or misuse of student records constitutes a violation of company policy and is subject to disciplinary and legal action.
11.1 Independent Payment Gateway Providers
Where online payment options are provided, transactions are processed directly by third-party payment gateway service providers. These payment processors operate as independent data controllers and process financial information under their respective terms of service and privacy policies.
11.2 Transaction Data Sharing
We transmit only the minimum transaction identifiers and metadata necessary to complete your transaction, verify payment status, and maintain compliant accounting and financial records.
11.3 Minors and Guardian Authorisation
Users under the age of 18 are not permitted to initiate financial transactions independently. Any fee payments or financial processing associated with a minor student's application require the express authorisation and consent of a parent or verified legal guardian (in accordance with Section 23). LEC Abroad Limited reserves the right to restrict transaction features or require proof of guardian authorisation prior to processing fees on behalf of minors.
12.1 Express Consent Requirement
We send promotional messages, event invitations, scholarship alerts, and marketing offers only if you have provided express consent. During registration or account setup, marketing consent requires you to tick a separate, unticked box. We do not use pre-ticked boxes or implied consent for marketing communications.
12.2 Permitted Direct Channels
Where you have provided consent, we may deliver marketing communications through electronic direct channels, including email, short message service (SMS), instant messaging platforms (such as WhatsApp), mobile application push notifications, or telephone calls.
12.3 Withdrawal of Marketing Consent
You can opt out of marketing at any time by emailing info@lecabroad.com or by asking us to stop when we contact you. We will act on your request within a reasonable time.
12.4 Essential Operational and Transactional Messages
Withdrawing consent for marketing communications does not affect essential operational, service, or transactional notifications. You will continue to receive critical updates, including application status, deadline alerts, account security notices, billing confirmations, and legal policy updates.
12.5 Targeted Advertising
Where permitted by your cookie preferences or explicit consent, we may use privacy-compliant advertising tools to present relevant educational opportunities on third-party digital platforms. You can opt out of targeted advertising through the advertising preference settings of the relevant platform, or by contacting us at info@lecabroad.com.
12.6 Internal Personalisation and Course Matching
To enhance your user experience, our systems analyse profile details, academic background, and stored preferences to present relevant course recommendations, matching scholarship opportunities, and university search results within the LEC Abroad portal. This internal personalisation does not constitute third-party marketing and does not involve transferring data to external advertisers.
12.7 Testimonials, Success Stories, and Media Consent
We publish student feedback, video testimonials, application success stories, or photos from student events for promotional purposes exclusively with your prior written or digital consent. You retain the right to withdraw consent for future promotional usage by notifying us in writing.
13.1 Technical and Essential Identifiers
Our website and mobile applications may utilize basic cookies, local storage, or session tokens strictly necessary for system performance, security, and maintaining user login sessions.
13.2 Non-Essential and Third-Party Tools
We do not intentionally deploy non-essential analytics or advertising cookies without user notice. If third-party tools (such as analytics, payment gateways, or embedded media) are integrated into our services, they may deploy functional identifiers subject to their respective policies.
13.3 User Choice
You can manage, block, or delete cookies at any time through your browser or device settings. Please note that if you disable essential cookies, certain features of our platform may not function properly.
14.1 Requested Device Permissions
Our mobile application may request access to specific device features to enable core functionality:
Camera and photo or file access, to let you capture or upload identity documents, profile photos, or supporting files
Push notifications to deliver system alerts, account updates, and transactional messages
Location services to verify your service area, complete location-based features, or prevent fraudulent activity
Transmitting records to foreign universities, educational institutions, embassies, visa support centres, or language test providers strictly as requested to process your application
Hosting data on secure cloud servers, content delivery networks, or software platforms operated by international service providers
Processing files through our overseas branch offices, regional administrative hubs, or local channel partners operating in your geographic region
14.2 Choice and On-Demand Activation
App permissions are optional and remain disabled by default until you explicitly grant permission. You can enable, modify, or revoke these permissions at any time through your operating system settings.
14.3 Effect of Denying or Revoking Access
If you decline or disable a permission, core application navigation remains fully available. However, specific dependent features may be limited or unavailable. Where possible, alternative workflow options will be provided.
14.4 Purpose Limitation
We use permissions only for the purposes disclosed when we ask for them. We do not access, scan, or background-track your device features outside of active application usage.
15.1 Channels and Record Maintenance
We communicate with you across various channels, including telephone calls, SMS, email, instant messaging platforms, live website chat, and online or in-person counselling sessions. We may retain communication logs, message histories, and internal staff notes to deliver and document our services.
15.2 Recording Protocols and Consent
We do not record telephone calls or virtual meetings as a standard practice. If a specific call or meeting is to be recorded for quality, training, or documentation purposes, you will be notified prior to recording and, where required by law, your explicit consent will be requested.
15.3 Permitted Uses of Communication Records
Communication records and interaction notes are processed strictly to support application management, maintain quality assurance and staff training, resolve operational inquiries or disputes, and satisfy statutory record-keeping obligations.
16.1 Cross-Border Processing Scenarios
Your personal information may be transferred to, stored in, or processed in locations outside Bangladesh under the following circumstances:
16.2 Legal Safeguards and Transfer Controls
When transferring personal data outside Bangladesh, LEC Abroad implements appropriate technical, organisational, and contractual safeguards required under applicable data protection laws. We take reasonable steps to ensure that external recipients and international service providers maintain standards of data protection and confidentiality comparable to those enforced within Bangladesh.
16.3 Consent to International Transfer
By submitting your information and requesting application or visa support services that inherently involve foreign institutions, you explicitly authorise the cross-border transmission and processing of your personal records as detailed in this policy.
17.1 Purpose of Record Retention
We retain student records after an active case closes because they may be required to:
Provide services you have requested, or may reasonably request in future, including re-use of your documents and offer letters
Respond to verification, reference or follow-up requests from universities, authorities or others concerned with your application
Comply with statutory tax, legal, and financial record-keeping obligations
Resolve administrative disputes, defend legal claims, or prove contractual compliance
17.2 Retention Period and Limits
Personal records are retained for as long as necessary to fulfil the purposes set out in Section 17.1, or until a valid deletion request is submitted and approved under Section 18. In accordance with applicable data protection laws, processing logs and core records are maintained for a minimum statutory period of 10 years following the conclusion of your application or service contract.
17.3 Periodic Review of Records
Inactive files are periodically reviewed, and data that is no longer required for legal, verification, or operational purposes is either securely deleted or permanently anonymised.
17.4 Protection During Storage
While personal records remain in our custody, we enforce strict access controls and security measures to prevent unauthorised access, alteration, or exposure.
17.5 Mandatory Legal Retention
Certain categories of information may be retained beyond standard operational timelines where required by statutory law, court order, regulatory direction, or active dispute resolution.
17.6 Marketing and Preference Records
Communication preferences and opt-out requests are retained indefinitely to ensure your choices regarding marketing communications are respected.
18.1 Portal Self-Service Controls
Through your online account portal, you may view uploaded application materials, submit new files, or initiate requests to delete specific documents or close your account.
18.2 Administrative Review and Response Timelines
Deletion and account closure requests submitted through the platform or via written contact are routed to our administrative team for review. We evaluate each request in accordance with applicable legal requirements and will respond within 30 calendar days of receipt.
18.3 Legitimate Grounds for Refusal or Delay
We may decline or defer a deletion or removal request, in whole or in part, where retaining the data is necessary for:
Statutory legal, tax, or regulatory compliance duties
Fulfilling an ongoing service, active university application, or pending financial transaction
Resolving outstanding disputes, enforcing agreements, or defending legal claims
Preventing fraud, identity theft, or platform abuse
Protecting vital interests, public safety, or system integrity
Encrypted data transmission using HTTPS protocols
Password-protected access controls and authentication mechanisms
Role-Based Access Controls ensuring staff access data only on a need-to-know basis
Secure hosting environments with managed firewall protection
Automated system backups and regular platform software updates
Secure storage and confidential disposal protocols for physical, paper-based documents
Where a request cannot be fulfilled or is partially declined, we will notify you of the specific grounds for the decision.
18.4 Post-Approval Deletion Protocols
Upon approval of a deletion request, your personal data will be securely destroyed or permanently anonymised. System backup archives will be purged or overwritten in the ordinary course of our automated backup lifecycle.
18.5 Data Disclosed to External Third Parties
Information transmitted to foreign universities, government agencies, embassies, or test administrators prior to your deletion request is managed under those external entities' respective privacy policies. We do not have administrative authority over third-party databases and recommend contacting those institutions directly.
19.1 Technical and Organisational Measures
We implement appropriate technical and organisational safeguards to protect your personal data against accidental loss, unauthorised access, misuse, alteration, or unlawful disclosure. These security controls include:
19.2 Staff Confidentiality Obligations
All staff members, counsellors, and administrative personnel are bound by strict contractual confidentiality agreements and are trained on secure data handling procedures.
19.3 Service Provider Standards
External IT vendors, cloud infrastructure providers, and software service partners are subjected to security evaluations and are contractually obligated to maintain data security standards comparable to our own.
19.4 Operational Disclaimer and User Security Responsibilities
While we enforce industry-standard security protocols, no method of digital transmission or electronic storage is entirely secure. We cannot guarantee absolute platform security. You are responsible for maintaining the confidentiality of your account credentials, passwords, and device access controls.
20.1 Emergency Containment and Response
In the event of a confirmed or suspected security incident involving unauthorised access, data exposure, or system compromise, our technical team will immediately implement emergency containment and mitigation protocols.
20.2 Regulatory and Individual Breach Notifications
Where a data breach poses a significant risk to your rights, freedoms, or financial security, we will notify you and the relevant supervisory authority without undue delay, and within 72 hours of verification where required by applicable law. Notifications will detail the nature of the breach, potential impact, and steps taken to mitigate harm.
21.1 Statutory Data Subject Rights
Subject to statutory conditions under applicable data protection law, you have the right to request that we:
Confirm whether we process your personal data and provide access to or a copy of your records
Correct, update, or complete inaccurate or incomplete personal information
Restrict or suspend processing or request permanent deletion of your data (as detailed in Section 18)
Stop marketing messages and opt out of online targeted advertising (as detailed in Section 12)
Withdraw previously granted consent at any time (see Section 22)
Provide clear explanations regarding our data handling and third-party disclosure practices
21.2 Submission and Identity Verification
You may exercise your rights by emailing info@lecabroad.com or through your portal settings. To protect your privacy, we may request proof of identity before fulfilling your request. Valid requests will be responded to within 30 calendar days of receipt.
21.3 Exemptions and Refusal Grounds
Data rights are not absolute and may be limited where fulfilling a request would infringe upon another individual's privacy, breach legal or contractual duties, compromise security, or involve manifestly unfounded or excessive demands. If we refuse a request, we will state the specific grounds in writing.
21.4 Administrative Costs
Requests under this section are fulfilled free of charge. However, where a request is demonstrably repetitive or excessive, or requires complex technical retrieval, we reserve the right to charge a reasonable administrative fee or decline to act.
22.1 Execution of Consent
By registering an account, submitting application materials, uploading documents, or using our services, you acknowledge and consent to the collection, processing, and transfer of your personal data as described in this Privacy Policy. Where an authorised parent, guardian, sub-agent, or representative submits information on your behalf, such submission constitutes consent provided under your explicit authorisation.
22.2 Processing Uploaded Materials
Documents uploaded to our platform are processed, stored, and shared strictly to fulfil requested education, admission, or visa services in accordance with this policy. Responsibilities regarding document accuracy, legality, and third-party intellectual property are governed by our Terms of Service.
22.3 Mechanism and Effects of Consent Revocation
You maintain the right to withdraw your consent at any time by contacting info@lecabroad.com or managing your profile preferences. Revocation of consent does not invalidate lawful processing conducted prior to the request. Withdrawing consent for core processing activities may render us unable to continue processing your university application or providing counselling services.
22.4 Independent Statutory Grounds
In specific circumstances, personal data may be processed or retained notwithstanding the withdrawal of consent where required by statutory law, court orders, contractual necessity, legitimate audit requirements, or active dispute resolution.
23.1 Minor Account Creation
Users under 18 years of age may register and maintain an account on our platform, provided processing occurs with the knowledge and authorisation of a parent or legal guardian.
23.2 Parental and Guardian Authorisation
Where account registration details reflect that a user is under 18 years of age, the account is processed on the basis that a parent or legal guardian has authorised its creation and agreed to this Privacy Policy. Any individual or third-party representative (including sub-agents or education counsellors) submitting data on behalf of a minor expressly warrants that valid parental consent has been obtained and documented.
23.3 Guardian Information and Direct Contact
We reserve the right to request contact details for a minor's parent or legal guardian. We may contact guardians directly to confirm authorisation, process application milestones, or handle financial transactions.
23.4 Financial Transactions Involving Minors
Users under 18 are not permitted to execute financial payments independently. All fee payments, service purchases, and tuition transfers require the explicit approval and authorisation of an adult parent or legal guardian, as set out in Section 11.3.
23.5 Parental Inspection and Control Rights
A verified parent or legal guardian may review, update, correct, or request the deletion of their minor child's personal data by contacting info@lecabroad.com.
23.6 Remediation of Unauthorised Minor Records
If we discover that personal data of a minor was collected without verifiable parental authorisation, we will take necessary steps to suspend account access, request guardian verification, or purge the unauthorised records from our active systems.
24.1 Representations and Warranties
If you provide personal information belonging to another individual (such as a parent, legal guardian, financial sponsor, emergency contact, or academic referee), you warrant that you have obtained their explicit permission to share their data with us for the processing purposes set out in this Privacy Policy.
24.2 Primary Channel of Communication
Our primary communications are conducted directly with the account holder or authorised student applicant. Where a student application is submitted through a sub-agent or partner organisation, we may communicate directly with that representative regarding the application. We do not independently initiate contact with other named third parties unless required for application processing (such as verifying financial sponsorship or referee credentials), responding to direct inquiries from the third party, or complying with legal obligations.
24.3 Disputes Regarding Unauthorised Submission
If a third party notifies us that their personal information was submitted without their knowledge or authorisation, we will verify the claim, restrict access to or remove the affected data, and request clarification from the account holder.
24.4 Terms of Service Alignment
Your legal duties, indemnification obligations, and warranties concerning data accuracy and third-party submissions are further detailed in our Terms of Service.
25.1 Independent Third-Party Terms
Our website, mobile applications, and digital platforms may contain links to external websites, web plug-ins, software tools, or third-party platforms, including but not limited to:
Secure payment gateways and banking partners
Teleconferencing and virtual meeting software
Educational testing authorities, embassies, and university application portals
Social media platforms and digital marketing networks
25.2 Disclaimer of Responsibility
External websites and services operate independently of LEC Abroad and are governed exclusively by their own privacy notices and terms of service. We do not exercise operational control over third-party processing and accept no responsibility or legal liability for their security practices or data compliance. We encourage you to review the privacy policy of any third-party website or platform you visit.
26.1 Periodic Revision
We reserve the right to review, modify, or update this Privacy Policy at any time to reflect changing operational practices, technical developments, or statutory legal obligations. The current version will always be accessible through our digital platforms, with its last updated date clearly displayed at the top of the policy.
26.2 Material Change Notifications
Where an update involves significant or material changes to how we collect, process, or share your personal data, we will provide advance notice through prominent platform alerts, push notifications, email communications, or SMS. Where required by applicable data protection laws, we will seek your affirmative re-consent prior to implementing new processing activities.
26.3 Acceptance Through Continued Use
Your continued access to or use of our website, mobile application, or counselling services following the publication or notification of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any modified terms, you must discontinue using our services and submit a request for account closure.
26.4 Record of Historical Versions
We maintain an archive of previous versions of this Privacy Policy for auditing, compliance, and evidentiary purposes, accessible upon written request.
27.1 Questions and Complaints
If you have questions, concerns, or complaints regarding this Privacy Policy, our data handling practices, or wish to exercise your statutory privacy rights under Section 21, you may contact us through the following channels:
LEC Abroad Limited
Bangladesh Registered Office
Haji Hossain Plaza (Level-02), Staff Quarter, Demra, Dhaka-1360, Bangladesh
27.2 Review and Response Timelines
We will acknowledge receipt of your inquiry or complaint within 7 business days and provide a formal substantive response or resolution within 30 calendar days. Where a request is exceptionally complex, we may extend this period by an additional 30 calendar days upon providing written notice explaining the delay.
27.3 Internal Resolution and Regulatory Escalation
You agree to submit any privacy concerns or disputes directly to LEC Abroad to allow us an opportunity to investigate and resolve the matter through our internal review procedures. If you remain unsatisfied following our final written decision, you may exercise your right to submit a regulatory complaint to the relevant data protection authority in Bangladesh or in your jurisdiction.
