UniLens

Privacy Policy

This page is available in English only.

Last updated: 1 July 2026

UniLens is operated by Blairgowrie HE Limited, registered in England and Wales (company number 17140253), registered office at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ.

This policy explains what personal data we collect, why we collect it, and what we do with it. We keep it short because we collect very little.

1. What we collect

DataWhenWhy
Email addressAccount signupLogin, account management, service emails
NameAccount signupPersonalisation, support
Payment detailsSubscription purchaseProcessed by Stripe. We never see or store your card number.
Page viewsBrowsing the siteNetlify server-side analytics. No cookies, no tracking scripts, no personal identifiers.

That is the complete list of what we collect about you as a visitor or account holder. Separately, agencies can enable an advisor activity log, described in section 8. We do not collect phone numbers, addresses, browsing history, device fingerprints, or location data.

2. What we do not do

  • We do not sell your data to anyone.
  • We do not share your data with advertisers.
  • We do not use tracking cookies or third-party analytics scripts.
  • We do not profile you or build behavioural models.
  • We do not send marketing emails unless you have opted in.

3. Who processes your data

ServicePurposeTheir privacy policy
MemberstackAuthentication and account managementmemberstack.com/privacy
StripePayment processingstripe.com/privacy
NetlifyHosting and server-side analyticsnetlify.com/privacy
TursoAdvisor activity log storage (EEA, Dublin)turso.tech/privacy-policy
HubSpotCustomer communicationlegal.hubspot.com/privacy-policy

4. Lawful basis (UK GDPR)

  • Contract: We process your email and name to provide the service you signed up for.
  • Legitimate interest: We use Netlify server-side analytics to understand how the platform is used. This data is aggregated and contains no personal identifiers.
  • Consent: If you opt in to marketing emails, we rely on your consent. You can unsubscribe at any time.

5. How long we keep your data

While your account is active, we keep your email and name. If you cancel and ask us to delete your account, we remove your personal data within 30 days. Stripe retains payment records as required by financial regulations.

6. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct any inaccurate data.
  • Delete your data (close your account).
  • Object to processing based on legitimate interest.
  • Export your data in a portable format.

To exercise any of these rights, email hello@unilens.co.uk. We will respond within 30 days.

7. Cookies

UniLens uses only essential cookies required for authentication (Memberstack session). We do not use advertising cookies, analytics cookies, or social media cookies. No cookie banner is needed because we only use strictly necessary cookies.

8. Advisor activity log and data residency

When an agency enables it, UniLens keeps an activity log of the briefs its advisors generate. This supports quality assurance and accreditation, for example with ICEF. The log records what the advisor did, not who the student was: the market, subject and options considered, the priorities weighed, and the advisor's own reference. Student names, the person a brief was prepared for, and any notes are never written to the log. A server-side allow-list removes them before anything is stored, so they cannot reach it.

The activity log is held in a dedicated database with a single primary in Dublin, Ireland, inside the EEA. As a UK data controller, our transfers to the EEA are permitted without additional safeguards under UK GDPR. Each entry is append-only and immutable once written, which keeps the log tamper-evident. An agency's entries are erased on request or when the agency leaves.

9. International transfers

Memberstack, Stripe, Netlify and HubSpot are US-based services. As a UK controller, our transfers to the US rely on the UK Extension to the EU-US Data Privacy Framework, known as the UK-US data bridge, where the provider is certified, and on standard contractual clauses otherwise, together with each provider's data processing agreement. The advisor activity log described in section 8 is held in the EEA and is not transferred to the US.

10. Children

UniLens is a professional tool for education advisors. It is not intended for use by anyone under 18.

11. Changes to this policy

If we change this policy, we will update the date at the top. For significant changes, we will email account holders.

12. Contact

Data controller: Blairgowrie HE Limited
Email: hello@unilens.co.uk
Address: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ

If you are not satisfied with our response, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Privacy Policy · Terms of Service

hello@unilens.co.uk

© 2026 Blairgowrie HE Advisory. All rights reserved.
Registered office: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ.
Blairgowrie HE Limited is registered in England & Wales, company number 17140253.