Privacy Policy
Last Updated: 1 October 2026
Maison Elham (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect information when you visit our website, contact us or use our UK immigration, admissions, recruitment, housing and related services.
By using our website or providing your information to us, you acknowledge the practices described in this Privacy Policy.
1. Information We Collect
Depending on how you interact with Maison Elham, we may collect the following information:
Personal Information
This may include:
- Full name
- Date of birth
- Nationality
- Contact telephone number
- Email address
- Residential or correspondence address
- Passport or identity document details where required
- Academic qualifications and educational history
- Employment and professional information
- Immigration and visa information
- Information relating to dependants or family members
- Other information you voluntarily provide during a consultation or application
Website Information
When you use our website, we may automatically collect certain technical information, including:
- IP address
- Browser type and version
- Device information
- Operating system
- Pages visited
- Referring website
- Date and time of website visits
- Website usage and interaction information
This information may be collected through cookies, analytics tools and similar technologies.
2. How We Use Your Information
We may use your information to:
- Respond to enquiries and consultation requests
- Provide immigration and visa guidance
- Assist with university and student admissions
- Support recruitment and related services
- Assist with UK housing placement
- Review documents provided for our services
- Communicate with you about your case or enquiry
- Provide updates regarding our services
- Process and manage client relationships
- Improve our website and services
- Maintain internal records
- Meet applicable legal, regulatory and compliance obligations
- Protect our website, business and clients from fraud or misuse
We will only use your information where we have an appropriate legal basis to do so.
3. Legal Basis for Processing
Where UK data protection law applies, we may process your personal information on the basis of:
- Your consent
- Performance of a contract or steps taken at your request before entering into a contract
- Compliance with a legal obligation
- Our legitimate interests, where those interests are not overridden by your rights
- Other lawful grounds permitted under applicable data protection legislation
Where we rely on consent, you may withdraw your consent at any time.
4. Sensitive and Special Category Information
Immigration and admissions services may sometimes require information that is considered sensitive or special category data under applicable data protection laws.
Where such information is required, we will only collect and process it where there is an appropriate lawful basis and, where required, an additional condition under applicable data protection legislation.
You should only provide information that is relevant and necessary for the service you are requesting.
5. How We Share Your Information
We do not sell your personal information.
Where necessary to provide our services, we may share relevant information with appropriate third parties, which may include:
- UK universities and educational institutions
- Immigration and visa related service providers
- Relevant professional advisers
- Accommodation or housing providers
- Recruitment partners
- Translation or document service providers
- Technology and hosting providers
- Payment service providers
- Government authorities or regulatory bodies where legally required
We only aim to share information that is reasonably necessary for the relevant purpose.
6. International Transfers
Some of our service providers or partners may operate outside the United Kingdom or your country of residence. Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is handled in accordance with applicable data protection requirements.
7. How We Protect Your Information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse, alteration or disclosure.
However, no method of transmitting or storing information online can be guaranteed to be completely secure. You should therefore avoid sending unnecessary sensitive information through unsecured communication channels.
8. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to:
- Provide requested services
- Maintain appropriate business records
- Resolve disputes
- Meet contractual requirements
- Comply with legal, regulatory and accounting obligations
- Establish, exercise or defend legal claims
Retention periods may vary depending on the type of information and the nature of the service provided.
9. Cookies
Our website may use cookies and similar technologies to improve functionality, understand website usage and provide a better user experience.
Cookies may be used for purposes such as:
- Website functionality
- Security
- Analytics
- Performance monitoring
- Remembering preferences
- Marketing, where applicable
You can control or disable cookies through your browser settings. Some website functionality may not operate correctly if certain cookies are disabled.
10. Third Party Websites
Our website may contain links to third party websites, including universities, government websites, payment providers and other service providers.
We are not responsible for the privacy practices, content or security of third party websites. We recommend reviewing the privacy policy of any external website before providing personal information.
11. Your Data Protection Rights
Depending on your location and applicable law, you may have rights relating to your personal information, including the right to:
- Request access to your personal information
- Request correction of inaccurate information
- Request deletion of certain information
- Request restriction of processing
- Object to certain types of processing
- Request transfer of your information where applicable
- Withdraw consent where processing is based on consent
- Make a complaint to the relevant data protection authority
Some rights are subject to legal exceptions and may not apply in every situation.
12. Marketing Communications
Where permitted by law, we may contact you about services, updates or information that may be relevant to your enquiry.
You can opt out of marketing communications at any time by contacting us or using the unsubscribe option included in the relevant communication.
13. Children’s Privacy
Our services are primarily intended for adults, students and other individuals who are legally able to use the relevant services.
Where information relating to a minor is required for an application or service, it should normally be provided by a parent, guardian or another person with appropriate authority.
14. Data Breaches
If we become aware of a personal data breach that requires notification under applicable law, we will take appropriate steps to investigate, contain and address the breach and make any legally required notifications.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, legal requirements, technology or data processing practices.
The updated version will be published on this page with a revised “Last Updated” date.
16. Contact Us
If you have questions about this Privacy Policy, would like to exercise your data protection rights or have concerns about how your information is handled, please contact us.
Maison Elham
London Office: Mayfair, Berkeley Square, W1J 6BD London, United Kingdom
Dubai Desk: Boulevard Plaza Tower 1, Downtown Dubai United Arab Emirates
Email: info@maisonelham.co.uk
UK VIP Line: +44 20 7946 0912
Dubai Desk: +971 4 800 ELHAM
We will review and respond to privacy related requests in accordance with applicable data protection requirements.