UK Data Protection Addendum
This is a version 1.0 draft prepared for review. It reflects our verified technical and data-protection practices but is pending final management and legal approval. Some sections contain items still under management or legal review and should not be relied upon as final policy.
This addendum addresses obligations under the UK GDPR and the Data Protection Act 2018 for individuals in the United Kingdom, in addition to the Global Privacy Notice.
Effective date: 31 August 2026 · Version v1.0
Scope
This addendum applies to individuals in the United Kingdom and supplements the Global Privacy Notice. Personal data of UK individuals is processed in accordance with the UK GDPR and the Data Protection Act 2018.
Roles and lawful bases
Controller and processor roles, lawful bases and data-subject rights mirror those set out in the GDPR Statement, read for the UK regime. The Information Commissioner’s Office (ICO) is the supervisory authority.
International transfers
Restricted transfers out of the UK rely on a UK adequacy regulation where one applies, or otherwise on the ICO International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs, together with a Transfer Risk Assessment. The current UK adequacy status for the Republic of Korea is [LEGAL REVIEW REQUIRED].
Representative
Whether EDUMOVIA is required to appoint a UK representative under Article 27 UK GDPR is a [LEGAL DETERMINATION REQUIRED] item and will be confirmed before publication.
Certain items marked [MANAGEMENT INPUT REQUIRED] in the text (supervisory authority contact details, data protection / privacy officer, and jurisdiction-specific legal points) are being finalized by EDUMOVIA management and legal counsel and will be updated in a subsequent revision.
For questions about our legal and data protection practices, please contact us.
Contact us