Privacy Policy

Section 01Data Controller

PRIVATE SCHOOL GOLDEN OAK LTD (HE 435773)
Trading as Golden Oak Private School
30 Nikis Avenue, Agios Athanasios, Limassol 4108, Cyprus
Email: info@goldenoakcyprus.com
Telephone: +357 99 309749

For privacy questions or requests concerning your personal data, please contact the school using the details above.

Section 02Personal Data We Collect

Depending on your relationship with the school, we may collect identity and contact details; admissions, enrolment, attendance and academic records; billing and administrative information; employment or recruitment information; communications and form submissions; website and device data; and, where necessary, health, safeguarding or accessibility information.

We usually receive information directly from you. Where appropriate, we may also receive information from previous schools, education authorities, professional advisers or service providers.

Section 03Why We Use Data and Our Legal Bases

We use personal data to operate the school, manage admissions and enrolment, deliver education and student support, communicate with families, administer employment and payments, safeguard our community, respond to enquiries, maintain security, improve our services and meet legal or regulatory obligations.

Depending on the purpose, our legal basis may be contract, legal obligation, legitimate interests, consent, or another basis permitted by law. Where processing is based on consent, you may withdraw that consent at any time without affecting earlier lawful processing.

Section 04Children and Sensitive Information

Because Golden Oak is a school, much of the personal data we process relates to children. Children’s data is handled with particular care and is used only where needed for education, administration, safeguarding, health, welfare or other legitimate school purposes.

We do not rely on parental consent for every use of a child’s data; the lawful basis depends on the purpose. Where special-category data such as health information is processed, additional safeguards and a valid GDPR condition are applied. Optional promotional photography or video is handled in line with the consent choices provided to parents, guardians or other relevant individuals.

Section 05Website, Cookies and Analytics

Our website may use essential cookies and, where permitted, analytics or marketing technologies to understand website use, improve performance and measure communications or campaigns. Non-essential cookies are used only where consent is required and has been obtained through our cookie-consent controls.

For details and controls, please read our Cookie Policy.

Section 06Sharing, Service Providers and International Transfers

We may share personal data only where necessary with trusted service providers and professional advisers, including providers of hosting, IT, forms, CRM, communications, analytics, accounting or payment services, as well as education or examination bodies, insurers and public authorities where required by law.

If personal data is transferred outside the European Economic Area, we use an appropriate legal mechanism where required, such as an adequacy decision, Standard Contractual Clauses or another safeguard recognised by the GDPR.

Section 07Retention and Security

We keep personal data only for as long as reasonably necessary for the relevant purpose and to meet applicable education, employment, accounting, safeguarding, contractual and legal record-keeping requirements. Retention periods vary according to the type of record and the relationship with the school.

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

Section 08Your GDPR Rights

Subject to the GDPR’s conditions and exceptions, you may have rights to access, correct or erase personal data; restrict or object to processing; receive certain data in a portable format; and withdraw consent where consent is the legal basis. You also have the right to object to direct marketing.

To exercise a right, contact info@goldenoakcyprus.com. We may need to verify your identity before responding.

Section 09Complaints

If you have concerns about how we use your personal data, please contact us first so we can try to resolve them.

You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus.

Section 10Related Policies and Updates

This Privacy Policy should be read together with our Cookie Policy and Terms & Conditions.

We may update this Privacy Policy when our practices, services or legal obligations change. The latest version will always be published on this page.

Last updated: 8 September 2026