Privacy Policy
This policy explains how Artificial Intelligence Uni Ltd (AIU.ac) collects, uses, and protects your personal data, and your rights under UK data protection law.
The data controller is Artificial Intelligence Uni Ltd, registered in England & Wales (Company No. 14543918). ICO registration: ZB687489. Contact: hi@aiu.ac.
Data we collect
- Contact details: your name and email when you contact us, register an account, or enrol.
- Location: your country, to provide relevant information and pricing.
- Enrolment and payment details: information needed to process your enrolment and payment for paid courses.
- Usage data: analytics about how you use the site, collected with your consent.
How we use it, and our lawful basis
- To provide our courses, certifications, and services, and to manage your account, on the basis of performing our contract with you.
- To respond to your enquiries, on the basis of our legitimate interest in answering you.
- To process payments, on the basis of performing our contract and meeting legal obligations.
- To send marketing emails, only where you have consented; you can withdraw consent at any time.
- To understand and improve the site through analytics, on the basis of your consent.
Applications and admissions
What we collect: name, email, phone, country of residence, employment status, CV, LinkedIn URL (optional), scholarship declarations, payment reference, and identity document details where an identity check is required. Outside a scholarship claim, we do not ask for nationality. We do not ask for date of birth, photograph, marital status, religion, or health information, and we do not consider such information if it appears incidentally in a CV.
Scholarship claims: where you apply for the AIU Access Scholarship, we collect your country of nationality and a signed declaration solely to assess scholarship eligibility and for audit; this information is not used in admission decisions. We may request documentary proof of identity and nationality; document images are deleted within 30 days of verification and a record of the determination is retained. Our lawful basis is legitimate interests and positive action under section 158 of the Equality Act 2010.
Why and on what basis: to assess your application and any scholarship claim (contract and legitimate interests); to verify identity and to screen against UK sanctions and export control lists (legal obligation); to administer enrolment, payments and refunds (contract, legal obligation); to maintain the credential verification register (legitimate interests). We may review your public LinkedIn profile to verify professional history.
Decisions: applications are assessed against published criteria with the help of automated checks. Any decision to decline or revoke a place is made or confirmed by a member of the AIU admissions team. You may ask for a human review, express your view, and contest a decision by emailing admissions@aiu.ac.
Retention: unsuccessful applications 12 months from decision; financial records 6 years; enrolled learner and credential records for as long as needed to verify your credential; identity document images deleted within 30 days of verification, with a record that verification was completed retained.
Processors: Brevo (email and forms), Stripe (payments, and identity checks when in use), DigitalOcean (hosting of the learning platform, London), Google Workspace, Cloudflare (including Cloudflare Stream for course video). Transfers outside the UK are covered by UK-approved safeguards.
Learners on the learning platform
If you are enrolled on a programme, we process your personal data to deliver it. The programme is delivered through our learning platform at learn.aiu.ac. When you use the platform we hold your account details (name, email address, roll number and cohort), your enrolment and progress records, the assignments and capstone work you submit, marks and feedback, and messages exchanged with staff through the platform. The platform also keeps technical logs of log-ins and activity (date, time, IP address, browser and the pages and resources you open), which we use to keep the platform secure, to support you if something goes wrong, and to evidence engagement where our assessment rules require it. Course videos are streamed through Cloudflare Stream, which records playback events (which video was played, when, and how much of it) on our behalf.
We rely on our contract with you for enrolment, delivery, assessment and marking; on our legitimate interests for platform security logs and for maintaining the credential register; and on legal obligation for financial records. Every adverse decision about your enrolment or assessment is made or confirmed by a named member of staff; no decision about you is made by automated means alone.
The organisations that process learner data on our behalf, under written contracts, are DigitalOcean (hosting of the learning platform, in London), Cloudflare (network security for the platform and video delivery through Cloudflare Stream), Brevo (platform and admissions email), Google Workspace (our mailboxes) and Stripe (payments). We do not pass learner data to AI model providers.
We keep enrolled learner records and the credential register, including the assignments and capstone work you submitted and the marks awarded, for as long as is needed to verify the credential you hold. Financial records are kept for six years. Platform security and activity logs, and video playback records, are kept for twelve months and then deleted or anonymised.
Your rights over this data are set out under Your rights below.
Payments
Card payments are processed by Stripe. We do not store your full card details; Stripe handles them under its own terms and privacy policy.
We use Brevo to manage contact and email communications. Where you have opted in to marketing, you can unsubscribe at any time using the link in any email or by contacting us.
Analytics
We use Google Analytics (via Google Site Kit) to understand site usage. Analytics cookies are set only with your consent. See our Cookies Policy.
Sharing your data
We share data only with service providers who help us operate (such as Stripe for payments, Brevo for email, and Google for analytics), and where required by law. We do not sell your personal data. Where you reach us via an advertisement, we share limited data (including a hashed form of your email address) with the advertising platform to measure that the programme fee was paid.
International transfers
Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards recognised under UK data protection law.
How long we keep it
We keep personal data only as long as needed for the purposes above, or as required by law (for example, financial records). We then delete or anonymise it. Retention periods for application and admissions data, and for learners on the learning platform, are set out above.
Your rights
Under UK GDPR you have the right to access, correct, delete, or restrict use of your data, to object to processing, to data portability, and to withdraw consent. To exercise any of these, contact hi@aiu.ac. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Changes
We may update this policy from time to time. The current version is always published on this page.
