Data Controller
Doctoral College UK · London, UK · hello@doctoralcollege.org
01
What data we collect
| Data | Source | Purpose |
|---|---|---|
| Name, email, phone, message | Contact form | Responding to enquiries |
| Email address | Newsletter | Monthly digest |
| Chat messages | Chat widget | AI assistant responses |
| IP address | Server logs | Rate limiting & security |
02
How we use your data
Enquiries
Contact form submissions are stored in our database and used solely to respond to your message.
Newsletter
Your email is stored until you unsubscribe. We do not share subscriber lists with third parties.
Chat
Conversations are stored for 30 days to maintain session continuity, then permanently deleted.
Analytics
We do not run analytics or tracking scripts. If analytics are added, a cookie consent banner will be implemented first.
03
Legal basis (UK GDPR)
Consent
Newsletter subscription, chat usage, and contact form (consent checkbox required).
Legitimate interest
Rate limiting and security logging to protect the service.
04
Data retention
Contact submissions
Until deleted by admin
Newsletter subscribers
Until unsubscribe
Chat sessions
30 days, then purged
Rate limit counters
1 hour TTL
05
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Request erasure of your data
- Restrict or object to processing
- Data portability
Email hello@doctoralcollege.org — we respond within 30 days.
06
Third-party processors
| Service | Purpose |
|---|---|
| Cloudflare | Hosting, edge caching, Workers |
| SendGrid (Twilio) | Transactional email |
| Anthropic | AI chat assistant |
| Google Fonts | Typography |
07
Cookies
This website does not set any cookies. A consent banner will appear before any non-essential cookies are ever introduced.
Last updated: April 2026
Contact us →