Privacy Policy

1. Who we are

Legal entity: A.I.T. Multiverse Consulting Ltd, a company incorporated in the Republic of Cyprus (hereafter “A.I.T. Multiverse”, “we”, “us” or “our”). Studies Multiverse (the website at https://studiesmultiverse.com) is owned and operated by A.I.T. Multiverse Consulting Ltd.

Contact: admin@aitmultiverse.com

Studies Multiverse (“we”, “us”, “our”) operates the website https://studiesmultiverse.com, a free, independent international-education directory and editorial resource. For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR, and similar laws, A.I.T. Multiverse Consulting Ltd is the data controller of personal data processed through this website unless otherwise stated.

You can reach us for any privacy matter at admin@aitmultiverse.com.

2. Information we collect

a) Information you provide to us

• Contact & inquiry forms: name, email address, phone (optional), message content, country of interest.
• Account registration (optional): username, email address, password (stored hashed), profile details you choose to add.
• Institution claim / correction / takedown requests: your name, role, institutional email, the URL(s) concerned and the change requested.
• Newsletter subscription (optional): email address and your consent preference.

b) Information collected automatically

• Log data: IP address, browser type and version, operating system, referring URL, pages visited, timestamps, and approximate location derived from IP.
• Cookies and similar technologies: see Section 4.
• Analytics: aggregated, privacy-respecting usage statistics (page views, search queries entered into our on-site search, device type).

c) Information from third parties

• Open data sources used for the directory: Wikidata (CC0), UNESCO WHED (public portal data), ROR (CC0), public national registries, and publicly listed institution websites. This data concerns organizations (universities, colleges, schools) and their publicly published contact channels — not individuals.

3. How we use information (purposes & legal bases)

We process personal data only where we have a lawful basis under GDPR / UK GDPR and equivalent laws:

• To respond to inquiries you send us — legal basis: performance of a contract or your request / legitimate interest in responding.
• To operate, secure and improve the website — legal basis: legitimate interest in providing a reliable service and preventing abuse.
• To send you a newsletter — legal basis: your consent; you can withdraw at any time by clicking “unsubscribe”.
• To process correction, claim, or removal requests — legal basis: legal obligation and legitimate interest in maintaining accurate, lawful content.
• To comply with legal obligations — legal basis: legal obligation.

We do not sell personal data, we do not use personal data for automated decision-making that produces legal effects on you, and we do not serve personalized advertising based on tracking across third-party sites.

4. Cookies & similar technologies

We use a small number of cookies: strictly necessary cookies (for login sessions and security), preference cookies (e.g. language), and optional analytics cookies. Analytics and any non-essential cookies are set only with your consent where required by law. You can manage your cookie preferences at any time via the cookie banner or your browser settings. For the full list of cookies and their purposes see our Cookie Policy.

5. Directory listings & public data sources

Studies Multiverse publishes factual information about educational institutions drawn from openly licensed or publicly available registries (Wikidata CC0, ROR CC0, UNESCO WHED, public national registries, and institutions’ own public websites). This information concerns organizations, not individuals, and reflects data that is already public. If you are an individual whose name nevertheless appears in an institution page (for example as a rector or dean listed on a public institutional page) and you want that personal mention removed, please contact admin@aitmultiverse.com and we will process your request under Section 9.

6. How we share information

We share personal data only with:

• Service providers who host, secure, back up or deliver email on our behalf, bound by confidentiality and data-processing agreements.
• Law-enforcement or regulators where required by law or to protect rights, safety and property.
• Successors in interest in the event of a merger, acquisition or asset sale, with continued protection under this policy.

We never sell or rent your personal data.

7. Data retention

• Inquiry / contact messages: up to 24 months, then deleted or anonymized.
• Account data: for the life of your account plus 12 months, unless law requires longer.
• Server and security logs: up to 12 months.
• Takedown / correction correspondence: up to 3 years, to evidence good-faith processing.

8. International data transfers

Our servers and some service providers may process data outside your country of residence, including in the United States and the European Union. Where we transfer personal data out of the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or adequacy decisions.

9. Your rights

Depending on where you live, you may have the following rights in relation to your personal data:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure (“right to be forgotten”) — ask us to delete your personal data.
• Restriction / objection — limit or object to processing based on legitimate interests.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.
• CCPA / CPRA (California) — right to know, delete, correct, and limit the use of sensitive personal information, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as defined by the CCPA.
• Complaint — lodge a complaint with your local data-protection authority (e.g. the ICO in the UK, or your national DPA in the EU).

To exercise any of these rights, email admin@aitmultiverse.com. We will respond within the timeframe required by applicable law (generally 30 days).

10. Children’s privacy

Studies Multiverse is intended for a general audience of prospective students aged 16 and above. We do not knowingly collect personal data from children under 16 (or the applicable minimum age in your country). If you believe a child has submitted personal data to us, please contact admin@aitmultiverse.com and we will delete it promptly.

11. Security

We apply appropriate technical and organizational measures to protect personal data, including TLS encryption in transit, hashed passwords, access controls, regular backups and software updates. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we work hard to maintain it.

12. Third-party links

Our directory links out to institutions’ official websites and to third-party resources. Once you follow an external link, this Privacy Policy no longer applies. Please review the privacy policies of any site you visit.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be highlighted on this page and the “Last updated” date will be revised. Continued use of the site after an update constitutes acceptance of the updated policy.

14. Contact & data-protection requests

For any question about this Privacy Policy or to exercise your rights:

• Email: admin@aitmultiverse.com
• Takedown / listing removal: admin@aitmultiverse.com
• General contact: Contact Us