Legal Framework

Privacy Policy

Last updated: January 2026

1. Introduction

BridgeWay Consult ("we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, process, use, and safeguard your data when you visit our website (https://bridgewayconsult.com) or engage with our services, in compliance with the Data Protection Act (Kenya) and the General Data Protection Regulation (GDPR).

2. Information We Collect

To provide our international education consultancy services, we may collect and process the following categories of personal data:

  • Identity data: Full name, date of birth, gender, nationality, passport details, and national identification numbers.
  • Contact data: Email address, phone number, physical address, and emergency contact details.
  • Academic & Professional data: Educational history, transcripts, qualifications, certificates, employment history, and curriculum vitae (CV).
  • Financial data: Proof of funds, sponsorship letters, and bank statements required solely for visa processing and institution applications.
  • Technical & Usage data: IP address, browser type, location data, and website interaction metrics collected via cookies (see Section 6).
  • Special Category Data: In specific visa application scenarios, we may process health records (e.g., TB certificates) or biometric data entirely subject to your explicit consent and strict confidentiality.

3. How We Use Your Information

Your personal data is used explicitly for the purpose of facilitating your educational journey abroad. This includes:

  • Managing university admissions, scholarship applications, and student placement processes.
  • Providing accurate visa consultancy and submitting documentation to relevant immigration authorities on your behalf.
  • Communicating critical updates regarding your applications, deadlines, and service changes.
  • Complying with legal, regulatory, and immigration obligations.
  • Improving our digital platforms and tailoring our service offerings to better serve our clients.

4. Legal Basis for Processing

Under applicable data protection frameworks, we process your personal information relying on the following lawful bases:

  • Contractual Necessity: To perform our obligations under the service agreement you hold with us.
  • Legitimate Interests: To operate our business efficiently, safeguard our IT infrastructure, and enhance client satisfaction, provided these interests are not overridden by your fundamental rights.
  • Legal Obligation: To comply with local and international regulatory requirements, particularly concerning immigration and financial audits.
  • Consent: Where required (such as for direct marketing or processing health-related visa documents), we rely on your clear, affirmative consent, which you may withdraw at any time.

5. Data Sharing & Cross-Border Transfers

Given the international nature of our services, it is necessary to share your data with third parties. We may disclose your information to:

  • Partner universities and educational institutions worldwide to process your admissions.
  • Embassies, high commissions, and government immigration departments to secure your visa.
  • Trusted third-party service providers (e.g., secure cloud hosting, CRM systems) bound by strict data processing agreements.

When transferring your personal data outside of Kenya or the European Economic Area (EEA), we ensure adequate safeguards are in place—such as standard contractual clauses or verifying the destination country holds an adequacy decision—to ensure your data remains protected to the highest standards.

We absolutely do not sell, rent, or trade your personal data to any third parties for commercial gain.

6. Cookies and Tracking Technologies

Our website utilizes cookies and similar tracking technologies to ensure site functionality, analyze traffic patterns, and deliver a seamless user experience. You have the ability to accept or decline non-essential cookies via your browser settings. Continuing to navigate our site constitutes acknowledgment of our cookie usage.

7. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. Generally, client files are securely retained for a period of up to 5 years following the conclusion of our engagement.

8. Your Data Protection Rights

Depending on your jurisdiction, you hold comprehensive rights regarding your personal data, including the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of any incomplete or inaccurate data.
  • Erasure (Right to be Forgotten): Request deletion of your personal data where there is no good reason for us continuing to process it.
  • Restriction: Request the suspension of processing of your personal data.
  • Data Portability: Request the transfer of your personal data to you or a third party in a structured, machine-readable format.
  • Withdraw Consent: Withdraw your consent at any time where we are relying on consent to process your personal data.

To exercise any of these rights, please contact our Data Protection Officer using the details below. You also possess the right to lodge a complaint with your relevant supervisory authority, such as the Office of the Data Protection Commissioner (ODPC) in Kenya.

9. Data Security

We have implemented robust technical and organizational security measures designed to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed in an unauthorized way. Access to your data is strictly limited to employees, agents, and authorized third parties who have a business need to know and are subject to a duty of confidentiality.

10. Contact Us

If you have any inquiries regarding this Privacy Policy, our privacy practices, or wish to exercise your legal rights, please contact us at: