We handle information about students, parents, and schools — which is why security and accountability sit at the core of how StudyHQ is built and run.
We currently hold two active ISO certifications issued by UKBIZ Certification Inc., accredited by EUAS (Euro Universal Accreditation Systems).
Information Security Management System
The internationally recognised standard for managing information security risks. Our certification covers both digital and operational security aspects of the StudyHQ platform, including data protection, access controls, and incident response.
Quality Management System
The global benchmark for quality management. Our certification demonstrates that StudyHQ's processes — from psychometric assessment to student counselling — meet rigorous international quality standards.
Core practices baked into the way StudyHQ is built, deployed, and operated.
All traffic between users and StudyHQ is encrypted using TLS. Sensitive data is never transmitted in plain text.
Student, parent, counsellor, and school roles see only the data relevant to them. Internal access is limited to the smallest team required to operate and support the platform.
Team members are granted only the permissions they need to do their job. Access is reviewed regularly and revoked when no longer required.
Student and school data is stored on reputable cloud infrastructure with physical security, redundancy, and routine backups managed by the provider.
We maintain a documented incident response process. In the event of a security incident affecting user data, impacted customers will be notified in line with applicable law and our commitments.
Our security and quality practices are independently reviewed as part of our ISO 27001 and ISO 9001 certifications, with annual surveillance audits by our certification body.
We know parents and school administrators want clear answers, not legal jargon. Here's the short version.
Name, contact details, school context, and assessment responses — the minimum required to produce a meaningful career recommendation.
Ever. Student information is used to serve the student and their family — not marketed, bundled, or sold to third parties.
For B2B deployments, the school or institution remains the data controller. We process data on their instruction and return or delete it when the engagement ends.
Students and parents can request a copy of their data, ask for corrections, or request deletion by writing to us at the address below.
"Education & Career Guidance Services: AI-based psychometric testing, career planning, university admission support, visa guidance, and post-admission mentoring."
— As certified by UKBIZ Certification Inc., accredited by EUAS (Euro Universal Accreditation Systems)
For questions about our compliance programs, security practices, data requests, or to request additional documentation: