1. Data controller and contact
CNL Enterprises Limited is the controller of personal information collected through this website. Privacy requests and questions may be sent to info@cnluk.net or to the UK office at 2/8, 79 West Regent Street, Glasgow, Scotland, G2 2AW.
2. Information collected
The enquiry form may collect your name, email address, telephone number, enquiry type, intended intake, latest qualification, course interest, message and consent record. Hosting and security systems may process limited technical data, including IP address, browser details, request time and server logs.
3. Purposes and lawful bases
CNL uses the information to respond to your request, conduct an initial enquiry review, keep a communication record, protect the website, prevent misuse and manage complaints or legal issues. Depending on the activity, CNL relies on steps requested before a possible service arrangement, legitimate interests in answering and administering enquiries, compliance with legal obligations, or consent where it is specifically required.
4. Who may receive the information
Information may be accessed by authorised CNL personnel in the United Kingdom and Pakistan. It may be processed by website hosting, database and transactional-email providers. Where you ask CNL to progress an education matter, relevant information may be shared with the University of the West of Scotland or another organisation involved in that request. CNL does not sell personal information.
5. International access and transfers
CNL operates between the United Kingdom and Pakistan and may use service providers located in other countries. Where UK data-protection transfer rules apply, CNL should use an applicable lawful transfer mechanism and appropriate safeguards. Further information about a relevant safeguard may be requested using the privacy contact above.
6. Retention
Website enquiries that do not progress are normally retained for up to 24 months after the last meaningful contact. Records that become part of an application, complaint or formal service relationship may be retained for up to six years after closure where required for contractual records, compliance, audit or legal claims. Security logs may be retained for shorter operational periods. CNL may retain a record for longer where law, litigation or an active investigation requires it.
7. Your rights
Subject to the applicable legal conditions, you may request access, correction, erasure, restriction, portability or object to processing. Where processing relies on consent, you may withdraw it for future processing. Rights are not absolute and CNL may need to verify identity before acting on a request.
8. Complaints about data use
Raise the matter with CNL first using info@cnluk.net. You also have the right to complain to the UK Information Commissioner’s Office where UK data-protection law applies.
9. Sensitive information
Do not submit passports, bank statements, medical information, biometric data or other sensitive original documents through the public form. CNL should provide an approved secure method where such information is genuinely necessary.
10. Changes to this notice
CNL will review this notice when the website, service providers or processing activities materially change. A new use of personal information should be communicated before that use begins.