Global Privacy Policy & Data Protection Charter

Aurigoworld ('we', 'us', or 'our') operates as an international education market development partner and on-ground institutional representative. For the purposes of the EU/UK General Data Protection Regulation (GDPR), the Singapore Personal Data Protection Act 2012 (PDPA), and international privacy frameworks, Aurigoworld serves as the Data Controller.

Our designated Data Protection Officer (DPO) oversees data integrity and regulatory compliance across all regional desks. Inquiries regarding our data architecture may be directed to dpo@aurigoworld.com.

Aurigoworld provides strategic market development, on-ground representation, and network coordination services to higher-education institutions.

Under no circumstances does Aurigoworld make admissions decisions, issue formal university acceptance letters (such as CAS or I-20 documentation), or determine scholarship entitlements. All admissions and academic criteria remain exclusively under the sovereign authority of each respective university or college.

We collect only the minimum information necessary to evaluate university market entry proposals, schedule strategic consultations, and coordinate regional outreach.

Data collected includes professional names, institutional work email addresses, telephone numbers, academic department affiliations, target geographic corridors, and narrative context provided voluntarily in contact dockets.

• ▪Institutional Identity: Professional name, university affiliation, department, and work credentials.
• ▪Operational Directives: Selected regional corridors (Vietnam, Indonesia, Malaysia, Thailand, Philippines), intake goals, and degree focus.
• ▪Technical Telemetry: IP addresses (truncated at network entry), operating system user-agent, and server protocol request timestamps.

We process Personal Data under strict, codified lawful grounds: (a) Performance of a Contract or Pre-Contractual Assessment (GDPR Art. 6(1)(b)) to evaluate partnership dockets; (b) Legitimate Interests (GDPR Art. 6(1)(f)) to maintain cybersecurity and engage with institutional peers; and (c) Compliance with Legal Obligations (GDPR Art. 6(1)(c)).

Given our global operations connecting universities in the UK, EU, North America, and Australasia with Southeast Asian desks, personal data may be transferred across international borders.

Where data originating in the European Economic Area or UK is transferred to countries without an adequacy decision, we bind regional offices and technical processors to European Commission Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.

• ▪Standard Contractual Clauses (SCCs) executed across all internal transfer corridors.
• ▪Strict operational access segregation restricted to authorized executive directors.
• ▪Transport Layer Security (TLS 1.3) cryptographic encryption on all data in transit.

Aurigoworld maintains a strict privacy-by-design policy. This website does not set third-party marketing pixels (such as Meta Pixel or Google Ads) or behavioral profiling cookies.

All typography and styling assets are compiled and self-hosted directly from our origin servers, preventing remote IP leakage. Any storage used is strictly necessary for network transport security and temporary UI states, exempt from consent under EU ePrivacy Directive Art. 5(3) and UK PECR.

Under international data protection legislation, you are entitled to exercise comprehensive statutory rights regarding your personal information at any time without fee.

• ▪Right of Access & Portability: Request a structured, machine-readable copy of your data.
• ▪Right to Rectification: Correct inaccurate or incomplete institutional records.
• ▪Right to Erasure ('To Be Forgotten'): Request permanent deletion of non-statutory data.
• ▪Right to Restrict or Object: Limit processing based on legitimate interests or withdraw consent.