All policies
Privacy
BUE-PRI-002

Privacy Notice

Explains what personal data BUE collects through the SRS, why it is processed, how long it is retained and the rights available to data subjects.

Owner:
Data Protection Officer
Effective:
01 January 2026

1. Data We Collect

Identity data (name, national ID, passport, date of birth), contact data (email, phone, address), academic data (programme, grades, attendance), financial data (invoices, payments) and, where opted-in, biometric face descriptors used for attendance.

2. Lawful Basis

We process personal data to perform the contract of education, to comply with our legal obligations to the Ministry of Higher Education, and on the basis of consent for optional features such as Face-ID attendance and marketing.

3. Sharing

Data may be shared with the UK partner university for joint programmes, with MOHE for statutory reporting, with payment processors for transactions, and with verified employers when a student opts to publish a CV.

4. Retention

Active student records are retained for the duration of the programme plus 75 years (academic transcript). Application data for unsuccessful applicants is deleted after 24 months. Face vectors are deleted on graduation or on request.

5. Your Rights

You have the right to access, rectify, erase, restrict, port your data and to withdraw consent. To exercise these rights contact dpo@bue.edu.eg. We respond within 30 days.

Questions about this policy? Contact dpo@bue.edu.eg for privacy matters or security@bue.edu.eg for security disclosures.