Privacy policy
Your data, handled with care and explained in plain words.
This page explains which data University Access collects, what it is used for, who sees what, and how you exercise your rights under Brazil's LGPD. It applies to students, families, school counselors and universities.
Last updated: 28 October 2026.
Who we are
The Student World is the education brand of FPP EDU Media, which has worked in international education since 1997. The University Access platform lives at school.thestudentworld.com.
FPP EDU Media is responsible for the processing of the data described on this page.
Whose data it is
University Access holds data about four kinds of people.
- Students, including minors. In that case, the guardian records consent in the platform before any profile is sent to a university.
- Parents and guardians, through the family account.
- School counselors, through the school account.
- University representatives, through the university account.
What we collect
Only what the service needs to work.
- Account data: name, e-mail, password (stored hashed, never in readable text) and language.
- The academic profile the student fills in: grades, tests, interests, activities and the documents the student uploads.
- The family's budget range for the studies.
- Usage data needed to keep the service running and secure.
Why we use it
Every piece of data serves a purpose tied to the student's process.
- So the student can build a profile and send it to the universities they choose.
- So the counselor can follow the class.
- So the family can follow costs and offers.
- To send the e-mails of the process: confirmations, university replies and deadlines.
- To improve the service.
Who sees what
Each account sees only what it needs.
- A university sees the profile only when the student sends it. The student's full name and contact details appear only when the student accepts an offer.
- A university never sees the family's exact budget, only whether the cost fits.
- The counselor at the student's school sees the student's progress.
- The family account sees the list of universities, costs, offers and deadlines.
- Documents are shared only with the universities the student chooses.
We do not sell personal data.
Where it is kept and for how long
Data is hosted on cloud infrastructure, with access restricted to the team that runs the service.
We keep data while the account is active and, after that, only for as long as the law requires. When you request deletion, we erase everything we are not legally required to keep.
Your rights
The LGPD (articles 17 to 22) gives you, and the GDPR gives users in Europe, the right to:
- Confirm that we process your data and access it.
- Correct incomplete or outdated data.
- Request anonymisation or deletion of your data.
- Receive a copy of your data (portability).
- Know who we share your data with.
- Withdraw consent at any time.
In the student account, go to My account > Privacy and use "Request a copy of my data" or "Request deletion of my data". Other accounts, and anyone who prefers, can use the support page. We reply by e-mail.
Cookies
We use only two cookies, neither of them for advertising.
- A session cookie, which keeps you signed in.
- A language cookie, which remembers the language you chose.
Children and teenagers
The profile of a student who is a minor is sent to universities only after the guardian records consent in the platform.
The guardian can follow everything in the family account: list, costs, offers and deadlines.
Changes to this policy
The date of the last update appears at the top of this page. Material changes are announced by e-mail to account holders.
Contact
Questions and requests about privacy: use the support page. We reply by e-mail.