Last Updated: January 24, 2026

1. Introduction

RedX Research Limited ("RedX Research," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you participate in our research programs.

​

RedX Research is registered in the United Kingdom and operates educational research programs for students in Dubai, including our annual programs at the National University of Singapore.

This Privacy Policy applies to all students, parents, and guardians who interact with our services.

​

2. Information We Collect

2.1 Personal Information

We collect the following categories of personal information:

 

Student Information:

• Full name

• Email address

• Date of birth

• High school name and location

• Grade Point Average (GPA) and academic records

• Resume/Curriculum Vitae

• Educational background and achievements

• Program preferences and applications

• Photographs and videos (with consent, for program documentation)

• Emergency contact information

​

Parent/Guardian Information:

• Parent or guardian name

• Parent or guardian email address

• Contact telephone numbers

• Emergency contact details

 

Additional Information:

• Communication preferences

• Correspondence with RedX Research staff

• Program feedback and evaluations

• Payment and billing information

• Any other information you voluntarily provide to us

2.2 Information Collected Automatically

When you visit our website or use our services, we may automatically collect:

• IP address and device information

• Browser type and version

• Operating system

• Pages visited and time spent

• Referring website addresses

• Cookies and similar tracking technologies

 

3. Legal Basis for Processing (UK GDPR)

We process your personal information under the following legal bases:

​

Contract Performance: Processing is necessary to perform our contract with you for educational program services.

 

Legitimate Interests: We have legitimate interests in operating our business, improving our programs, and ensuring program safety and quality.

​

Legal Obligation: We process certain information to comply with legal and regulatory requirements in the UK, UAE, and Singapore.

 

Consent: Where required, we obtain explicit consent, particularly for processing sensitive information or marketing communications.

 

Vital Interests: In emergency situations, we may process information to protect the health and safety of students.

 

4. How We Use Your Information

We use the personal information we collect for the following purposes:

​

4.1 Program Administration

• Processing applications and enrollment

• Coordinating program logistics and schedules

• Communicating program details and updates

• Managing student participation and attendance

• Evaluating student performance and progress

​

4.2 Academic Coordination

• Matching students with appropriate research opportunities

• Sharing relevant information with partner institutions and faculty

• Facilitating research supervision and mentorship

• Providing academic support and guidance

​

4.3 Safety and Emergency Response

• Maintaining emergency contact information

• Responding to health or safety incidents

• Coordinating with parents/guardians as necessary

• Ensuring student welfare during programs

​

4.4 Service Improvement

• Analyzing program effectiveness

• Gathering feedback and testimonials

• Improving our services and offerings

• Developing new educational opportunities

​

4.5 Communication​

• Sending program updates and announcements

• Responding to inquiries and support requests

• Providing customer service

• Marketing future programs (with consent)

 

4.6 Legal and Compliance​

• Complying with legal obligations

• Enforcing our terms and conditions

• Protecting our rights and property

• Preventing fraud and abuse

 

5. International Data Transfers

5.1 Transfers to Singapore

As part of our research programs conducted at the National University of Singapore (NUS), we transfer student personal information to:

• Our trusted partners in Singapore, including at NUS

• Program faculty and researchers

• Program coordinators in Singapore

• Accommodation providers (staff at NUS) and catering partners

Transfer Safeguards: We ensure appropriate safeguards are in place for these transfers, including:

• Contractual agreements incorporating standard contractual clauses approved by the UK Information Commissioner's Office

• Data protection agreements with partner institutions

• Adherence to Singapore's Personal Data Protection Act 2012

5.2 Other International Transfers

We may also transfer personal information to:

• Service providers and vendors who assist with program operations

• Payment processors

• Cloud storage providers

• Technology service providers

 

All international transfers are conducted in accordance with UK GDPR requirements and include appropriate safeguards such as standard contractual clauses, adequacy decisions, or other approved transfer mechanisms.

 

6. Information Sharing and Disclosure

6.1 Program Partners

We share student information with our program partners, including:

 

National University of Singapore:

• Student names, contact information, and academic backgrounds

• Application materials and resumes

• Academic performance data relevant to research placements

• Emergency contact information

 

Research Faculty and Supervisors:

• Student profiles and academic interests

• Application materials relevant to research projects

• Progress reports and evaluations

 

Accommodation and Logistics Providers:

• Names and contact information as necessary for bookings

• Dietary requirements or special needs

• Emergency contact details

 

6.2 Parents and Guardians

We may share student information with parents or guardians as appropriate, including:

• Program participation and attendance

• Academic progress and performance

• Health, safety, or emergency matters

• Billing and payment information

 

6.3 Legal Requirements

We may disclose personal information when required by law or in response to:

• Court orders or legal processes

• Regulatory or governmental requests

• Protection of our rights, property, or safety

• Protection of others' rights, safety, or property

​

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

 

Typical Retention Periods:

• Active program participants: Duration of program plus 2 years

• Application materials (unsuccessful): 1 year

• Financial records: 7 years (UK tax requirements)

• Marketing communications: Until consent is withdrawn

• Legal and compliance records: As required by applicable law

 

After the retention period expires, we securely delete or anonymize personal information in accordance with our data retention and destruction policies.

 

8. Data Security

We implement robust technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest

• Secure server infrastructure and firewalls

• Access controls and authentication protocols

• Regular security assessments and audits

• Staff training on data protection

• Incident response procedures

 

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

 

9. Your Rights (UK GDPR)

Under UK data protection law, you have the following rights:

 

9.1 Right of Access

You have the right to request a copy of the personal information we hold about you.

 

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information.

 

9.3 Right to Erasure

You have the right to request deletion of your personal information in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.

 

9.4 Right to Restrict Processing

You have the right to request that we restrict processing of your personal information in certain circumstances.

 

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller.

 

9.6 Right to Object

You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes.

 

9.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

 

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us using the details in Section 13.

 

10. Children's Privacy

Our services are designed for students, including individuals under the age of 18. We take additional precautions to protect the privacy of minors:

• We obtain parental consent when collecting personal information from students under 18

• We limit collection to information necessary for program participation

• We provide parents with access to their child's information

• We allow parents to request deletion of their child's information

• We do not share children's information for marketing purposes without parental consent

 

Parents or guardians may review, update, or request deletion of their child's information by contacting us at the details provided in Section 13.

 

11. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience and analyze website traffic.

 

Types of Cookies We Use:

• Essential Cookies: Necessary for website functionality

• Analytics Cookies: Help us understand how visitors use our website

• Functional Cookies: Remember your preferences and settings

• Marketing Cookies: Used to deliver relevant advertisements (with consent)

 

You can control cookie preferences through your browser settings. However, disabling certain cookies may affect website functionality.

​

12. Marketing Communications

With your consent, we may send you marketing communications about:

• Future research programs and opportunities

• Educational content and resources

• RedX Research news and updates

• Partner opportunities and events

 

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in our emails

• Contacting us directly using the details in Section 13

​

Please note that even if you opt out of marketing communications, we will still send you essential service-related communications regarding programs you are enrolled in.

 

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

 

RedX Research Limited
Address: 34-35 Hatton Garden EC1N 8DX, London, United Kingdom

Email: hello@redxresearch.com

​

​UK Information Commissioner's Office (ICO):
If you are not satisfied with our response to your data protection concerns, you may contact the ICO:

Website: https://ico.org.uk
Telephone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom

 

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any changes by:

• Posting the updated Privacy Policy on our website

• Updating the "Last Updated" date at the top of this policy

• Sending an email notification (for major changes)

 

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes constitutes acceptance of the updated Privacy Policy.

 

15. Jurisdiction-Specific Provisions

15.1 UAE (Dubai) Residents

For students and families based in Dubai, we comply with applicable UAE data protection regulations. Personal information collected in the UAE may be transferred to the UK and Singapore as described in Section 5.

​

15.2 Singapore Operations

During programs in Singapore, we comply with Singapore's Personal Data Protection Act 2012 (PDPA). Our partners in Singapore are also required to comply with applicable Singaporean data protection laws.

​

By participating in RedX Research programs or using our services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your personal information as described herein.