Privacy and
cookie notice.
Updated 8 October 2026 · Website notice version 7
This notice explains how the Via Glowbal website handles information when you browse, make an enquiry, sign in or use student tools. It distinguishes information sent to our services from drafts that stay in your browser. Paid counselling, education and travel engagements may need an additional notice identifying the relevant contracting entity and the information required for that service.
1. What we process and why
- Accounts: your name, email, authentication details and account identifiers allow sign-in, recovery and access to your own saved plan. Password submissions pass through the website API to Supabase authentication. We do not put passwords or session tokens into advertising events.
- Enquiries: your name, phone number, optional email, selected service and message help us respond to the request you make. The contact checkbox covers that enquiry; it is not permission for unrelated promotional campaigns.
- Private application plans: the destination, citizenship, residence, qualification country, intended level/intake, checklist and notes you choose to save are linked to your signed-in account. These fields are used to restore your plan, not to make an automated admission or visa decision.
- Technical information: hosting and security systems may process request IP addresses, browser/request information and operational logs to deliver the website, diagnose failures and address abuse. An IP-derived hash is a security identifier, not a promise of anonymity.
- Optional measurement: when configured and permitted by your choices, analytics measures public page use and advertising measurement records public visits and successful enquiry or WhatsApp actions. Enquiry attribution can include standard campaign and advertising click identifiers only with marketing permission.
Please do not enter passport numbers, bank details, health information, private documents or another person’s sensitive information into general messages or planner notes. We will explain any separate document process before asking for those materials.
2. Local drafts and saved plans
The study-cost, room-cost, unit-price and statement tools work in the current page session. The device-only shared-expense tracker saves a group in this browser only when you choose to save; its files and device copies are not encrypted and do not synchronise. Account-based Glowbal Budgeting is separate, as explained below. The admissions CV editor also begins in page memory. CV text is not submitted to our application server by the editor. “Save on this device” explicitly stores a CV in this browser; it is not encrypted account storage or cross-device synchronisation. “Clear my CV” removes that saved browser copy and the current draft.
Downloaded CVs, text files and backups are under your control. Clearing the website or deleting an account does not erase files you downloaded or copies on another device. Avoid saving personal drafts on a shared computer. Browser restrictions can prevent saving; the tool reports failures rather than treating them as successful saves.
Exam starter answers and timers begin in page memory. “Save progress on this device” stores only that attempt in this browser until you delete it or clear site data; later changes need another explicit save. We do not send these answers or results to an account, counsellor or exam provider. “Delete this saved attempt” removes the selected browser copy and keeps other saved attempts and answers open in the current tab. Exported JSON copies remain under your control.
The application planner’s account save is different: its data is sent to Supabase and restricted to the verified account through application checks and database access policies. A general administrator with authorised operational access may still need to handle support, security or a valid deletion request. Public guide pages do not reveal private plans.
Glowbal Budgeting: personal and shared spaces
Glowbal Budgeting uses your existing account and active Via Glowbal membership. When you choose to set it up, we store your separate budgeting handle, display name, number format, invitation preference and the budgeting notice you acknowledged, with its version, fingerprint and time. We do not change or publish your existing shared-account username. Invitations are off by default. Enabling them allows another budgeting user who knows your exact handle to invite you; there is no public search directory and no invitation email is sent.
Personal spaces are visible only to their owner through the website and cannot be converted into shared spaces. A group member must accept an invitation before accessing the shared ledger, including earlier records. Within the group, members see chosen handles and display names, the space settings, entries, payer and share identifiers, dates, descriptions, amounts, categories and recorded repayments. Owners manage access and all entries; editors add entries and correct their own; viewers read and export. This does not expose emails, other spaces, assessment results or other-brand records. We use account and space permissions on each request; ordinary counselling staff have no special budgeting access.
These are manual records, not verified debts, bank balances or payment evidence. Each currency is stored separately with its correct decimal precision; number format does not convert currencies. We store monthly limits, current entry revisions, void status, membership/invitation actions and limited retry/security records to preserve consistent saves, detect conflicts and prevent misuse. Budgeting amounts are not sent to optional analytics or advertising. Private pages do not persist ledger data in browser storage. Downloaded copies are under the recipient’s control. Access-controlled account storage is not end-to-end encryption; restricted infrastructure administrators may need access for security, support or a valid rights request.
Turning invitations off cancels pending invitations to you; it does not leave groups already accepted. Leaving or removal stops future group access, but existing ledger records remain for other members and earlier downloads cannot be recalled. Inactive members use a generic label. Archiving spaces and voiding entries retain history; they do not erase it or reverse real payments. There is no automatic record expiry at present. You can download an authorised space; your account privacy export includes your own budgeting profile, acknowledgements, memberships, owned-space settings, invitations, activity and entries you created. A broader access or erasure request can be reviewed through account settings, including shared-record impacts and any specific legal hold.
Closing Via Glowbal membership stops access to budgeting spaces and new invitations without deleting the shared sign-in or other brands. It does not automatically settle money or delete the group’s history. An owner should arrange records and membership before closing because ownership transfer is not currently provided. Shared-account erasure requires a reviewed process; the database prevents an account deletion from silently cascading through everyone’s shared ledger. You retain account privacy-request and own-data export controls after closure.
Account-based test centre
The signed-in test centre is separate from the device-only starter exercises. Starting a timed paper saves your answers, question flags, immutable paper version, start and deadline times, submitted result, and the exact practice notice you acknowledged with its version, fingerprint and server time. These records let you resume, receive a marked result and review your work across devices. They are not sent to an exam provider and are not used for admission decisions or marketing.
Answers save automatically while connected. Only confirmed server saves received before the deadline are marked. The timer continues if you leave. The test centre does not use optional analytics or advertising tags. Counsellor pages do not display your test answers or scores; authorised operational administrators may need access for support, security or a valid rights request.
You can download and delete an individual attempt in your test centre, including after closing Via Glowbal membership. Deleting removes the live attempt, answers, result and attached practice-notice acknowledgement; it does not erase downloaded copies or instantly purge restricted provider backups. Attempts are retained for your practice history until you delete them or a reviewed retention/deletion action applies; there is no automatic expiry at present. The account export includes these linked test records. A general erasure or restriction request remains available in account settings. Starting does not enrol you in another brand or grant marketing permission.
University table downloads
The university comparison table is readable without giving an email. If you request the downloadable CSV, we save the email you enter, the fixed resource requested, request identifier, time and the exact download notice and privacy version you acknowledged. This supports delivery troubleshooting and prevents repeated automated requests. The file downloads in your browser; we do not automatically send an email, create an account or subscribe you to promotional contact.
The email entered on this guest form is not verified and is not evidence that you own that address. Guest download records are not automatically linked to a signed-in account and are excluded from the instant account export. Use our privacy contact route for access, correction, withdrawal or deletion of a guest record, with proportionate identity checks.
Download request records become eligible for deletion after 90 days. Expired records are removed on the next successful download request and during monthly maintenance, unless a documented legal hold applies. This is our service retention choice, not a claim that a law requires 90 days. The IP-derived rate-limit identifier is kept separately and cleaned after one day during the same cleanup. Provider backups can retain restricted copies according to their recovery lifecycle; a restore must respect completed deletion decisions.
Public guide questions and replies
Posting is available to people who confirm they are 18 or older, have a verified account and an active Via Glowbal membership. The age declaration is self-reported, not an age-verification service. We do not automatically publish your account name or email. We save your account identifier, chosen public name, question or reply, guide, posting time, adult confirmation and the exact publication notice and privacy-document reference you acknowledge. Your name, text and posting date become public only after moderation. Public posts may be read, indexed or copied by search engines and other people. Never include contact details, private documents, application numbers or another person’s personal information.
Pending and rejected submissions are visible to you and authorised Via Glowbal moderators. Only explicitly authorised owner moderators can publish, reject or remove posts; registration, a displayed profile role or another brand’s membership does not grant moderation power. Posting does not grant marketing permission or create a relationship with a university.
You can remove your own text and public name, including after closing Via Glowbal membership. A blank thread marker may remain to preserve other people’s replies. Removing a post clears its author link and text from the live discussion record; limited moderation history, notice evidence and a retry fingerprint can remain for security and accountability. Closing membership prevents new posts but does not silently erase earlier public contributions. The account export includes your still-linked discussion submissions. The export also includes linked moderation decisions and your posting-rate timestamps. Removed posts, internal staff or security records about other people and copies already collected by third parties are outside that instant export.
There is no automatic expiry for discussion posts, pending or rejected submissions, removed-post retry records or moderation logs in this release. Posting-rate timestamps are reduced to the previous 24 hours when you next submit; inactive rate records are not automatically purged. Posts remain until removed or a reviewed retention or rights action applies. Ask the team to review retention, restriction or erasure where appropriate; a public-content removal cannot instantly remove search caches or restricted provider backups. The contact page also accepts reports of inappropriate public content; identify the guide and question without adding sensitive documents.
4. Analytics, advertising and location
The website supports Google Analytics and the Meta Pixel when an account ID is configured. Analytics and marketing have separate choices. We do not supply CV text, planner notes, names, phone numbers, emails or authentication identifiers as tracking-event fields, and this implementation does not enable customer-list uploads or advanced matching. Pages with non-campaign search parameters or fragments are excluded from optional tags.
A hosting-network country code may select an office, currency or WhatsApp number. This is approximate country information, not GPS. VPNs or network routing can make it inaccurate, and you can change the display region. Region detection is not used to determine your legal status or eligibility.
Google and Meta process permitted requests under their own terms and settings. See Google’s privacy policy and Meta’s privacy policy.
6. Retention, security and children
Browser lifetimes are listed above. Server-side retention depends on the purpose, active service relationship, applicable record-keeping duties, dispute handling and security needs. A single deletion schedule for all historical records and provider backups has not been established in this website notice; ask for the schedule applicable to your record. Backups and downloaded copies are not instantly removed by clearing a browser.
We use identity verification, access controls, secure transport and restricted cookies to reduce unauthorised access. No website can promise absolute security. If you suspect account misuse, request a password reset and contact the team.
Public guides can be read without an account. Optional analytics and marketing are disabled unless the visitor confirms they are at least 18. A minor should involve a parent or guardian before requesting a personalised service or sharing personal records. Any required guardian verification and sensitive-data process must be addressed before that service begins.
7. Shared sign-in, service membership and your choices
The sign-in system also serves Dr Glowbal and may serve Irshad and PLS Foundation. An account identity does not automatically make you a client of every service. Via Glowbal counselling membership is an explicit choice. Its authorised team receives the contact details, enquiries and conversations assigned to this service. Other brands do not receive those records simply because the same person signs in.
Before joining the counselling workspace, you can preview the current terms and this notice. We record your actual terms agreement and privacy-notice acknowledgement only after verifying your account. Records contain the document version, exact document fingerprint, action and server time. An acknowledgement is evidence that the notice was presented; it is not blanket consent for every processing purpose. Google authorisation alone does not create a policy approval. Previous accounts without evidence are not retrospectively labelled as having agreed.
Optional Via Glowbal email and WhatsApp promotions have separate choices, off by default. You can withdraw permission in account settings. A preference does not authorise another brand to market to you. Replies to the service request you made are separate from promotional campaigns. Browser analytics and advertising measurement remain separate cookie choices.
8. Closure, erasure and record preservation
In Privacy & account, you can download your linked Via Glowbal records, manage marketing permission, close counselling membership and submit or cancel a review request. The instant export excludes other brands, device-only files, unlinked guest enquiries and internal security or staff information. It describes the included categories and its cutoff. A broader access request can be reviewed separately; an instant export is not a declaration that no other applicable records exist.
Closing Via Glowbal membership stops new counselling conversations, access to Glowbal Budgeting spaces and invitations, and switches off optional marketing for this service. It does not delete the shared sign-in, erase the historical workspace, delete your independently saved plan or cancel/refund a separate engagement. Re-signing in does not silently reopen the membership. You retain access to account privacy controls after closure.
An erasure request starts a reviewed process; submitting it does not itself erase data. The team must identify the responsible service, applicable law, purposes, obligations and any relevant dispute. Requests can receive different outcomes for different categories. A response explains the actual action or remaining review; it must not claim deletion merely because a case status changed. Shared-account deletion requires a separate dependency review, because several services may rely on the same identity.
Records required for a specific fiscal obligation or dispute may need restricted retention even if unrelated study notes can be removed. For a covered Indian GST registration, the ordinary rule for relevant books and records is 72 months from the annual-return due date for the relevant year, with additional rules for relevant proceedings. That is not a universal period for student profiles, CVs or messages. See CGST section 36. The applicable trigger and any hold must be assessed before setting a retention date.
A future restore from a restricted backup must respect completed deletion decisions before records return to ordinary use. Account controls cannot remove downloads from your devices or make an immediate promise about every provider backup. Ask for the category-specific retention basis, review date and outcome through your privacy request. No automated global-account deletion is offered by this website.
9. Your requests and applicable rights
Use your account privacy requests for linked Via Glowbal records, or contact the team using our contact page and identify your request as a privacy matter. Do not send passwords or identity documents in an initial request. We may need proportionate identity checks before discussing account records.
Depending on the law that applies, you may have rights to access, correct, delete or obtain a copy of information; withdraw consent; object to or restrict certain processing; and complain to an appropriate supervisory authority. Some requests are subject to lawful exceptions and record-keeping duties. Choosing essential cookies does not delete existing account records; request account or plan deletion separately.
Privacy rules depend on the processing and the responsible entity, not simply your citizenship or selected currency. Oman, India, EU/EEA and UK requirements may apply in different circumstances. We will update this notice when the service, relevant requirements or purposes change. Important new optional uses require an appropriate new choice.