Data Protection & Your GDPR Rights
A plain-English guide to your rights over your personal data when you use YStudy, and how to exercise them.
Last updated: 1 September 2026YStudy is operated by Dinnovi Ltd
YStudy is a brand owned and operated by DINNOVI LTD, a private limited company registered in England and Wales under company number 12453420.
Registered office: Birmingham Business Centre Ltd, Quadrant Court Room 6, 51/52 Calthorpe Road, Edgbaston, Birmingham, England, B15 1TH.
Unless stated otherwise, βYStudyβ, βweβ, βusβ and βourβ in this policy mean Dinnovi Ltd when operating the YStudy brand. Where Dinnovi Ltd determines the purposes and means of processing personal data through YStudy, Dinnovi Ltd is the data controller.
Your rights at a glance
YStudy (Dinnovi Ltd) is the data controller for the personal information you provide through our services. Under the UK GDPR and the Data Protection Act 2018 you have the rights below. They are free to use, and using them will never mean you get a worse service from us.
The right to be informed
You can know what data we hold, why, and who we share it with. That is what our Privacy Policy and Cookie Policy are for.
The Right of Access
You can ask for a copy of the personal data we hold about you (a "subject access request"), and information about how we use it. We provide this free of charge and normally within one month.
The right to rectification
If any information we hold about you is wrong or incomplete β a misspelled name, an old phone number, an out-of-date qualification β you can ask us to correct it. You can also update much of this yourself in your YStudy account.
The Right to Erasure
You can ask us to delete your personal data ("the right to be forgotten") in certain circumstances β for example where it is no longer needed, or where you withdraw consent and there is no other basis for keeping it. Sometimes we must keep certain records to meet a legal obligation (for example accounting records), and we will explain if that applies.
The right to restrict processing
You can ask us to pause using your data in certain situations β for example while we check the accuracy of data you have challenged.
The right to object
You can object to processing based on our legitimate interests, and to direct marketing. If you object to marketing we will stop straight away. If you object to other processing we will stop unless we have compelling legitimate grounds that override your interests.
The right to data portability
Where we process data you provided by automated means on the basis of consent or a contract, you can ask to receive it in a common, machine-readable format, or have it sent to another provider where technically feasible.
The right to withdraw consent
Where we rely on your consent β for example marketing, advertising cookies, or processing sensitive information β you can withdraw it at any time. Withdrawing consent does not affect processing that already took place, and does not affect processing we carry out on a different lawful basis.
Automated decisions and profiling
Our online tools (such as the eligibility checker and finance calculator) give you indicative guidance to help you understand your options β they do not make a final decision about you. Decisions about funding are made by Student Finance England, and admissions decisions are made by universities. We do not carry out automated decision-making that produces legal or similarly significant effects about you without a lawful basis and appropriate safeguards.
How to Make a Request
Contact us at privacy@ystudy.co.uk, through our contact page, or by writing to Dinnovi Ltd at the registered office shown above. To protect your data, we may need to verify your identity before we act. We respond to requests within one month; if a request is particularly complex, we may extend this by up to two further months and will tell you if so.
Complaints
If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator: ico.org.uk/make-a-complaint, helpline 0303 123 1113.
