OnaBeyond - University Partner Terms & Conditions and Data Processing Agreement

Last Updated: August 2026

These Terms and Conditions ("Terms") govern your institution's ("University", "Institution", "You") access to and use of the OnaBeyond platform. By registering and passing the verification process, you agree to these Terms.

Part 1: Terms of Service

1. Platform Verification & Access

• Verification: Access to student data and matching campaigns is strictly limited to verified universities. OnaBeyond reserves the right to accept, reject, or revoke verification status at our sole discretion based on our internal vetting criteria.
• Account Security: The Institution is responsible for all activity that occurs under its accounts. You must ensure that only authorized admissions or recruitment staff hold accounts.

2. Acceptable Use of the Platform

You agree to use the OnaBeyond platform exclusively for the purpose of identifying, contacting, and recruiting prospective students for your institution's educational programmes and scholarships.
You agree NOT to:

• Scrape, bulk download, or extract student profiles for purposes outside of the immediate recruitment campaign.
• Resell, share, or broker student data to third parties, educational agents, or other institutions.
• Spam students or send unsolicited communications unrelated to their explicitly stated study preferences.

3. Suspension and Termination

OnaBeyond monitors platform usage. We reserve the right to immediately suspend or permanently delete an Institution's access if we detect abusive messaging, unauthorized data sharing, or a breach of these Terms.

Part 2: Data Processing Agreement (GDPR Compliance)

This section governs the data protection obligations between OnaBeyond (the Platform) and the Institution (the University) regarding Student Data.

1. Roles of the Parties

• Independent Controllers: When OnaBeyond provides the Institution access to Student Data (e.g., when a student is discovered via a campaign or accepts an invitation), both OnaBeyond and the Institution act as Independent Data Controllers under the GDPR.
• The Institution is solely responsible for establishing its own lawful basis for processing the Student Data once it is acquired from the platform (e.g., Legitimate Interests for recruitment, or taking steps prior to entering a contract).

2. Institution's Data Protection Obligations

By accessing Student Data on OnaBeyond, the Institution warrants and agrees to:

• Compliance: Process Student Data in full compliance with the GDPR, applicable Data Protection laws, and the Privacy and Electronic Communications Regulations (PECR).
• Purpose Limitation: Process the Student Data only for the purpose of university admissions, recruitment, and scholarship allocation.
• Data Minimisation & Retention: Retain the Student Data only for as long as necessary to fulfil the recruitment purpose, and securely delete it thereafter in accordance with your institution's retention policies.
• Security: Implement appropriate technical and organisational measures to protect Student Data against unauthorized or unlawful processing, accidental loss, destruction, or damage.
• Confidentiality: Ensure that all staff authorized to process Student Data have committed themselves to confidentiality.

3. Data Subject Rights

• If a student exercises their right to erasure ("Right to be Forgotten") directly with the Institution, the Institution must comply independently.
• If a student deletes their OnaBeyond account, they disappear from the platform's active network. If the Institution has already exported or stored that student's data in their own CRM, the Institution is responsible for managing any direct data deletion requests from the student.

4. Personal Data Breaches

In the event of a personal data breach affecting Student Data obtained from OnaBeyond, the Institution must:

• Notify the Information Commissioner's Office (ICO) where required by law.
• Promptly notify OnaBeyond at hello@onabeyond.com if the breach originates from a vulnerability on the OnaBeyond platform or involves compromised OnaBeyond credentials.

5. International Data Transfers

If the Institution is located outside the UK or the European Economic Area (EEA), you agree to process Student Data in accordance with standard data protection clauses (e.g., the UK International Data Transfer Agreement or Addendum) or ensure an adequacy decision applies.