Application data notice

Your application data: what we collect, who sees it, how to delete it

This notice covers the data you give us when you apply to a university through UniNorth. It exists so you know exactly what happens to your documents before you tick the consent boxes. Version: apply-auth-v2 / kvkk-consent-v1, published 2026-07-13. Türkçe aydınlatma metni.

Who is responsible

The data controller is UniNorth, Nicosia, North Cyprus (contact: admins@uninorth.net). We process application data under KKTC Law 89/2007 on the Protection of Personal Data. If you are located in Turkey, Turkish Law 6698 (KVKK) also applies to you; if you are in the EU/UK, the GDPR does.

What we collect when you apply

  • Identity and contact: name, email, phone or WhatsApp number, nationality, birth year, current country.
  • Your program choice: university, program, level, intake.
  • Documents: passport data page, diplomas or degree certificates, transcripts, and any optional files (English certificate, CV) you upload.

We deliberately collect no more than the university needs to assess your application — no full birth date, no health data, no financial records.

Why, and on what legal basis

One purpose: preparing and filing your application with the university you chose, and keeping you informed about it. The legal bases are the service you request from us (you ask us to file the application) and your explicit consent for sharing the data with the university, which you give with a separate checkbox at the review step.

Who receives your data

  • The university you selected — and only that university. We never send your file to other universities, agencies, or advertisers.
  • Infrastructure sub-processors that store or move the data for us: Supabase (database and document storage, Frankfurt, Germany), Vercel (hosting, USA), Resend (email delivery, USA). They process data on our instructions only.

Transfers abroad

Your data is stored in the EU (Frankfurt) and shared with your chosen university in North Cyprus. If you are applying from Turkey or elsewhere, this counts as a transfer of your data abroad — which is why we ask for your explicit consent before you submit. Without that consent we cannot process the application.

How long we keep it

  • Applications that never confirm their email: deleted after 12 months.
  • Closed or unsuccessful applications: deleted 12 months after closing.
  • Enrolled applications: kept while needed for the enrollment record, then deleted.
  • You can delete your application yourself at any time — see below.

Your rights

You can access what we hold, correct it, or delete it — at any time, free of charge:

  • Self-service: open your status page (reference code + email) to see your data, replace documents, or permanently delete the application and every uploaded file.
  • By email: write to admins@uninorth.net with the subject “Data request” and your reference code. We respond within 7 days.

Deleting your application does not affect anything already filed with the university — for data they hold, the university's own privacy policy applies.

Marketing is separate

The optional third checkbox lets us email you practical updates for your intake. It is never required, and every such email has an unsubscribe link. Leaving it unticked changes nothing about your application.