Compliance by design
We will handle children's data and identity documents. Later lines of business are regulated. We plan for both, and we take advice.
- UK GDPR, PECR and the ICO Children's Code
- Our users will include under-18s, so the Children's Code applies to the service we build. Before accepting application documents, we plan to complete a Data Protection Impact Assessment, confirm our ICO registration obligations, and implement high-privacy defaults, data minimisation and document retention controls. Contracts for under-18s will be made with a parent or guardian. Website analytics (Google Analytics 4) and campaign measurement (Meta Pixel) are strictly blocked by default until explicit, granular consent is provided through our cookie banner, with separate choices for each category. Users may review or change consent at any time. Our privacy and cookie notice explains current website processing, the two-year retention policy and deletion requests at dpo@graduateanywhere.com.
- Immigration advice
- In the UK, immigration advice may only be given by advisers registered with the Immigration Advice Authority or otherwise authorised. Advice on EU residence permits may be regulated in the destination country. Graduate Anywhere will not give immigration advice for any country and will signpost official government sources until a compliant delivery model, with appropriately regulated advisers, is in place.
- Consumer credit
- Introducing students to lenders for reward is credit broking under the Regulated Activities Order and requires FCA authorisation or appointed-representative status. It is not in our forecast. Any future finance line would need authorisation, professional advice on its interaction with SEIS qualifying-trade rules, and would remain immaterial to the business.
- Consumer law, payments and liability
- Fourteen-day cancellation rights under the Consumer Contracts Regulations, with explicit consent where work starts immediately. Payments are not live. We plan to use Stripe Checkout and will confirm our PCI-DSS responsibilities before accepting payments. Written terms will make clear that we prepare and guide, that the applicant submits and remains responsible for accuracy, and that admission is never guaranteed. Professional indemnity insurance before the first paying customer.
Regulatory statements here are our understanding and are flagged for professional review; they are not legal advice. Sources: ICO, Introduction to the Children's Code · GOV.UK, IAA registration explained · RAO article 36A, credit broking · FCA, consumer credit brokers · HMRC VCM3010, excluded activities.
Risks we are watching
Demand is unprovenHigh
We have no waitlist, pilot or survey data. The first evidence will come from two or three partner sixth forms this winter and from the 2027 pilot. If families who can fund a degree abroad turn out to be fewer than assumed, Phase 1 volumes fall and the seed round becomes harder.
Universities and portals may not accept third-party-prepared applications as we expectHigh
National portals require the applicant's own account. Our model keeps the student as submitter and us as preparer. If a route proves unworkable, we drop that corridor rather than work around the rules.
The introductory price does not cover fully loaded costHigh
At £49, contribution after acquisition is close to zero once VAT applies. The price will be reviewed after the pilot; the financials above show the effect of £99 and £149. Partner fees are the other lever and depend on agreements that do not yet exist.
Funding and timing of the roundHigh
Advance assurance timing and crowdfunding-platform acceptance are outside our control. If the round slips past spring 2027, the pilot shrinks to a self-funded handful and Phase 1 moves a year.
Residence rules for UK nationals tightenMedium
Three pilot corridors rather than one, and guidance drawn only from official government publications. A later inbound product would be uncorrelated with UK-outbound policy.
Competitors extend into UK outboundMedium
Global Admissions or a national portal could add UK-qualification mapping. Our defence is depth in a few corridors, relationships with schools, and transparent pricing; none of these is proprietary.
Liability for errorsMedium
A wrong grade conversion or missed deadline could cost a student a place. Mitigations: verified matrix with university confirmation for anything not published, student confirmation at each step, clear terms, and professional indemnity cover before launch.
Single founder, still a student until 2027High
The founder graduates in mid-2027. The round funds contracted engineering and one operations hire; a technical co-founder and an advisory board covering admissions, data protection and FCA matters are being sought.