Skip to main content
Legal

Privacy Policy

How Universal Consulting Service Group LLC collects, uses, and protects your information when you visit our website or use our educational consulting services for F-1 international students.

Last updated: September 6, 2026

Introduction

Universal Consulting Service Group LLC (“UCSG,” “we,” “us,” or “our”) is an educational consulting service that helps F-1 international students navigate U.S. university transfers, Day 1 CPT programs, change-of-status pathways, STEM OPT, and graduate program selection. We respect your privacy and are committed to protecting the personal data you share with us.

This Privacy Policy explains, in plain language, what information we collect when you visit our website, use our assessment tools, or submit a contact form — and how we use, share, and protect that information. It applies to all visitors to universalconsultingservices.com and to leads captured through our marketing channels (including Meta Lead Ads). By using our website or services, you agree to the practices described in this policy.

Information We Collect

We collect information in the following categories:

(a) Contact & assessment data you submit

When you fill out a contact form, booking form, or free assessment, you may provide:

  • Full name, email address, phone number, and WhatsApp number
  • Nationality and English proficiency level
  • Service interest (e.g., university transfer, Day 1 CPT, STEM OPT)
  • Your message or specific questions
  • Assessment answers, including your current F-1 situation, degree level, field of study, preferred study location and format (online / on-campus), budget range, OPT end date, target intake term, and current university

(b) Marketing attribution data

We capture UTM parameters and click identifiers from the referring URL — including utm_source, utm_medium, utm_campaign, gclid (Google Ads), and fbclid (Meta) — so we can understand which campaigns bring students to us.

(c) Usage & device data

Our analytics tools automatically record: pages viewed, clicks, scroll depth, session duration, IP address (truncated / anonymized where supported), browser type, operating system, device type, and approximate geographic region (country / region / city).

(d) Cookies & local storage

We use cookies and similar technologies (such as localStorage) to remember your consent choices, measure traffic, and improve our marketing. See the section below.

How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and provide personalized educational guidance
  • Match you with suitable universities, Day 1 CPT programs, or graduate programs
  • Send your lead to our GoHighLevel CRM so our consultants can follow up with you, schedule an assessment, and place you in our service pipeline
  • Send you notifications, follow-ups, and (with consent) marketing communications
  • Improve our website, content, and the students' experience
  • Measure and optimize the performance of our marketing and advertising
  • Comply with our legal, accounting, and reporting obligations

We do not sell your personal information to third parties.

Third-Party Services We Share Data With

We use trusted third-party services to operate our website, measure marketing, and manage our CRM. Each service has its own privacy practices. The table below summarizes each provider, what we send, and a link to their policy.

Meta (Facebook)

Ad attribution, lead measurement, and audience enrichment via Meta Pixel (client-side), Meta Conversions API (server-side), Facebook JS SDK, and Meta Lead Ads webhook.

Data sent: Page views, lead events (value: $50 USD), and SHA-256 hashed email / phone / name for advanced matching. Meta Lead Ads webhook also delivers form responses (name, email, phone, custom answers).

Privacy policy: facebook.com/policy.php

GoHighLevel (GHL)

Customer Relationship Management (CRM). We create/update contacts, attach intent tags and UTM custom fields, and place leads in a marketing pipeline. GHL also loads a chat widget and an external tracking script.

Data sent: Contact details (name, email, phone), intent tags, UTM data, custom fields (WhatsApp, nationality, English level, assessment answers), and lead source. Location ID: Gae7cVfCqZkpS7IWBUTL.

Privacy policy: gohighlevel.com/privacy-policy

Google (Tag Manager, Analytics 4, Ads)

Tag deployment, analytics, and conversion tracking. Uses Google Consent Mode v2 (default deny, granted on consent).

Data sent: GA4 measurement ID G-MHC25XBP3P — page views, events, session data, and anonymous client IDs. Google Ads receives click identifiers and conversion events. Cookies include _ga, _gid, and Google Ads conversion cookies.

Privacy policy: policies.google.com/privacy

Microsoft Clarity

Privacy-preserving session replay, heatmaps, and user behavior analytics. Project ID: y7hrmh5gu4.

Data sent: Mouse movements, clicks, scroll depth, and session recordings. No personally identifiable information is collected by default; Clarity does not link sessions to individual user identities.

Privacy policy: privacy.microsoft.com/privacystatement

Vercel Web Analytics

Aggregated, privacy-preserving website traffic analytics (page views, referrers) reported at the aggregate level only.

Data sent: Aggregated, non-personal page view counts and referring URLs. No cookies are set and no personal data is collected.

Privacy policy: vercel.com/legal/privacy-policy

Cloudflare Turnstile

Bot detection and abuse protection for our contact and lead forms, when enabled.

Data sent: A proof-of-work token and basic browser/environment signals. Cloudflare may set a cf_clearance cookie to remember verified visitors.

Privacy policy: cloudflare.com/privacypolicy

Cookies & Local Storage

We group cookies and local storage entries into three categories:

  • Strictly Necessary — required for the site to function (e.g., remembering your consent choice in the localStorage key ucsg_consent_v2). These cannot be disabled.
  • Analytics — help us understand how visitors use the site (e.g., GA4 _ga). Only set after you grant analytics consent.
  • Advertising — used by Meta Pixel (_fbp, _fbc) and Google Ads to measure ad performance. Only set after you grant advertising consent.

We implement Google Consent Mode v2: advertising and analytics storage default to denied and are switched to granted only after you accept them in our consent banner. If you reject non-essential cookies, only strictly necessary cookies remain.

Cookie / KeyPurposeDurationCategory
ucsg_consent_v2Stores your cookie consent preferences (analytics / advertising granted or denied). Required for the site to remember your choice.12 months (localStorage)Strictly Necessary
_ga, _ga_*Google Analytics 4 — distinguishes unique users and records page views / events.Up to 14 monthsAnalytics
_gidGoogle Analytics — distinguishes unique visitors for the day.24 hoursAnalytics
_fbp, _fbcMeta Pixel — first-party cookie for ad attribution and click identity (fbclid).Up to 90 daysAdvertising
Meta Pixel cookiesMeta Pixel — page-view, lead, and conversion events sent to Meta for ad measurement.Session / up to 90 daysAdvertising
Google Ads cookiesConversion tracking and remarketing for users who clicked a Google ad (gclid).Up to 90 daysAdvertising
clarity_* / CLIDMicrosoft Clarity — unique session identifier for replay & heatmap analytics.Up to 13 monthsAnalytics
cf_clearanceCloudflare Turnstile — remembers that a visitor passed a bot challenge.Up to 30 daysStrictly Necessary

Manage your cookie preferences

You can change your analytics or advertising consent at any time. Reopening the consent banner will not delete data already collected by our providers — see their retention policies below.

Data Retention

We retain contact and assessment submissions in our database for as long as needed to provide our educational consulting services and to respond to your inquiries. Records may also be retained in our GoHighLevel CRM (subject to GHL's retention policy) so our consultants can follow up with you across multiple semesters and intake cycles.

Analytics data is retained by each provider according to their own retention policies:

  • Google Analytics 4: approximately 14 months for user-level data
  • Microsoft Clarity: session replays retained for approximately 12 months
  • Meta Pixel & Conversions API: subject to Meta's data retention terms
  • Vercel Web Analytics: aggregated, non-identifiable data only

You may request deletion of your personal data at any time — see below.

Your Rights (GDPR / CCPA)

If you are a resident of the European Economic Area (EEA), the United Kingdom, Switzerland, or California (CCPA / CPRA), you have specific rights regarding your personal data. Subject to applicable law, you may:

  • Access — request a copy of the personal data we hold about you
  • Correct — ask us to fix inaccurate or incomplete data
  • Delete — request that we erase your personal data (“right to be forgotten”)
  • Restrict — ask us to limit how we use your data in certain circumstances
  • Object — object to our processing of your data (e.g., for direct marketing)
  • Data portability — receive your data in a structured, machine-readable format
  • Opt out of sale or sharing — we do not sell your data; you may opt out of “sharing” for cross-context behavioral advertising by disabling advertising consent

To exercise any of these rights, contact us at [email protected] or by phone at +1 (302) 893-5594. We will respond within the timeframes required by applicable law (typically 30 days).

If you are in the EU, EEA, UK, or Switzerland, you also have the right to lodge a complaint with your local data protection supervisory authority.

Children's Privacy

UCSG does not knowingly collect personal information from children under 13 years of age. Our services are directed to adult F-1 students and prospective graduate students. If you believe a child under 13 has provided us with personal data, please contact us at [email protected] and we will promptly delete that information.

International Data Transfers

UCSG is based in the United States. When you use our website, your personal data may be processed in the United States and in other countries where our service providers (Meta, Google, Microsoft, GoHighLevel, Cloudflare, Vercel) operate data centers. By submitting your information, you consent to these transfers.

For transfers of personal data from the EU, EEA, UK, or Switzerland to countries that have not received an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs), or another lawful transfer mechanism, and we require our providers to do the same.

Meta Lead Ads (Webhook)

If you submit your information through a Meta (Facebook / Instagram) Lead Ad form, Meta sends us your form responses — including your name, email, phone number, and any custom answers you provided — via a webhook to our secure endpoint. We store these responses and process them as a lead in the same way as a contact form submission.

This means your data is shared with us by Meta under Meta's own terms and your privacy choices on Meta's platforms. See Meta's Privacy Policy for more information about how Meta handles lead data.

Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal data. These include HTTPS encryption for all data in transit, secure storage of contact submissions in our database, and SHA-256 hashing of personal identifiers (such as email, phone, and name) before they are sent to Meta via the Conversions API.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.

Do Not Track Signals

We do not respond to browser-based “Do Not Track” (DNT) signals. Instead, we honor your privacy choices through Google Consent Mode v2 and our own cookie consent banner, which lets you granularly enable or disable analytics and advertising storage before any non-essential cookies are set.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information.

If we make material changes that affect your rights, we will provide a more prominent notice (such as on our homepage or via email to existing contacts, where appropriate).

Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or our handling of your personal data, please contact us:

Universal Consulting Service Group LLC

3707 74th Street, Suite 8 (3rd FL)
Jackson Heights, NY 11372, USA

© 2026 Universal Consulting Service Group LLC. All rights reserved.