Privacy Policy

1. Introduction

London School of Business and Research (LSBR) is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal information in accordance with UK GDPR and the Data Protection Act 2018.

2. Information We Collect

Personal Information:

• Name, email address, and contact details
• Educational background and qualifications
• Payment and billing information
• Course progress and assessment results
• Communication records and support requests

Technical Information:

• IP address and device information
• Browser type and version
• Website usage patterns and analytics
• Cookies and similar technologies

3. How We Use Your Information

• Course Delivery: To provide educational services and support
• Communication: To send course updates and important notices
• Payment Processing: To process payments and manage accounts
• Quality Assurance: To improve our services and courses
• Legal Compliance: To meet regulatory and legal obligations
• Marketing: To send relevant educational content (with consent)

4. Legal Basis for Processing

• Contract: To fulfill our educational services
• Legitimate Interest: To improve services and prevent fraud
• Consent: For marketing communications
• Legal Obligation: To comply with educational regulations

5. Data Sharing and Third Parties

• We do not sell your personal information
• Data may be shared with educational partners and regulators
• Payment processors handle financial data securely
• IT service providers assist with technical support
• All third parties are bound by data protection agreements

6. Data Security

• All data is encrypted in transit and at rest
• Access is restricted to authorized personnel only
• Regular security audits and updates are conducted
• Incident response procedures are in place
• Data is backed up securely

7. Data Retention

• Course records: 7 years (regulatory requirement)
• Financial records: 6 years (tax requirement)
• Marketing data: Until consent withdrawal
• Technical logs: 12 months
• Data is securely deleted when no longer needed

8. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your data
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw marketing consent at any time

9. Cookies and Tracking

• Essential cookies for website functionality
• Analytics cookies to improve user experience
• Marketing cookies (with consent)
• You can manage cookie preferences in your browser
• Third-party cookies are clearly identified

10. International Transfers

• Data is primarily processed within the UK/EEA
• Any international transfers use approved safeguards
• Adequacy decisions or standard contractual clauses apply
• Transfers are documented and monitored

11. Children's Privacy

• We do not knowingly collect data from children under 16
• Parental consent is required for under-16s
• Age verification is conducted where necessary
• Children's data is protected with additional safeguards

12. Data Breach Procedures

• Breaches are reported to the ICO within 72 hours
• Affected individuals are notified promptly
• Incident response team handles all breaches
• Lessons learned are documented and implemented