Data protection — The Business School
For Heads For Teachers Curriculum Licensing Resources FAQ Join the waitlist Department case
Data protection

Data minimisation, in practice.

We process the least data needed to run a session and reply to an enquiry — and no more. This page sets out what that means under UK GDPR.

Who we are

The data controller is TBS Education Ltd Oy (company number 3614159-3), operator of thebusiness.school, registered with the UK Information Commissioner’s Office — ICO registration ZC133810, publicly verifiable on the ICO register at ico.org.uk. Contact us through the enquiry form for any data protection request.

Students

Running a classroom session requires no student accounts and no student personal data. Students join with a PIN using team or first-name labels chosen by the teacher. We do not ask students for emails, surnames or other identifying details.

Teachers and enquiries

When you request a demo or a quote, we process the name, school email and role you provide, plus the setting you describe. The lawful basis is legitimate interest — responding to a request you have made — and, where you opt in, consent for further contact.

Retention

Enquiry details are kept only as long as needed to answer you and, where relevant, to administer a pilot or licence. Session data is under the teacher’s control and can be ended at any time. We do not sell data or use it for advertising.

Your rights

You have the usual UK GDPR rights — access, rectification, erasure, restriction, objection and portability. To exercise any of them, or to request a data processing agreement for your school or MAT, contact us through the enquiry form.