Trust & safety, The Business School
For Heads For Teachers Curriculum Licensing Resources FAQAbout Join the waitlist Department case
Trust & safety

What we process, and what happens to it.

Students join with a PIN and a nickname they choose, and they write answers during the session. Those answers are marked by a language model so you get a report. Everything is deleted after 30 days.

How students join

A student opens a link, types a 6-digit PIN and picks a nickname. That nickname is what the class sees on the leaderboard.

What we process about a student

The nickname they choose, the decisions they make in the game, and the answers they write. In the connected version of Founder's Hour a student is identified by first name and last initial instead of a nickname.

Teacher in control

The teacher starts and paces every session, controls what appears on the projector, and ends the session and its data at any time.

Age-appropriate content

The simulation is a UK business context, pricing, VAT, hiring, finance. No chat between strangers, no external links, no advertising.

The facts your DPO will ask for

Marking by a language model

The answers a student writes are sent to a language model so that it can mark them and the teacher gets a report. They are not used to train the model.

Who is responsible

The school is the data controller. TBS Education Ltd Oy is the data processor, acting on the school’s instructions under a written agreement.

Sub-processors

Netlify for hosting, in the US and globally. Neon for the database, in the EU, Frankfurt. OpenAI for marking written answers.

How long it is kept

Student data and game states are deleted after 30 days. Waitlist and enquiry form data is kept for 24 months.

Documents for your data protection officer

Ready to download and forward. The DPA is signable as it stands.

Data Processing AgreementPDF · Web
Data Protection SummaryPDF · Web
Privacy PolicyPDF · Web
Internal Data PoliciesPDF · Web
School IT one-sheet, network requirementsPDF · Web

Full detail on what we process is on the data protection page. Your school completes its own data protection impact assessment, because the school is the controller for session data. Ask us and we will send the information you need to fill it in. TBS Education Ltd Oy (company number 3614159-3) is registered with the UK Information Commissioner’s Office, ICO registration ZC133810, publicly verifiable at ico.org.uk.