Privacy Policy

Last updated: 29 January 2025

1. Data Controller Information

Urban MBA (“we,” “our,” or “us”) is the Data Controller for the personal data collected through www.urbanmba.co.uk. We are registered with the Information Commissioner’s Office (ICO) [Insert your registration number].

2. Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Contract: To fulfill our contractual obligations for purchases, bookings, and course enrolments
• Consent: For marketing communications and newsletter subscriptions
• Legitimate Interest: To improve our services and website functionality
• Legal Obligation: To comply with UK and EU law

3. Personal Data We Process

3.1 Data You Provide

• Full name and contact details
• Account credentials
• Payment information (processed via secure payment processors)
• Course participation and progress data
• Booking and appointment details
• Marketing preferences

3.2 Automatically Collected Data

• IP address and location data
• Browser type and settings
• Device information
• Cookie data
• Usage analytics

4. Special Category Data

We do not intentionally collect or process special category data (sensitive personal data). Please do not provide such information through our website.

5. Data Processing Activities

5.1 E-commerce (WooCommerce)

• Purpose: Process purchases and manage customer accounts
• Data Retained: Order history, payment details, shipping information
• Retention Period: 7 years (to comply with UK tax law)

5.2 Booking System (Amelia)

• Purpose: Manage appointments and send reminders
• Data Retained: Booking details, contact information
• Retention Period: 2 years from last booking

5.3 Learning Management (Tutor LMS)

• Purpose: Deliver courses and track progress
• Data Retained: Course participation, assessment results
• Retention Period: Duration of account plus 2 years

5.4 Marketing (Mailchimp)

• Purpose: Send newsletters and marketing communications
• Data Retained: Email address, subscription preferences
• Retention Period: Until consent withdrawal

6. Your Data Protection Rights

Under GDPR and UK data protection law, you have the following rights:

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure (‘right to be forgotten’)
• Right to restrict processing
• Right to data portability
• Right to object
• Rights related to automated decision-making including profiling

To exercise these rights, please contact our Data Protection Officer at [Insert email].

7. International Data Transfers

We may transfer your data to countries outside the UK/EEA. When we do, we ensure appropriate safeguards are in place through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Binding Corporate Rules

8. Cookie Policy

We use the following types of cookies:

• Strictly Necessary: Required for website functionality
• Performance: To analyse site usage
• Functional: To remember your preferences
• Targeting: For marketing purposes

You can manage cookie preferences through your browser settings.

9. Data Security

We implement appropriate technical and organisational measures including:

• Encryption of personal data
• Regular security assessments
• Staff training on data protection
• Access controls and authentication
• Regular backup procedures

10. Data Breaches

In the event of a personal data breach, we will:

• Notify the ICO within 72 hours if required
• Inform affected individuals if there’s a high risk
• Document all breaches and our response

11. Third-Party Processors

We use the following processors:

• WooCommerce (e-commerce platform)
• Amelia (booking system)
• Tutor LMS (learning management)
• Mailchimp (email marketing)
• Stripe – payment processor

Each processor has been vetted for GDPR compliance and has signed appropriate Data Processing Agreements.

12. Children’s Data

We do not knowingly process data of individuals under 13 years of age. If we become aware that we hold such data, we will take appropriate steps to delete it.

13. Changes to This Policy

We review this policy regularly and will post any updates on this webpage. Significant changes will be notified via email where possible.

14. Complaints

You have the right to lodge a complaint with the ICO (www.ico.org.uk) if you believe we have not handled your data in accordance with the law.

15. Contact Information

Data Protection Officer
Urban Mba Ltd
3 wenlock street, London N1 7NT
Email: info@urbanmba.co.uk
Tel: 02038181069

16. Additional Information for EU Residents

If you are in the EU, you may also contact our EU representative:
[Insert EU representative details if applicable]