Privacy Policy for Business Startup Network

Last Updated: 4th July 2026
Business Startup Network (hereinafter referred to as “BSN,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and disclose your personal data when you use our website, located at (the “Website” ), and all related services, including our online learning platform powered by Tutor LMS (the “Platform”), courses, ebooks, and other digital products (collectively, the “Services”).
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our Services, you agree to the collection and use of information in accordance with this policy.

1. Data Controller

Business Startup Network is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data protection practices, please contact us at:
info@businessstartupnetwork.co.uk
 

2. Personal Data We Collect

We may collect and process the following types of personal data about you:

2.1 Information You Provide to Us

  • Identity Data: Name, username, title.
  • Contact Data: Email address, billing address, telephone numbers.
  • Profile Data: Username, password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
  • Financial Data: Payment card details (processed by third-party payment processors, we do not store full card details).
  • Course Data: Information related to your progress, quizzes, assignments, and interactions within our Tutor LMS platform.
  • Communications Data: Your preferences in receiving marketing from us and our third parties, and your communication preferences.

2.2 Information We Collect Automatically

  • Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this Website.
  • Usage Data: Information about how you use our Website and Services, including courses viewed, pages visited, time spent on pages, and navigation paths.

2.3 Information from Third Parties

We may receive personal data about you from various third parties, such as:
  • Payment Processors: Data from payment gateways (e.g., Stripe, PayPal) regarding your purchases.
  • Analytics Providers: Data from analytics providers (e.g., Google Analytics) regarding your usage of our Website.
  • Social Media Platforms: If you interact with us on social media, we may receive information about your profile.

3. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
  • To Provide and Manage Services: To register you as a new user, process your orders, manage your account, and deliver the courses and ebooks you have purchased.
  • To Improve Our Services: To analyse how you use our Services, troubleshoot problems, and improve the functionality and user experience of our Website and Platform.
  • To Communicate with You: To send you service-related communications, updates, marketing messages (where you have consented), and respond to your inquiries.
  • For Marketing Purposes: To send you information about our other courses, products, and services that may be of interest to you, where you have provided consent or where we have a legitimate interest.
  • To Ensure Security: To protect our Website and Services from fraud, abuse, and other security threats.
  • To Comply with Legal Obligations: To meet our legal and regulatory requirements.

4. Lawful Basis for Processing

We rely on the following lawful bases for processing your personal data:
  • Contract: Where processing is necessary for the performance of a contract with you (e.g., to deliver a course you purchased).
  • Legitimate Interests: Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., to improve our Services, for marketing purposes where appropriate).
  • Consent: Where you have given us explicit consent to process your personal data for a specific purpose (e.g., for certain marketing communications).
  • Legal Obligation: Where processing is necessary to comply with a legal or regulatory obligation.

5. Disclosure of Your Personal Data

We may share your personal data with the following categories of recipients:
  • Service Providers: Third-party vendors who perform services on our behalf, such as payment processing, hosting, analytics, and email delivery. These service providers are contractually obligated to protect your data and only use it for the purposes for which it was disclosed.
  • •Instructors: If you enrol in a course, relevant data (e.g., your name, progress) may be shared with the instructor of that course to facilitate learning and support.
  • Legal and Regulatory Authorities: Where required by law or to protect our legal rights.
  • •Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.
We do not sell your personal data to third parties.

6. International Transfers

Some of our third-party service providers may be based outside the UK or European Economic Area (EEA). Whenever we transfer your personal data out of the UK/EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
  • •We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission or UK government.
  • Where we use certain service providers, we may use specific contracts approved for use in the UK/EEA which give personal data the same protection it has in the UK/EEA.

7. Data Security

We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

9. Your Legal Rights (UK GDPR)

Under certain circumstances, you have rights under data protection laws in relation to your personal data:
  • The right to be informed: About how your personal data is being used.
  • The right of access: To your personal data (commonly known as a “data subject access request”).
  • The right to rectification: To have inaccurate personal data corrected.
  • The right to erasure: To have your personal data deleted in certain circumstances.
  • The right to restrict processing: To request the suspension of processing of your personal data in certain circumstances.
  • The right to data portability: To request the transfer of your personal data to another party.
  • The right to object: To processing of your personal data where we are relying on a legitimate interest.
  • Rights in relation to automated decision making and profiling: The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
If you wish to exercise any of these rights, please contact us at [Your Support Email Address]. You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues ().

10. Cookies

Our Website uses cookies to distinguish you from other users of our Website. This helps us to provide you with a good experience when you browse our Website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookie Policy [Link to your Cookie Policy, if separate, or integrate here].

11. Third-Party Links

Our Website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy policy of every website you visit.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. You are advised to review this Privacy Policy periodically for any changes.
 
 
Note: This is a general template and should be reviewed by a legal professional to ensure it fully complies with all applicable laws and accurately reflects your specific business practices. I am an AI and cannot provide legal advice.