PRIVACY POLICY
SBA TRAINING ACADEMY

​
 

1. PURPOSE

SBA Training Academy is committed to protecting the privacy, confidentiality, integrity, and security of personal information processed through its educational, operational, administrative, and business activities.

This Privacy Policy establishes the principles and responsibilities for collecting, using, storing, sharing, retaining, and protecting personal data and applies across the organisation.

​

SBA Training Academy recognises the importance of maintaining trust and ensuring that student, staff, customer, and stakeholder information is handled responsibly and securely.

​

1. SCOPE

This policy applies to:

• Students and applicants

• Staff and contractors

• Website users

• Training participants

• Business contacts

• Third-party service providers

• Any personal information processed by SBA Training Academy

This policy applies to both electronic and physical information.

​

1. OUR PRIVACY PRINCIPLES

SBA Training Academy is committed to ensuring information is:

• Collected lawfully and fairly

• Used only for legitimate business and educational purposes

• Accurate and maintained appropriately

• Accessed only by authorised personnel

• Protected against unauthorised disclosure or misuse

• Retained only where necessary

• Deleted securely where no longer required

​

1. TYPES OF INFORMATION WE MAY COLLECT

Information may include:

Student Information:

• Name

• Contact details

• Course applications

• Attendance information

• Identification documents

• Qualification and enrolment records

​

Operational Information:

• Communications

• Administrative records

• Business correspondence

​

Technical Information:

• Website activity

• System access information

• Device and usage information

​

1. HOW WE USE INFORMATION

​

Information may be used to:

​

• Deliver education and training services

• Process applications and enrolments

• Manage student support

• Respond to enquiries

• Maintain records

• Meet legal and regulatory obligations

• Improve services

• Protect business operations and information security

​

DATA PROTECTION AND SECURITY

​

SBA Training Academy treats student and organisational data protection as a core responsibility.

We apply reasonable administrative and technical measures to reduce the risk of unauthorised access, loss, misuse, alteration, or disclosure of information.

​

These measures may include:

​

• Access limited to authorised personnel

• Individual account credentials

• Password management controls

• Secure storage procedures

• Controlled access permissions

• Internal operational procedures

• Monitoring of account access where appropriate

• Business continuity and recovery arrangements

• Secure handling and disposal practices

​

All personnel are expected to maintain confidentiality and access information only where required for their role.

​

DATA STORAGE AND RETENTION

​

Information may be stored using approved operational platforms and business systems.

Data is retained only for legitimate educational, operational, contractual, regulatory, and legal purposes.

Where appropriate, backup copies may be retained to support business continuity and recovery requirements.

When information is no longer required, SBA Training Academy takes reasonable steps to securely remove or dispose of records.

​

SHARING OF INFORMATION

​

SBA Training Academy does not sell personal information.

Information may be shared where necessary with:

​

• Service providers

• Educational partners

• Regulatory authorities

• Professional advisers

• Operational and technology providers

​

Third parties are expected to maintain appropriate standards of confidentiality and security.

​

INCIDENT MANAGEMENT

​

Any suspected loss, unauthorised access, disclosure, or misuse of information should be reported internally without delay.

Incidents are assessed and managed through organisational procedures designed to contain impact, restore operations, and implement corrective actions where required.

​

INDIVIDUAL RIGHTS

​

Individuals may request, where applicable:

​

• Access to their information

• Correction of inaccurate information

• Restriction of processing

• Deletion where appropriate

• Clarification regarding how information is used

​

Requests should be submitted through official communication channels.

​

COMPLIANCE

​

SBA Training Academy operates with regard to applicable UK data protection obligations and organisational requirements.

The organisation is committed to maintaining responsible information management practices and ongoing review of privacy controls.

​