Who is responsible
The controller is The Business Analysis Office Limited, registered in England and Wales, No. 11819929. Contact info@thebaoffice.co.uk or write to our registered office at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ.
Information we use
We use account names and email addresses; optional organisation and job details; event, attendee and booking details; payment references and payment status; attendance records; support correspondence; and the limited technical/session information needed to secure the service. WordPress manages passwords. Stripe processes card details, and we do not store full card numbers or card security codes.
If you book for colleagues, give them this notice and provide only information needed to arrange their places. Use support or access notes for necessary adjustments; avoid sending medical records or unnecessary sensitive details through booking forms.
Why and on what basis
We process information to perform the booking contract, provide training, maintain accounts, deliver confirmations and reminders, and respond to support needs. We use necessary information to meet legal and accounting obligations. We have legitimate interests in protecting the service, preventing misuse and maintaining proportionate business records. Optional marketing or special-category processing, where relevant, requires its own appropriate basis and is not bundled into booking acceptance.
Your optional newsletter choice
You can separately choose to receive The BA Office newsletter, training updates and marketing. This choice is optional and does not affect account, booking, payment or reminder emails. We record the wording, time and source of your choice and verify access to your account before sending your name, email address and consent record to the newsletter on thebaoffice.co.uk. The main mailing list asks you to confirm your subscription by email. Existing unsubscribe and delivery restrictions are preserved. Use the unsubscribe link in a newsletter or contact us to change your choice.
Who receives it
Authorised administrators and assigned trainers receive information needed for their work. Trainees can access their own bookings; a group attendee is not entitled to see other attendees’ private contact or financial information. Service providers may include our hosting and booking infrastructure, WordPress/mail transport, Stripe, and an online meeting provider such as Zoom or Google when used for your event. Providers receive only information needed for their role.
Information may be processed outside the UK. Where restricted transfers occur, the applicable lawful safeguards must be used. We do not sell booking information. Customer information is not published in the public programme.
Retention and security
We retain information for account operation, event delivery, support and the period reasonably needed to address disputes and meet legal/accounting obligations. Information that is no longer needed should be deleted or anonymised. A deletion request may not remove financial records that must be retained by law.
The service uses role restrictions, protected server connections, secure cookies and encrypted integration credentials. No online service can promise absolute security. Tell us promptly if you suspect an account or booking-information issue.
Your rights and contact
Depending on the circumstances, you can request access, correction, deletion, restriction, portability or object to processing. You can withdraw consent where processing relies on it, without affecting earlier lawful processing. Email info@thebaoffice.co.uk; we may need proportionate identity verification before releasing private information.
You may complain to the UK Information Commissioner’s Office. Contacting us first may help resolve the issue but is not a condition of that right.
Related notices
See our Cookie Policy for browser storage and external resources. This notice covers the booking service; other BA Office services may have their own privacy notices.