Privacy Policy

1. Who we are and what this notice covers

The Business Analysis Office Limited (company number 11819929, registered in England and Wales), trading as The Business Analysis Office™, is the controller of the personal information processed through this website unless a particular service explains otherwise.

Registered office: 71–75 Shelton Street, Covent Garden, London, England, WC2H 9JQ, United Kingdom. General and privacy contact: info@thebaoffice.co.uk.

This notice primarily covers thebaoffice.co.uk, including its contact forms, BA Insider newsletter signup, website interactions and services requested through this site. Separate platforms such as training, recruitment or community websites may have their own privacy notices. Follow those notices when using those services.

UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), applies where relevant. Other laws may apply depending on your location and how we serve you.

2. Personal information we collect

Depending on how you interact with us, this can include:

• Enquiries: your name, email address, organisation (if provided), enquiry category, message and any information you choose to share in your communications.
• BA Insider newsletter: first name (where provided), email address, subscription preferences, registration and confirmation status, and records relevant to consent, unsubscribing and delivery.
• Service relationships: professional contact information, communications, engagement details, billing or contractual information and information necessary to deliver requested services, where applicable.
• Technical data: IP address, browser or device data, page requests, form activity, security and diagnostic logs, and cookie or similar technology information to the extent collected by the site or its service providers.

We usually collect this information from you directly, for example when you contact us, subscribe, or request a service. We may also receive relevant business information from authorised partners or publicly available professional sources when needed for an appropriate, lawful business purpose; we should inform you where the law requires.

Please avoid submitting sensitive personal information (such as health information or identification documents) through general enquiry or newsletter forms unless we specifically request it through an appropriate secure process.

3. Why we use your information and our lawful bases

Where legitimate interests apply, we consider the interests and rights of individuals. Consent to receive a newsletter is not required to submit a general enquiry or obtain information about our services. You may withdraw marketing consent at any time using an unsubscribe link or by contacting us.

We will not use contact form submissions as a blanket permission to send unrelated marketing.

4. BA Insider, subscription choices and direct marketing

When you subscribe to BA Insider, we use your details to administer the subscription and deliver newsletter communications concerning business analysis insights, practical techniques, professional learning and related updates. The signup process may include email confirmation to verify the request.

You can unsubscribe from email marketing using the unsubscribe mechanism included with a newsletter or by emailing info@thebaoffice.co.uk. We may retain minimal suppression records to respect your decision. Historical form submissions are not automatically treated as verified mailing-list permission.

Any optional usage or engagement analytics for newsletters should be configured in line with applicable consent and transparency requirements. Subscriber communications may include a contact postal address and an unsubscribe facility.

5. Sharing data and international transfers

Access to personal information is restricted to staff, contractors and suppliers who need it for authorised work. Depending on the service, these may include website hosting, security, email delivery and newsletter software, business administration, analytics, professional advisers, and regulators or authorities where disclosure is legally required.

The website currently uses WordPress-based contact and subscription services and related email delivery components. We review provider arrangements and aim to use appropriate security measures, contracts and access controls.

Some technology providers may process or access information outside the United Kingdom. Where a restricted international transfer occurs, we will assess and use an appropriate legal mechanism as required, such as adequacy arrangements or suitable contractual safeguards. For details of an applicable transfer and its safeguard, contact us.

Links to independent third-party websites lead to services with their own data practices, which we encourage you to review.

6. Retention, security and accuracy

We keep personal information only for as long as needed for the purposes described, including responding to requests, maintaining a service relationship, meeting legal or accounting obligations and resolving disputes. Retention is reviewed in light of the nature of the information, the relevant relationship, the applicable legal period and any deletion or objection request. You may ask us about the criteria applicable to your particular information.

Newsletter details are normally retained while you have an active subscription, subject to necessary unsubscribe or suppression records and legally required records. Enquiry information is reviewed against its continuing business purpose. Some records may need to be kept longer where required by law.

We use proportionate organisational and technical safeguards, such as access restrictions, updates, security monitoring and protected communication channels. No internet transmission or storage system can be guaranteed completely secure. If you suspect a security incident involving your information, contact us promptly.

We ask that information you provide is accurate and that you let us know if it needs correction.

7. Your rights

Depending on the circumstances and applicable law, you may have rights to be informed, access your information, correct inaccuracies, request erasure, restrict processing, request portability, object to certain uses, and withdraw consent. You may also have rights relating to solely automated decisions with legal or similarly significant effects.

Direct marketing: you can object to processing of your personal information for direct marketing at any time. We will respect this right where it applies.

To exercise a right, email info@thebaoffice.co.uk with enough information to identify your request. We may need to verify your identity where appropriate. We aim to respond within the applicable legal period; under the UK GDPR this is generally one calendar month, subject to lawful extensions or exceptions.

Individuals in other jurisdictions (including the European Economic Area, and where applicable US states or other regions) may have additional rights. We assess such requests under the law that applies to the relevant activity rather than assuming one global rule covers every visitor.

8. Cookies and similar technologies

Our website may use cookies or comparable technologies to operate essential site functions, secure forms, remember preferences, and—where enabled—support measurement or embedded services. Some cookies are essential to deliver a service you request, while others may need your prior consent under PECR or equivalent rules. For further detail, see our Cookie Policy and cookie preferences.

Non-essential technologies, such as optional analytics or advertising cookies, should not be activated before any required consent. Their use and duration depend on the active tools and settings. We are reviewing the website’s cookie inventory and consent controls; until that review is complete, this notice must not be understood as a claim that every optional cookie is configured correctly.

You can adjust browser cookie controls. For information about cookies used by this site, or to raise a concern about your choices, contact info@thebaoffice.co.uk.

9. Children’s privacy

Our main consulting and professional newsletter services are not directed at children. We do not intentionally seek children’s information through these forms. If we learn that a child has submitted information requiring deletion or additional safeguards, we will review and take appropriate action.

10. Decisions, changes and other notices

General website enquiry and newsletter signup forms are not designed to make solely automated decisions with legal or similarly significant effects. Separate recruitment, assessment or other services may have additional processes and notices where relevant.

We may update this notice to reflect changes to our services, suppliers, law and operating practices. The date at the top indicates the latest published revision. Material changes may be communicated through the site or other appropriate means.

11. Contact, complaints and further information

Privacy requests and questions: info@thebaoffice.co.uk. Postal correspondence: The Business Analysis Office Limited, 71–75 Shelton Street, Covent Garden, London, England, WC2H 9JQ, United Kingdom.

You can lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator. We would welcome the chance to address any concern directly first, but you do not have to contact us before raising a complaint with the regulator.