London Business School website privacy policy

London Business School (LBS) is committed to protecting your personal information when you use our services. This Privacy Policy relates to us using any personal information that we collect from you via the following online services:

• any LBS website that links to this Privacy Policy
• social media or official LBS content on other websites
• mobile device applications (apps).

It also relates to us using any personal information that you provide by phone, SMS,
email, in letters and other correspondence, and in person.
This Privacy Policy explains the following: 

• who we are what information we may collect about you
•  how we will use information we collect about you
• how long we hold information about you
• the legal basis for processing your information
• when we may use your details to contact you
• whether we will disclose your details to anyone else
• your rights regarding the personal information you provide to us
• the use of cookies on our websites and how you can reject them
• what happens when you download a LBS app.

LBS is committed to safeguarding your personal information. Whenever you provide
such information, we are legally obliged to use it in line with all applicable laws concerning the protection of personal information (these laws are referred to collectively in this Privacy and Cookies Policy as the ''data protection laws''). LBS websites contain hyperlinks to websites owned and operated by third parties. These third-party websites have their own privacy policies, and also likely use cookies, so we urge you to review them. They govern the use of personal information you submit when visiting these websites, which may also be collected via cookies. We do not accept any responsibility or liability for the privacy practices of such third-party websites and your use of such sites is at your own risk.

We will hold your personal information on our systems for as long as necessary for the relevant activity, or as long as is set out in any relevant contract you hold with LBS.

If you’ve indicated an interest in taking one of our programmes, we’ll retain your data for a period of two years from the point that you last engage with us.

We offer regular emails to let you know about our products and services and to inform you of the latest LBS research and insights. We may also invite you to take part in surveys about our products and services or issues affecting LBS.

LBS may personalise the message content based on any information you provide to us and your use of our platforms.

You can update your communications preferences and stop receiving any future emails at any time by following the convenient links located at the bottom of our emails. Requests submitted in this manner are processed and effective immediately.

If you believe you have received unwanted, unsolicited emails sent by or purporting to be from LBS, please forward a copy of that email with your comments to our Data Protection Officer dpo@london.edu for review.

Occasionally, we may contract a third party to communicate on our behalf to the third-party's
contacts. We don’t collect your email address or contact information from this third party, and we don’t have access to their mailing list.

Depending on the nature of the third-party mailing, we may, in order to comply with applicable laws, provide the third party with a suppression list of contacts to exclude from their list. The third party doesn’t have permission to keep or market to contacts this list, or to use it in any way other than as a suppression list for a mailing they’re providing on our behalf.

You have following rights:

• Right of access.
  
  Request a copy of the information we hold about you via a Subject Access Request. You have the right to request a copy of the personal information LBS holds about you, except where releasing that information would breach another person's privacy or where an exemption applies, and to have any inaccuracies corrected.
  
  If we do hold information about you, we’ll:
  

  • give you a description of it

  • tell you why we are holding it

  • tell you who it could be disclosed to, and

  • let you have a copy of the information in an intelligible form.

You may request in writing that LBS disclose details of data which it holds about you and the purpose for which such data is held. A ‘Subject Access Request Form’ will be supplied upon request. We’ll need your passport or driver’s licence for proof of identity. We’ll use reasonable efforts consistent with our legal duty to supply, correct or delete personal information about you on our files. 

If we hold information about you, you can ask us to correct any mistakes by contacting the Data Protection Officer.

Please address requests and questions about this or any other issue related to this policy to the Data Protection Officer, London Business School, Regent's Park, London, NW1 4SA, United Kingdom, or email: dpo@london.edu

• Right of rectification
  
  Update or amend the information we hold about you if it is incorrect.
  
  You can do this by updating your profile online or by contacting the Data Protection Officer at dpo@london.edu

• Right of erasure
  
  Ask us to remove your personal information from our records.
  
  If you request that your data be erased, we’ll securely dispose of it. We’ll continue to retain a core set of personal data (name, email address, unique LBS identification reference) to ensure we don’t contact you again in the future.

Please address requests to delete your data to the Data Protection Officer, London Business School, Regent's Park, London, NW1 4SA, United Kingdom, or email: dpo@london.edu

• Right to restrict processing

You have the right to ‘block’ or suppress processing of your personal data. When processing is restricted, we’re permitted to store the personal data but not further process it. We can retain just enough information about you to ensure that the restriction is respected in future.

If you request that your data processing be blocked, we’ll continue to retain a core set of personal data (name, email address, unique LBS identification reference) to ensure we don’t contact you again in the future.

Please address requests to delete your data to the Data Protection Officer, London Business School, Regent's Park, London, NW1 4SA, United Kingdom, or email: dpo@london.edu

• Right to data portability

You have the right to obtain a copy of your personal data so that it can be reused for your own purposes in another IT environment.

If you want to request a copy of your personal data then please address requests to the Data Protection Officer, London Business School, Regent's Park, London, NW1 4SA, United Kingdom, or email: dpo@london.edu

• Right to object to processing

 You have a right to object by withdrawing your consent at any time.

• Right to make a complaint to the supervisory authority

You have the right to make a complaint to the Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF
United Kingdom
Tel: +44 (0)303 123 1113 (local rate)
Web: ico.org.uk

This Privacy Policy may be updated so you may wish to check it each time you submit personal information to LBS. The date of the most recent revisions will appear on this page. If you don’t agree to these changes, please refrain from using LBS websites to submit personal information to us.

If material changes are made to the Privacy Policy, for instance affecting how we’d like to use your personal information, we’ll provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes).

We’re a graduate business school established in the UK by Royal Charter (RC 000721). Founded in 1964, we are a member institution of the University of London. When saying “we”, “our” or “LBS”, we’re referring to London Business School.

Our registered office is:

London Business School
Sussex Place, Regent’s Park 
London, NW1 4SA
United Kingdom.

The Data Controller is London Business School and our registration number in the Data Protection Register is Z8182937.

By accessing our websites you understand that your personal information may be collected, stored, used and shared by us for any of the following purposes:

• To provide you with information about our programmes including course details; application tips; funding advice; faculty and participant profiles; and other information that may be relevant to your interests.
• To send you our latest research and thought leadership content; provide you with invitations to relevant events and reminders or joining details for those events to which you register.
• To identify and prevent fraud.
• To enhance the security of our network and information systems.
• Where the processing enables us to enhance, modify, personalise or otherwise improve our services/communications for the benefit of our customers.
• To better understand how people interact with our websites.
• To provide postal communications which we think will be of interest to you.
• To determine the effectiveness of promotional campaigns and advertising.
• For the direct marketing of LBS products and services.

We may ask for consent to send you marketing communications about our products and services. You’ll be able to opt of these communications at any point by selecting the ‘opt out’ option at the bottom of each email we send you.

Whenever processing data for these purposes, we’ll ensure we always keep your personal data rights in high regard and take account of them. You have the right to object to this processing if you wish. See section 9 for more details. Please bear in mind that if you object, this may affect our ability to carry out the tasks, mentioned above, for your benefit.
We’ll notify you before using your personal information for any other means.

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

However, we will normally collect personal information from you only (i) where we have your consent to do so, (ii) where we need the personal information to perform a contract with you, or (iii) where the processing is in our legitimate interests and not overridden by your rights. In some cases, we may also have a legal obligation to collect personal information from you.

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we’ll make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as the possible consequences if you do not provide your information).

Similarly, if we collect and use your personal information in reliance on our legitimate interests (or those of any third party), we’ll make clear to you at the relevant time what those legitimate interests are.

Apart from meeting the needs of your request, we’ll never share or sell your data to third parties to use for their own purposes unless we’re required to do so by law. For example, we’d do this when receiving a court order or for the purposes of prevention of fraud or other crime.

Your information may be shared with our educational partners where necessary to provide you with a service you’ve requested. This would happen when, for example, you request information for or apply to join one of our partnership degree programmes (e.g. EMBA-Global Americas & Europe, EMBA-Global Asia, or Global Masters in Management). When doing this, we’ll provide further information at the time of collecting your information.

List of our degree programme partners:

EMBA-Global Americas & Europe programme
- Columbia Business School, Columbia University in the City of New York, 3022 Broadway, New York, NY10027, USA

EMBA-Global Asia programme
- Columbia Business School, Columbia University in the City of New York, 3022 Broadway, New York, NY10027, USA
- The University of Hong Kong, Pokfulam, Hong Kong.

Global Masters in Management programme
School of Management, Fudan University. 670 Guoshun Rd, WuJiaoChang, Yangpu Qu, Shanghai Shi, China, 200433.

LBS sometimes uses third parties to process your information on our behalf, for example to provide services or analysis. We require these third parties to comply strictly with your
instructions and that they don’t use your personal information for their own business purposes, unless you have explicitly consented to them using your personal information in this way.

Although most of the information we store and process stays within the UK, some information may be transferred to countries outside the European Economic Area (EEA). This may occur if, for example, one of our partner’s servers are located in a country outside the EEA. These countries may not have similar data protection laws to the UK; however, we’ll take steps to make sure they provide an adequate level of protection in accordance with UK data protection law. By submitting your personal information to us you agree to this transfer to or storing or processing of data at a location outside the EEA.

We may use information which we hold about you to show you relevant advertising on third-party sites (e.g. Facebook, Google, Instagram, and Twitter). If you don’t want to be shown
targeted advertising messages from LBS, some third-party sites allow you to request that you don’t see messages from specific advertisers on that site in future.

If you post or send content which may reasonably be deemed to be offensive, inappropriate or objectionable anywhere on or to LBS websites or social media channels, or otherwise engage in any disruptive behaviour on any LBS service, we may remove such content.

Where LBS reasonably believes that you are in breach of any applicable laws, we may disclose your personal information to relevant third parties, including law enforcement agencies or your internet provider. LBS would only do so in circumstances where such disclosure is permitted under applicable laws, including data protection law.