Privacy Policy
Last updated: January 2026
Aspire Behaviour Management Ltd (“we”, “us”, “our”) is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, store and protect personal information through our website.
1. Who We Are
Company name: Aspire Behaviour Management Ltd
Registered address: Egerton Business Centre, Blackburn Road, Egerton, Bolton, England, BL7 9RP
Telephone: 0333 200 8705
Email (data protection enquiries): enquiries@aspirebm.co.uk
We are registered with the Information Commissioner’s Office (ICO) as a data controller and process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. The Information We Collect
We may collect and process the following personal data through our website:
Information you provide directly
When you use our website forms, we may collect:
- Name
- Work or personal email address
- Phone number
- Job title
- School or organisation name
- Information you include in message or enquiry boxes
Recruitment information
If you apply for a role with us, we may collect:
- Contact details
- Employment history
- Qualifications and experience
- Any other information you choose to include in your application
Sensitive and child-related information
Although our website does not intentionally request information about individual children, users may include information in free text fields relating to:
- Children or young people
- Behaviour, SEND, safeguarding or health matters
Where this occurs, this may include special category data. We ask users not to submit detailed or identifiable child information via the website wherever possible.
Marketing information
If you sign up to receive updates or resources, we collect your contact details and marketing preferences.
3. How We Use Your Information
We use personal data for the following purposes:
- Responding to enquiries and contact form submissions
- Providing information about our services, training and support
- Sending newsletters, updates or resources where you have opted in
- Managing bookings for training and services
- Processing job applications
- Improving our website and services
- Maintaining safeguarding and professional standards where relevant to our work
4. Lawful Bases for Processing
Under UK GDPR, we rely on the following lawful bases:
- Legitimate Interests – to respond to enquiries, manage relationships with schools and professionals, and improve our services
- Contract – where we are providing or arranging services or training
- Consent – for marketing emails and optional communications
- Legal Obligation – where we must retain records for legal, regulatory, or safeguarding reasons
- Substantial Public Interest – where special category data is shared in the context of safeguarding, SEND, or child welfare concerns
5. Marketing Communications
We only send marketing emails where:
- You have actively opted in, or
- We are contacting you in a professional capacity about services relevant to your role
You can unsubscribe at any time using the link in our emails or by contacting us directly. We use Brevo to manage email communications.
6. Cookies and Website Tracking
Our website uses cookies and similar technologies. These may include:
- Google Analytics (GA4) – to understand how visitors use our website
- Meta (Facebook) Pixel – to measure advertising effectiveness
- Essential cookies required for site functionality
You will see a cookie banner allowing you to manage your preferences.
7. Sharing Your Information
We do not sell personal data. We may share information with trusted service providers who help us operate our website and services, including:
- IONOS – domain and hosting services
- Microsoft 365 – email and document systems
- Brevo – email communications
- Google – analytics services
- Meta (Facebook) – advertising and analytics tools
- Stripe – payment processing (if payments are enabled in future)
These providers process data on our behalf and are required to keep it secure.
8. International Data Transfers
Some of our service providers (such as Google, Meta, and Microsoft) may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as:
- UK-approved International Data Transfer Agreements, or
- Providers participating in recognised data protection frameworks
9. Data Retention
We keep personal data only as long as necessary:
- General enquiries: typically up to 2 years
- Marketing data: until you unsubscribe or after prolonged inactivity
- Recruitment data: up to 12 months unless you consent to longer retention
- Service-related records: in line with contractual and legal requirements
10. How We Keep Your Data Secure
We use appropriate technical and organisational measures to protect personal data, including:
- Secure email and cloud systems
- Access controls and password protection
- Staff training in data protection and confidentiality
11. Your Data Protection Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Withdraw consent (for marketing)
- Lodge a complaint with the ICO
To exercise any of these rights, contact: enquiries@aspirebm.co.uk
12. Complaints
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office:
ICO Website: https://www.ico.org.uk
Helpline: 0303 123 1113
13. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website.