Back to Home

Privacy Policy

Last updated: January 2026

Aspire Behaviour Management Ltd (“we”, “us”, “our”) is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, store and protect personal information through our website.

1. Who We Are

Company name: Aspire Behaviour Management Ltd
Registered address: Egerton Business Centre, Blackburn Road, Egerton, Bolton, England, BL7 9RP
Telephone: 0333 200 8705
Email (data protection enquiries): enquiries@aspirebm.co.uk

We are registered with the Information Commissioner’s Office (ICO) as a data controller and process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. The Information We Collect

We may collect and process the following personal data through our website:

Information you provide directly

When you use our website forms, we may collect:

  • Name
  • Work or personal email address
  • Phone number
  • Job title
  • School or organisation name
  • Information you include in message or enquiry boxes

Recruitment information

If you apply for a role with us, we may collect:

  • Contact details
  • Employment history
  • Qualifications and experience
  • Any other information you choose to include in your application

Sensitive and child-related information

Although our website does not intentionally request information about individual children, users may include information in free text fields relating to:

  • Children or young people
  • Behaviour, SEND, safeguarding or health matters

Where this occurs, this may include special category data. We ask users not to submit detailed or identifiable child information via the website wherever possible.

Marketing information

If you sign up to receive updates or resources, we collect your contact details and marketing preferences.

3. How We Use Your Information

We use personal data for the following purposes:

  • Responding to enquiries and contact form submissions
  • Providing information about our services, training and support
  • Sending newsletters, updates or resources where you have opted in
  • Managing bookings for training and services
  • Processing job applications
  • Improving our website and services
  • Maintaining safeguarding and professional standards where relevant to our work

4. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases:

  • Legitimate Interests – to respond to enquiries, manage relationships with schools and professionals, and improve our services
  • Contract – where we are providing or arranging services or training
  • Consent – for marketing emails and optional communications
  • Legal Obligation – where we must retain records for legal, regulatory, or safeguarding reasons
  • Substantial Public Interest – where special category data is shared in the context of safeguarding, SEND, or child welfare concerns

5. Marketing Communications

We only send marketing emails where:

  • You have actively opted in, or
  • We are contacting you in a professional capacity about services relevant to your role

You can unsubscribe at any time using the link in our emails or by contacting us directly. We use Brevo to manage email communications.

6. Cookies and Website Tracking

Our website uses cookies and similar technologies. These may include:

  • Google Analytics (GA4) – to understand how visitors use our website
  • Meta (Facebook) Pixel – to measure advertising effectiveness
  • Essential cookies required for site functionality

You will see a cookie banner allowing you to manage your preferences.

7. Sharing Your Information

We do not sell personal data. We may share information with trusted service providers who help us operate our website and services, including:

  • IONOS – domain and hosting services
  • Microsoft 365 – email and document systems
  • Brevo – email communications
  • Google – analytics services
  • Meta (Facebook) – advertising and analytics tools
  • Stripe – payment processing (if payments are enabled in future)

These providers process data on our behalf and are required to keep it secure.

8. International Data Transfers

Some of our service providers (such as Google, Meta, and Microsoft) may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as:

  • UK-approved International Data Transfer Agreements, or
  • Providers participating in recognised data protection frameworks

9. Data Retention

We keep personal data only as long as necessary:

  • General enquiries: typically up to 2 years
  • Marketing data: until you unsubscribe or after prolonged inactivity
  • Recruitment data: up to 12 months unless you consent to longer retention
  • Service-related records: in line with contractual and legal requirements

10. How We Keep Your Data Secure

We use appropriate technical and organisational measures to protect personal data, including:

  • Secure email and cloud systems
  • Access controls and password protection
  • Staff training in data protection and confidentiality

11. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Withdraw consent (for marketing)
  • Lodge a complaint with the ICO

To exercise any of these rights, contact: enquiries@aspirebm.co.uk

12. Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office:

ICO Website: https://www.ico.org.uk
Helpline: 0303 123 1113

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.