Privacy Policy

This policy explains what we do with personal information on the Back in Business Hub, which is operated by GD Education Limited, 19 Clontarf Park, Dublin 3, D03 W142, company number 756501. It covers this website and the GD Education app.

Who is responsible for your data

It depends on how the account was set up, and it matters because it decides who you ask first.

When you signed up yourself

GD Education is the data controller. We decide what is collected and why, and this policy describes it.

When your school set up your classroom

Your school is the data controller for the classroom side of things: your teacher’s dashboard, the work assigned to you, and your progress as your teacher sees it. We act as their data processor, which means we only handle that information on the school’s instructions, under a written Data Processing Agreement. If you want that classroom data corrected or removed, ask the school first. Where this policy and that agreement disagree about school-provided accounts, the agreement takes precedence.

What we collect

Account information

Name, email address, username, password, school, class or year group, and your membership level. For teachers we also record the role held in the school, for example Department Head, Teacher, SNA or PME.

Parent or guardian contact

For students under 16 we hold a parent or guardian email address. It is used only to obtain and administer consent and to send account notices. It is never used for marketing.

Study activity

Quizzes taken and scores, flashcard activity, videos watched, work assigned and completed, sign-in times, and the experience points, streaks and awards earned through study.

Technical information

Browser type, device information, and IP address. Where a teacher accepts our Data Processing Agreement on behalf of their classes, we record the date, time, IP address and browser used, as the record of that acceptance.

Things you send us

Support messages, and any screenshot you choose to attach when reporting a fault through the site.

Payment information

Payments are handled by our payment provider. We do not store card numbers. No payment information is processed for student accounts.

Why we hold it

• To create and run your account, and to give you the content your membership includes.
• To deliver ebooks through Yudu.
• To build revision suited to your own learning. This is done by our own software on our own servers, and is never used to profile you commercially or to target advertising.
• To show your teacher the work they have assigned you and a summary of your overall activity.
• To answer support requests and fix faults.
• To keep the platform secure.
• To meet our legal obligations.

Students under 16

Ireland sets the age of digital consent at 16. If you are under 16, a parent or guardian must approve your account before it becomes active.

On this hub we ask each student whether they are 16 or older when they sign up. A student aged 16 or over can use the hub straight away. A student under 16 needs a parent or guardian to approve the account first.

Here is what happens:

• You give a parent or guardian’s email address when you sign up.
• We email them a link to approve the account. Until they do, the account is limited: the ebook is available, but the rest of the hub is not, and no study activity is recorded.
• If nobody approves it, we send one reminder after three days.
• If it is still not approved after seven days, the account and everything in it are deleted automatically. Nobody has to do anything to make that happen.

A parent or guardian can withdraw approval at any time using the link in the email we sent them, or by emailing us. Withdrawing approval deletes the account.

Who else sees your data

We do not sell personal data. We use the following service providers, and only for the purposes listed.

We may also disclose information where the law requires it, or to protect the safety and security of people using the platform.

Where your data is held

Personal data is hosted within the European Economic Area. Some of the providers above operate outside the EEA. Where that happens we rely on the appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or the EU to US Data Privacy Framework.

Artificial intelligence

No student personal data is sent to any AI service. The revision scheduling is our own software running on our own infrastructure.

How long we keep it

• While your licence is active. Ebook licences run for one to three years from registration.
• After your licence expires, access to the hub stops. We keep your account and study history so that you can pick up where you left off if you come back or renew. You can ask us to delete it at any time, and we do so within 30 days of a verified request.
• Accounts awaiting parental approval are deleted seven days after registration if approval is not completed. A reminder is sent after three days.
• Student lists supplied by a school are removed once the accounts have been created.
• Records we must keep by law, such as invoices, are kept for as long as the law requires.

Your rights

Under the GDPR you can ask us to:

• give you a copy of the personal data we hold about you
• correct anything that is wrong
• delete your account and its data
• restrict or object to how we use it
• send your data to you in a portable form
• stop sending you marketing, at any time

Email accounts@backinbusinesshub.com. We respond to verified requests within 30 days. If your account was set up by your school, ask the school first, as they control that data.

If you are unhappy with how we have handled your data you can complain to the Data Protection Commission at dataprotection.ie.

Security

Data is hosted in the EEA and encrypted in transit. Passwords are stored hashed. Access is role-based: a teacher sees only their own students, and our staff access accounts only to resolve a support request. Administrative accounts use two-factor authentication, and the login form is protected against automated abuse.

Cookies

We use cookies to keep you signed in and to make the site work. You are asked about non-essential cookies the first time you visit. See our Cookie Policy for the detail.

Changes to this policy

If we make a significant change we will say so on this page and update the date at the top.

Contact

GD Education Limited, 19 Clontarf Park, Dublin 3, D03 W142. Email accounts@backinbusinesshub.com.

---