Home / Privacy policy

Privacy & Cookie Policy

Business Innovation and Training Ltd (BII Research)

Company number: 12042504

Registered office: 5 Brayford Square, Stepney Green, London, United Kingdom, E1 0SG

Effective date: 21 August 2026

Business Innovation and Training Ltd, trading under the brand BII Research (“BII Research”, “we”, “us” or “our”), respects your privacy and is committed to protecting your personal data.

This Privacy & Cookie Policy explains how we collect, use, disclose, retain and protect personal data when you visit our website, contact us, enquire about or purchase our training, research, consultancy or other services, register for an event or course, participate in online learning, or otherwise interact with us.

This policy is intended to reflect the UK data protection framework, including the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and, where applicable, amendments introduced by the Data (Use and Access) Act 2025.

If you do not agree with this policy, please do not use our website or provide personal data where providing it is optional.

Any version of this Privacy & Cookie Policy in a language other than English is provided for convenience. If there is any conflict, the English-language version will prevail.

1. Who We Are

The data controller responsible for your personal data is:

Business Innovation and Training Ltd

Trading as: BII Research

Company number: 12042504

Registered office: 5 Brayford Square, Stepney Green, London, United Kingdom, E1 0SG

For privacy-related enquiries or requests concerning your personal data, please use the privacy or contact details published on the BII Research website.

2. Information We Collect

We may collect personal data directly from you when you:

Depending on the circumstances, this may include:

Information collected automatically

When you use our website, we may automatically collect certain technical and usage information, including IP address, browser type, operating system, device information, pages visited, approximate location derived from IP address, referring website, and information about how you interact with our website.

Some of this information may be collected through cookies, pixels, tags, scripts and similar technologies, as described below.

3. Information We Do Not Intentionally Collect

We do not intentionally request or collect special category personal data unless it is necessary for a specific and legitimate purpose and an appropriate legal condition for processing applies.

Where payment is made through Stripe or another third-party payment provider, payment information may be collected and processed by that provider. We do not intend to store full payment card details on our own systems unless expressly stated at the point of collection.

4. How We Use Your Personal Data

We may use your personal data to:

5. Lawful Bases for Processing

We process personal data only where we have an appropriate lawful basis under applicable data protection law.

Depending on the circumstances, these bases may include:

Contract

We may process personal data where it is necessary to enter into or perform a contract with you or your organisation.

Legal obligation

We may process personal data where necessary to comply with a legal or regulatory obligation.

Legitimate interests

We may process personal data where necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms.

Our legitimate interests may include operating and improving our business, managing customer and supplier relationships, maintaining website and information security, preventing fraud, conducting appropriate business-to-business communications, and measuring the effectiveness of our services and marketing.

Consent

Where consent is the appropriate lawful basis, we will request it through a clear affirmative action. You may withdraw consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6. Direct Marketing

BII Research is primarily a business-to-business training and professional services provider. We may communicate with business contacts about relevant BII Research services, programmes, events, research and professional activities.

The marketing rules that apply depend on the type of recipient and communication. Under PECR, different rules apply to corporate subscribers and individual subscribers, including sole traders and certain partnerships.

Where PECR requires consent, we will obtain appropriate consent before sending electronic direct marketing. Where PECR permits marketing without consent, we will nevertheless comply with applicable UK GDPR requirements when personal data is involved, including the absolute right to object to direct marketing.

Where we rely on a permitted “soft opt-in”, we will meet the applicable requirements, including providing an opportunity to opt out when contact details are collected and in subsequent communications.

Every marketing email will provide an appropriate and straightforward way to unsubscribe or opt out.

You may object to direct marketing or withdraw marketing consent at any time. Where appropriate, we may retain limited suppression information so that we can respect your opt-out request and avoid contacting you again.

7. Third-Party Service Providers and Platforms

BII Research uses third-party technology and service providers to operate its website, marketing, customer management, payment processing, online training and learning services.

Depending on the service and your interaction with us, these providers include:

Google Analytics

We use Google Analytics to understand website traffic, usage patterns and website performance.

Google Analytics may collect information such as IP-related technical information, device and browser information, pages visited, events and interactions. Where consent is legally required for analytics technologies, Google Analytics will be activated only after the relevant consent has been provided.

Meta Pixel

We use the Meta Pixel to measure advertising and marketing performance, understand interactions with our website following advertising activity, and support relevant advertising and campaign measurement.

The Meta Pixel may use cookies, pixels or similar technologies to collect information about website interactions. Where consent is required, these technologies will not be activated until the relevant consent has been provided.

LinkedIn Insight Tag

We use the LinkedIn Insight Tag to understand website conversions, measure the effectiveness of LinkedIn campaigns, obtain aggregated website insights and support relevant advertising.

The LinkedIn Insight Tag may use cookies and similar technologies. Where consent is required, the technology will be activated only after the relevant consent has been provided.

HubSpot

We use HubSpot for customer relationship management, enquiries, sales and marketing operations, forms, communications and related website functionality.

HubSpot may process information such as contact details, enquiry history, communications, website interactions, marketing preferences and information submitted through forms. HubSpot may also use cookies and tracking technologies for analytics, functionality and marketing purposes.

Where consent is required for non-essential tracking technologies, the relevant HubSpot tracking will be subject to our cookie consent mechanism.

Mailchimp

We use Mailchimp to manage and deliver certain email communications, newsletters and marketing campaigns.

Mailchimp may process contact details, communication preferences and campaign interaction information. Certain emails may contain tracking technologies that allow us to determine whether an email has been opened or links have been clicked.

We use such tracking in accordance with applicable privacy and electronic marketing requirements.

Stripe

We use Stripe to process payments where Stripe is offered as a payment method.

Stripe may process payment and transaction information necessary to complete and secure a transaction. Payment processing is subject to Stripe’s own terms and privacy information.

Zoom

We may use Zoom to deliver webinars, meetings, online training and other virtual events.

Zoom may process registration information, participant information, meeting attendance and technical information necessary to provide the service. Where applicable, recordings or other information generated during an event may be processed for the purposes communicated to participants.

Learning Management System (LMS)

BII Research may use a third-party learning-management system to provide online courses, learning materials, assessments, learner accounts, attendance records and training administration.

The LMS may process information such as name, email address, organisation, course registration, progress, assessment results, attendance and certification records as necessary to provide the learning service.

The specific LMS provider may change from time to time. The applicable provider will process information under its contractual and privacy arrangements with BII Research.

8. Cookies, Pixels, Tags and Similar Technologies

BII Research uses cookies and other technologies that store information on, or access information from, a user’s device.

These technologies include:

The use of these technologies is governed by PECR and, where personal data is involved, the UK GDPR and other applicable data protection law.

Strictly necessary technologies

These technologies are necessary for the website or a service specifically requested by you to operate, maintain security, authenticate users, or provide essential functionality.

Where an applicable legal exemption applies, these technologies may be used without consent.

Analytics and performance technologies

These technologies help us understand website usage and performance. Our principal analytics service is Google Analytics.

Analytics technologies will be subject to consent where required by applicable law.

Functional technologies

These technologies may remember preferences, support forms, authentication, online learning, webinars or other functionality.

Some functionality provided by HubSpot, Zoom or our LMS may involve cookies or similar technologies.

Where consent is legally required, non-essential functional technologies will be activated only after the relevant consent has been provided.

Marketing and advertising technologies

Our marketing and advertising technologies may include:

These technologies may be used to measure campaigns, understand website interactions and support relevant advertising.

Where consent is legally required, these technologies will not be activated before consent is obtained.

9. Cookie Consent

Where required by law, BII Research will ask for consent before placing or accessing non-essential cookies or similar technologies.

Consent will:

You can change your cookie preferences at any time through the cookie-management mechanism available on our website.

We will maintain appropriate records of cookie consent and preferences.

10. Managing Cookies

You can manage cookies through:

If you disable or reject certain cookies, some website functionality may not operate as intended.

Browser controls do not necessarily provide the same level of control as our cookie-management mechanism, particularly for third-party technologies.

11. How We Share Personal Data

We may disclose personal data where reasonably necessary to operate our business and provide our services.

Recipients may include:

Where third parties process personal data on our behalf, we will take appropriate steps to ensure that they provide sufficient guarantees and process personal data under appropriate contractual arrangements.

We do not sell personal data.

12. International Transfers

BII Research operates internationally and uses technology and service providers that may be located outside the United Kingdom. Personal data may therefore be transferred to, stored by, or made accessible to organisations outside the UK.

Where a transfer constitutes a restricted transfer under the UK GDPR, we will use an appropriate legal mechanism and safeguards required by applicable law.

Depending on the circumstances, these safeguards may include:

Where appropriate, we will also consider relevant transfer risk and security requirements.

13. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to meet contractual, legal, accounting, regulatory or reporting requirements.

Different categories of information may have different retention periods. For example, learner, certification, financial, contractual, marketing and support records may need to be retained for different periods.

When personal data is no longer required, we will securely delete it or anonymise it where appropriate.

14. Data Security

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss, destruction or other unlawful processing.

Our security measures may include access controls, authentication procedures, secure systems, confidentiality obligations, encryption where appropriate, supplier controls and other technical safeguards.

No method of transmission or electronic storage is completely secure. Accordingly, while we take reasonable measures to protect personal data, we cannot guarantee absolute security.

15. Your Data Protection Rights

Subject to applicable legal conditions and exemptions, you may have the right to:

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), if you believe your personal data has been processed unlawfully.

16. How to Exercise Your Rights

To exercise a data protection right or ask a privacy question, please contact BII Research using the privacy or contact details published on our website.

We may need to request additional information to verify your identity before responding to a request.

We will normally respond within the period required by applicable data protection law.

17. Children

Our services are primarily intended for business professionals, organisations and adult learners.

We do not knowingly collect personal data from children through our website for purposes that are not permitted by applicable law.

If you believe that a child has provided personal data to us without appropriate authorisation, please contact us so that we can review and, where appropriate, delete the information.

18. Third-Party Websites and Services

Our website may contain links to third-party websites, platforms or services.

These websites operate independently from BII Research and may have their own privacy policies and terms.

Third-party providers used by BII Research may also process personal data under their own privacy notices and contractual arrangements.

We encourage you to review the privacy information provided by third-party services where appropriate.

19. Intellectual Property

Unless otherwise stated, copyright and other intellectual property rights in materials published on the BII Research website, including text, graphics, images, documents and other content, belong to BII Research or its licensors.

Nothing in this Privacy & Cookie Policy grants a visitor a licence or other right to reproduce, modify, distribute or commercially exploit website content without appropriate permission.

20. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in our services, technology, legal requirements or data protection practices.

The updated version will be published on the BII Research website with an updated effective date.

We encourage visitors to review this policy periodically.

21. Contact Information

Business Innovation and Training Ltd (BII Research)

Company number: 12042504

Registered office: 5 Brayford Square, Stepney Green, London, United Kingdom, E1 0SG

For privacy enquiries, data protection requests or questions regarding this Privacy & Cookie Policy, please use the privacy or contact details published on the BII Research website.

22. Governing Framework

This policy is intended to reflect the data protection framework applicable to Business Innovation and Training Ltd in the United Kingdom, including:

Where BII Research provides services in other jurisdictions, additional local privacy and data protection requirements may apply.

Last updated: 21 August 2026