Legal
Privacy policy
Not legal advice — needs your input before publication
The structure and plain-English wording below are drafted, but every factual claim about how data is handled has to come from you, and the finished policy should be checked by someone qualified. Each gap is marked. A privacy policy is a legal representation: it must describe what actually happens, not what is typical.
Who we are
The Bar Model Company provides maths training and video resources to schools. For the purposes of UK GDPR we are the data controller for the information described here.
The Bar Model Company is a trading name of Bartial Arts Ltd, registered in England and Wales (company number 10837281). Registered office: 20–22 Wenlock Road, London N1 7GU.
Needed
ICO registration number, and the name or role of whoever is responsible for data protection.
What we collect
We collect information you give us directly, and a small amount that is collected automatically when you use the site.
- Your name, school and email address, when you enquire, book training or sign up for the newsletter.
- Account details for staff using a school membership, so we know who has access.
- Feedback you give us after training, including on paper forms.
- Basic technical information such as pages visited, browser and approximate location.
Needed
Confirm whether video watch history is recorded per user, whether payment details touch your systems or go straight to a processor, and whether anything else is captured that is not listed.
Why we collect it, and our lawful basis
We only use your information to do the things you would expect: reply to enquiries, deliver training you have booked, give your staff access to the library, take payment, and send the newsletter if you asked for it.
Needed
The lawful basis for each purpose — typically contract for delivering the membership, legitimate interests for enquiries, consent for marketing email. This should be stated explicitly per purpose.
Who we share it with
We do not sell your information. We share it only with the services we use to run the business, and only as far as they need it to do their job.
Needed
The actual list of processors — hosting, email, payments, video, CRM, analytics — and whether any transfer data outside the UK/EEA. Each needs naming.
How long we keep it
Needed
Retention periods per category: enquiries, active memberships, lapsed memberships, financial records (usually six years), and the paper training feedback forms.
Your rights
You can ask for a copy of the information we hold about you, ask us to correct or delete it, object to how we are using it, or withdraw consent for marketing at any time. We will respond within one month.There is no charge for this.
Cookies
Needed
Which cookies the site actually sets once the build is final, split into strictly necessary and everything else. Anything non-essential needs consent before it is set — which affects how the cookie banner is built.
Children's data
Our service is sold to schools and used by teachers.We do not knowingly collect information about individual children. Pupil-facing videos are watched by a teacher signed in on the school's account, not by pupils with their own logins.
Confirm
This must be true of the LMS as built. If pupils ever get their own accounts, this section changes substantially and children's-data rules apply in full.
Contact and complaints
If you want to exercise any of the rights above, or you are unhappy with how we have handled your information, contact us first and we will try to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk.
Needed
The email address for data protection enquiries. Post can go to the registered office above.