Access to your data is restricted to authorised London Business School staff. All staff undertake mandatory data protection training as part of their induction, and also receive regular refresher training.
We may pass your information to third-party providers, agents or subcontractors for the purpose of delivering services to you. The School has in place a robust procurement system and only works with third-party suppliers who can provide evidence of their data protection programme and have robust security measures in place. When using third-party suppliers, we only share information necessary to deliver the specific task or service required.
The School doesn’t share or sell your data to third parties for their own purposes unless we are required to do so by law (for example, for the fulfilment of statutory UK Government returns, if we receive a court order, or to prevent fraud or another crime).
Personal data is stored on the School’s password-protected database, which is hosted on a secure server.
Although most of the information we store and process stays within the UK, some data may be transferred to countries both within and outside the European Economic Area (EEA). This may occur if, for example, one of our trusted partners’ servers is located in a country outside the UK. These countries may not have similar data protection laws to the UK. However, we will take steps to make sure they provide an adequate level of protection in accordance with UK and EU data protection law and use Standard Contractual Clauses or other appropriate safeguards where necessary by submitting your personal information to us, you agree to this transfer, storing or processing of your data at a location outside of the UK.
These processes will be reviewed regularly whilst the EU determine the adequacy of UK Data Protection as a result of the exit of the UK from the EU on 31 December 2020.