Privacy Notice

Who is responsible

The controller is Geoff Greenwood, trading as MBA Online Advisory, 24 Mill Pool Way, Sandbach CW11 4BS. Contact: perform@mba-online.co.uk.

What we collect

Through the Apply for a Place form only: your name, work email, company name, company-size band, sector, the decision area you select, two short high-level descriptions (up to 500 characters each), the time you acknowledged this notice and the data warning, the review status and timestamps we record, a concise reviewer note, and limited security and anti-abuse logs that protect the form. We ask you not to include confidential, customer, employee, financial, health or other sensitive information.

The form does not request payment data, attachments, documents, customer data, employee data, health data, special-category data, government IDs or financial records. We do not use analytics, advertising pixels or non-essential cookies on this site.

Why we use it

Solely to review whether the Business Performance Diagnostic is a suitable fit, to manage limited capacity, to contact you personally about your application, and to keep the public form secure. Our lawful basis is legitimate interests under Article 6(1)(f) UK GDPR: receiving, reviewing and responding to genuine business enquiries for a fixed-scope service. We assessed this on 25 September 2026 and will reassess before any material change to what we collect, why, or who receives it.

What we don't do

We do not use application information for marketing or advertising audiences, we do not make automated decisions or use AI scoring, and we do not sell application information or share it for advertising.

Who can see it

Only authorised reviewers. We use Lovable Cloud to host and operate this website and its application workflow. Lovable and its infrastructure and delivery providers may process information as necessary to host, secure and support the service. We may also share information with professional advisers where necessary, or with authorities where required by law.

Some service providers used to host, deliver or secure the site may process information outside the UK. Where this happens, we rely on a UK adequacy regulation or appropriate safeguards, such as contractual protections recognised under UK data-protection law. You may request further information using the contact details above.

The application database is configured in Lovable Cloud's EU region.

How long we keep it

Applications that are declined, closed or inactive — including an accepted application that stops progressing — are deleted automatically 60 days after their last status change. If an application is accepted and an engagement begins, only the necessary details move into our separate client-record process, and the application is then closed.

Your rights

You can ask to access, correct or delete your information, restrict its use, or request portability where applicable, by emailing perform@mba-online.co.uk.

You have the right to object to our use of your information based on legitimate interests at any time, using the same email address.

If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ICO), the UK data-protection regulator, at ico.org.uk. We would welcome the chance to resolve your concern first.

Changes to this notice

If we change what we collect, why we use it or who receives it, we will update this notice and its version date before the change takes effect.