Privacy Policy | Prologue

PRIVACY POLICY
———

Effective date: 1 July 2026
Last reviewed: 1 July 2026
Version: 1.0

1. Who we are

Prologue Business School Ltd (company number 17261771) is a UK training provider based in Stamford, Lincolnshire. We provide training, mentoring, career-development activities, and work experience placements for learners aged 16 and over.

In this Privacy Policy, “Prologue”, “we”, “us”, and “our” mean Prologue Business School Ltd.

For most of the personal information covered by this Privacy Policy, Prologue is the data controller. This means that we decide how and why your personal information is used.

Company name: Prologue Business School Ltd
Company number: 17261771

ICO registration reference: ZC256125
Registered office: The Hub, Blackfriars Street, Stamford, Lincolnshire, PE9 2BW
Data Protection Contact: data@prologuebusinessschool.co.uk
Telephone: 01780 723825
Websites:
www.prologuebusinessschool.co.uk
www.prlg.co.uk

If you have questions about this Privacy Policy or how we use personal information, please contact us using the details above.

2. Who this Policy covers

This Privacy Policy applies to:

Learners aged 16 and over
Parents, legal guardians, and emergency contacts
People applying to join a Prologue programme
People attending Prologue workshops, events, talks, or activities
Placement hosts, employers, mentors, suppliers, and business contacts
Visitors to either of our websites, online learning spaces, and social-media channels
People who contact us by email, telephone, social media, or through our websites

If you are aged 16 or 17, this Privacy Policy applies to you directly. We may also provide information to your parent or guardian because they may need to be involved in enrolment, attendance, welfare, safeguarding, fees, and placement arrangements.

3. Our approach to young people’s data

Prologue works with learners aged 16 and over. If you are under 18, you are a child for data-protection and safeguarding purposes.

We aim to use personal information fairly, safely, transparently, and only when we need to. We take particular care with information about learners aged 16 and 17, particularly information relating to safeguarding, health, support needs, attendance, placements, and wellbeing.

We consider the best interests of children when we collect, use, store, or share their information. We will share personal information about a learner under 18 with a placement host or another organisation only when it is relevant, necessary, lawful, and protected appropriately.

4. Personal information we collect

The personal information we collect depends on your relationship with Prologue, the programme involved, and whether you are a learner, parent or guardian, placement host, or website visitor.

4.1 Learners and applicants

We may collect:

Name, preferred name, date of birth, age, gender, and pronouns
Home address, email address, telephone number, and other contact details
Application information, CV, education history, qualifications, interests, skills, experience, and career goals
Programme choices, attendance, punctuality, participation, progress, assessments, feedback, and outcomes
Payment, invoicing, bursary, discount, or fee-support information
Emergency-contact details
Communications with us, including emails, forms, messages, meeting notes, and feedback
Images, photographs, video, audio, or testimonials where we have consent or another lawful basis
Information about access to and use of our online platforms, systems, and learning materials

4.2 Parents, guardians, and emergency contacts

For learners under 18, we may collect:

Name, relationship to the learner, and contact details
Confirmation of parental responsibility, where needed
Emergency-contact details
Relevant communications about enrolment, fees, attendance, welfare, safety, safeguarding, support, conduct, and placements

4.3 Health, wellbeing, safeguarding, and support information

We may collect more sensitive information where it is necessary to provide a safe, accessible, and appropriate service. This may include:

Medical information, allergies, medication, disabilities, learning needs, accessibility requirements, and reasonable-adjustment needs
Mental-health or wellbeing information that you choose to share, or that is relevant to safety and support
Safeguarding concerns, welfare concerns, incident reports, risk assessments, and records of action taken
Information about special educational needs, care arrangements, or support plans, where relevant and provided lawfully
Information about criminal allegations, offences, or safeguarding concerns where necessary, lawful, and subject to appropriate safeguards

Please provide only information that is relevant to the programme, safe participation, or support you may need.

4.4 Placement hosts, employers, mentors, and business contacts

We may collect:

Name, job title, organisation, business contact details, and professional biography
Placement availability, employer requirements, supervision arrangements, feedback, and communications
Information needed to arrange placements, monitor learner welfare, assess placement suitability, or manage our relationship with the organisation

4.5 Website, systems, and communications information

When you visit either of our websites, contact us, or use our online systems, we may collect:

IP address, browser type, device information, operating system, and general location derived from IP address
Pages visited, links selected, referral source, and the date and time of access
Cookie and similar-technology information, subject to our Cookie Policy and your preferences where consent is required
Enquiry forms, emails, telephone messages, social-media messages, or feedback you send to us

Some information is necessary for us to assess an application, enrol a learner, provide training, arrange a placement, manage fees, or meet our safeguarding and health-and-safety responsibilities. If required information is not provided, we may be unable to offer a place, deliver the relevant service safely, or arrange a placement.

5. How we collect information

We may collect personal information:

Directly from you when you apply, enrol, pay fees, attend activities, contact us, or use our websites
From a parent or guardian, where the learner is under 18
From a school, college, referrer, employer, mentor, placement host, or professional adviser, where relevant, lawful, and appropriate
From public professional sources, such as company websites or professional networking profiles, when contacting businesses or potential placement hosts
From our websites, email systems, online learning platforms, payment providers, and other service providers that support our operations

Where we receive your personal information from another source, we will provide appropriate privacy information within the required timescale unless an exemption applies.

6. Why we use personal information

We use personal information for the following purposes:

7. Our lawful bases for using information

We need a lawful basis under UK GDPR before we process personal information. Depending on the situation, we may rely on:

Where we rely on legitimate interests, we balance our interests against your rights and reasonable expectations.

You may object to processing based on legitimate interests. You can object to direct marketing at any time.

8. Sensitive and criminal-offence information

Some information requires additional protection. This includes health information, disability information, mental-health information, ethnicity, religious beliefs, sexual orientation, and other information known as special category data. Information about criminal allegations, offences, convictions, or safeguarding matters is also subject to special protections.

We only process this information where necessary and where we have:

A lawful basis under Article 6 of the UK GDPR; and
An additional legal condition under Article 9 of the UK GDPR for special category data, or an appropriate condition under the Data Protection Act 2018 for criminal-offence data.

Depending on the circumstances, we may rely on:

Explicit consent
Carrying out obligations or exercising rights in employment, social-protection, or social-security law
Protecting vital interests where you cannot give consent
Establishing, exercising, or defending legal claims
Reasons of substantial public interest, including safeguarding children or adults at risk, preventing or detecting unlawful acts, or protecting people from harm
Providing reasonable adjustments and meeting equality-law obligations

We restrict access to sensitive information and share it only where there is a clear need and lawful basis.

9. Who we share information with

We do not sell personal information.

We may share personal information with:

Prologue directors, staff, contractors, mentors, and advisers who need it to perform their roles
Placement hosts and employers, where information is needed to arrange, supervise, support, or manage a placement
Schools, colleges, referrers, funders, or professional advisers, where relevant, authorised, and lawful
Parents or guardians of learners under 18, where appropriate for enrolment, attendance, welfare, fees, safeguarding, safety, or placement purposes
Professional service providers, such as payment providers, IT providers, cloud-storage providers, website hosts, email providers, accountants, insurers, legal advisers, and communications platforms
Local authorities, children’s social care, adult social care, police, health services, the Local Authority Designated Officer, safeguarding partners, or Prevent partners where necessary and lawful
HM Revenue & Customs, regulators, courts, auditors, insurers, or other public bodies where required by law or necessary to protect our legal rights
A buyer, investor, or successor organisation if Prologue is involved in a business sale, restructuring, merger, or transfer, subject to appropriate confidentiality arrangements

When arranging a placement, we aim to share only the information necessary for the host to provide safe and suitable supervision. For learners under 18, this may include essential emergency contacts, agreed adjustments, relevant health and safety information, and information needed for safeguarding and supervision.

We may share safeguarding information without consent where necessary and lawful to protect a learner or another person from harm, prevent crime, respond to an emergency, or meet a legal duty.

10. International transfers

We aim to use service providers that store and process information in the United Kingdom or in countries recognised as providing an adequate level of protection.

Some suppliers may process information outside the UK. Where this happens, we will make sure an appropriate safeguard is in place, such as:

An adequacy regulation
The UK International Data Transfer Agreement
The UK Addendum to the EU Standard Contractual Clauses
Another legally recognised safeguard

Contact us at data@prologuebusinessschool.co.uk if you would like more information about relevant international data transfers.

11. How long we keep information

We retain personal information only for as long as necessary for the purposes for which it was collected, including legal, accounting, safeguarding, insurance, and reporting requirements.

Unless a longer period is necessary or required by law, we generally aim to retain:

We may retain information for longer if there is an ongoing complaint, safeguarding matter, insurance matter, legal claim, investigation, or regulatory requirement. When information is no longer needed, we will securely delete or anonymise it.

12. Keeping information secure

We use appropriate technical and organisational measures to protect information from accidental loss, unauthorised access, unlawful use, alteration, or disclosure.

These measures may include:

Role-based access controls
Secure passwords and multi-factor authentication where appropriate
Secure systems and communications
Staff and contractor confidentiality obligations
Secure storage and restricted access for safeguarding records
Reviews of systems, suppliers, and processes
Data-processing agreements with suppliers where required
Procedures for identifying, managing, and reporting personal-data breaches

No internet-based system is completely secure. If you believe your information, email account, or access to a Prologue system may have been compromised, contact us promptly at data@prologuebusinessschool.co.uk.

13. Your data-protection rights

You have rights under UK GDPR. These rights are not absolute and may depend on why we are using your information.

You may have the right to:

Ask for access to your personal information
Ask us to correct inaccurate or incomplete information
Ask us to erase personal information in certain circumstances
Ask us to restrict how we use information in certain circumstances
Object to processing based on legitimate interests
Object to direct marketing at any time
Ask for a portable copy of information you have provided to us, where the legal conditions apply
Withdraw consent at any time where we rely on consent
Ask for information about certain automated decisions

We do not currently make decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise a right, contact us at data@prologuebusinessschool.co.uk. We may need to verify your identity before acting on a request.

If you are aged 16 or 17, you have your own data-protection rights. A parent or guardian may sometimes make a request on your behalf, but we will take account of your understanding, your wishes, parental responsibility, confidentiality, your best interests, and any safeguarding concerns before deciding how to respond.

14. Marketing

We may send adults and business contacts information about our programmes, events, and opportunities where permitted by law.

We will not use a learner under 18’s personal information for direct marketing unless we have carefully assessed that doing so is fair, transparent, lawful, and in the learner’s best interests.

You can opt out of marketing at any time by:

Selecting the unsubscribe link in a marketing email
Updating preferences where this option is available
Contacting data@prologuebusinessschool.co.uk

Opting out of marketing will not stop essential messages about applications, enrolment, fees, training, placement activity, health and safety, safeguarding, or other services you have requested.

15. Cookies and website analytics

Our websites may use cookies and similar technologies to make the sites work, understand how they are used, improve performance, and, where you agree, support analytics or marketing.

Where required, we will ask for consent before placing non-essential cookies on your device. You can manage cookie preferences through the Wix/Usercentrics consent panel or browser settings.

For more information, please read our Cookie Policy.

16. Links to other websites

Our websites, programme materials, and communications may contain links to third-party websites, including websites operated by placement hosts, partners, social-media platforms, payment providers, and other organisations.

We are not responsible for the privacy practices of third-party websites or services. Please read their privacy information before providing them with personal information.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or data-handling practices.

When we make material changes, we will update the effective date and take reasonable steps to notify affected learners, parents or guardians, placement hosts, and other individuals where appropriate.

18. Contact and complaints

If you have a question, concern, or complaint about how we use personal information, please contact us first so that we can try to resolve it.

Data Protection Contact
Prologue Business School Ltd
The Hub, Blackfriars Street
Stamford, Lincolnshire
PE9 2BW

Email: data@prlg.co.uk
Telephone: 01780 723825

Websites:
www.prologuebusinessschool.co.uk
www.prlg.co.uk

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: Make a complaint to the ICO

PRIVACY POLICY ———