Privacy and cookie policy

This is the privacy and cookie policy for businesssimulations.com (the 'Website').

The Website is operated by Redburn Technology Ltd, trading as Business Simulations ('we', 'us', 'our'), whose registered office is at Unit 4, 212-218 Upper Newtownards Road, Belfast, BT4 3ET. We take the privacy of everyone who visits the Website seriously, and this policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have.

This policy covers personal data you share with us, whether through the Website or by email, and personal data we collect automatically when you use the Website.

Data controller: Scott Thompson is our data controller for the purposes of the UK GDPR and the Data Protection Act 2018. You can contact us via our contact page.

1. Information we collect

1.1 Information you give us. When you submit an enquiry through our contact form, we collect your first and last name, your email address, and any message you choose to include. If you reached the form through a partner link, a partner referral code from the page address is stored alongside your enquiry.

1.2 Information you give us in other ways. If you contact us by email or otherwise communicate with us, we collect the information you choose to provide.

1.3 Information we collect automatically. We collect limited technical and usage data when you visit the Website, as described in sections 2 and 3.

2. Cookies

We use only essential cookies, which are needed to make the Website work. We do not use any tracking cookies.

The essential cookies we use are set by Cloudflare, which provides the Website's security and bot protection (including the Turnstile check on our forms). These cookies are strictly necessary to keep the Website secure and working; they are not used for advertising or to track you across other websites.

3. Analytics, advertising and bot protection

3.1 Analytics. We measure Website traffic using Plausible, a privacy-friendly analytics tool. Plausible is cookieless, does not collect personal data and does not set tracking cookies.

3.2 Bot protection. Our forms are protected by Cloudflare Turnstile. To confirm that a visitor is a person rather than an automated program, Turnstile processes limited technical data, including your IP address. It does not set tracking cookies.

3.3 Advertising measurement (Google Ads). When you arrive at the Website from a Google advertisement, a Google Ads click identifier (a gclid, or a gbraid or wbraid) is included in the page address. If you then submit an enquiry, we send this identifier, together with the fact that an enquiry was made, to Google so that we can measure how well our advertising performs (known as conversion attribution). We do not send your name, email or message to Google for this purpose. The identifier is read from the page address only and is not stored in a cookie. Our lawful basis is our legitimate interest in measuring and improving our advertising, and you can object at any time by contacting us.

4. How we use your information and our lawful bases

We use your personal data for the following purposes, relying on the lawful basis shown for each:

  • Responding to and managing your enquiry, and providing the information or services you ask for: performance of a contract, or steps taken at your request before entering into a contract
  • Sending you marketing about our products and services where you have asked to receive it: consent, which you can withdraw at any time
  • Measuring and improving our advertising, and understanding how the Website is used: our legitimate interests in running and improving our business
  • Notifying you about material changes to the Website or our services: our legitimate interests, or performance of a contract where relevant
  • Meeting our legal and regulatory obligations: compliance with a legal obligation

Where we rely on legitimate interests, we have weighed those interests against your rights, and you can object at any time.

5. Who we share your information with

5.1 Service providers. We share personal data with trusted providers who process it on our behalf:

  • HubSpot, our customer relationship management (CRM) provider, which stores enquiry details (name, email, any message and any partner referral code); HubSpot is based in the United States
  • Google, for advertising conversion measurement as described in section 3.3
  • Cloudflare, for form bot protection (Turnstile) as described in section 3.2
  • Plausible, for cookieless analytics as described in section 3.1

5.2 Legal reasons. We may disclose your information where we are legally required to do so, or to establish, exercise or defend legal claims.

6. International transfers

Some of our providers, including HubSpot, Google and Cloudflare, are based in the United States, so your personal data may be transferred outside the UK. Where we transfer personal data outside the UK, we rely on an appropriate safeguard recognised under UK data protection law. This means one of the following: the transfer is to a country the UK has decided provides adequate protection; the provider is certified under the UK Extension to the EU-US Data Privacy Framework; or the transfer is made under the UK International Data Transfer Agreement, or the International Data Transfer Addendum to the European Commission's standard contractual clauses. We take reasonable steps to make sure your data is treated securely and in line with this policy.

7. How long we keep your information

We keep personal data only for as long as we need it for the purposes set out in this policy. We keep enquiry and related personal data for up to six years after our last contact with you, or after the end of our relationship if you become a customer, so that we can meet our legal obligations and establish, exercise or defend legal claims. After that we securely delete or anonymise it. You can ask us to delete your data sooner, and we will do so unless we are required to keep it.

8. Keeping your information secure

Personal data is stored on secure systems operated by us and our providers. Please be aware that the transmission of information over the internet is never completely secure, and any transmission is at your own risk.

9. Your rights

Under UK data protection law you have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data corrected (rectification)
  • Have your data erased in certain circumstances
  • Restrict how we process your data in certain circumstances
  • Object to processing based on our legitimate interests, and to direct marketing at any time
  • Data portability, where processing is based on consent or a contract and is carried out by automated means

To exercise any of these rights, please contact us via our contact page. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk, although we would welcome the chance to address your concerns first.

The Website may contain links to third-party websites. Those websites have their own privacy policies, which you should read. We do not accept responsibility or liability for those policies, as we have no control over them.

11. Changes to this policy

We may update this policy from time to time. The version published on the Website is the current version, and material changes will be reflected here.

12. Contacting us

We welcome any questions, comments or requests about this policy or your personal data. Please contact us via our contact page.

Last updated: 22 July 2026