Privacy Policy

Oxford School of Business & Management ("Oxford SBM", "we", "our") is the data controller for personal information collected through this website, our programme applications, and corporate engagements.

Registered office: Park End Street, Oxford OX1 1HP, United Kingdom.

Identity and contact data (name, work email, phone, employer, role) provided through enquiry, application, and consultation forms.

Programme data (interests, cohort, transcripts, credential status) for enrolled participants.

Technical data (IP address, browser type, device, referral URL, pages visited) collected automatically through analytics cookies where you consent.

Correspondence you send us, including enrolment conversations, sponsor references, and support requests.

To respond to enquiries and manage programme applications, enrolment, and enrolments.

To deliver executive programmes, certifications, and corporate engagements you or your organisation have commissioned.

To send you executive briefings, cohort openings, and event invitations where you have subscribed.

To improve programme design, website experience, and executive learning outcomes.

To comply with legal, regulatory, and safeguarding obligations.

We process personal data on the following legal bases under UK GDPR and equivalent frameworks: performance of a contract (enrolment), legitimate interests (executive research, enrolment correspondence), consent (marketing and analytics), and legal obligation (tax, accreditation).

We do not sell personal data. We share it only with vetted processors that support delivery, including cloud infrastructure, learning platforms, and payment providers, under contractual data-protection terms.

Where a corporate sponsor has commissioned an engagement, we share programme progress with designated learning leads under a documented data-sharing agreement.

Some processors operate outside the UK/EEA. Where they do, we rely on the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or adequacy decisions to protect your data.

We retain enquiry data for up to 24 months. Application and enrolment records are retained for the duration of the programme plus 7 years to support alumni verification and regulatory audit. Marketing preferences are honoured until you unsubscribe.

You have rights of access, rectification, erasure, restriction, portability, and objection under UK GDPR. To exercise any right, or to withdraw consent for marketing, contact privacy@oxfordsbm.example.

If you are unsatisfied with our response, you may complain to the UK Information Commissioner's Office at ico.org.uk.

We maintain administrative, technical, and physical safeguards including encryption in transit, access controls, and regular security testing. No system is perfectly secure; if a personal-data breach is likely to result in high risk, we will notify affected individuals promptly.

Data Protection Officer, Oxford SBM, Park End Street, Oxford OX1 1HP, United Kingdom. Email: privacy@oxfordsbm.example.