Privacy Policy

Introduction

Your privacy is important to us. This privacy policy describes how ProfitAbility collects, uses and protects your personal data, including through your use of this website, any data you may provide when you complete our contact form, request a demonstration, purchase one of our products or services, or work with us to facilitate or take part in a ProfitAbility business simulation. 

ProfitAbility Business Simulations Ltd is the controller and responsible for your personal data (collectively referred to as "ProfitAbility", "we", "us" or "our" in this privacy policy).

If you have any questions about this privacy policy, including any requests to exercise your legal rights (see section 7) please contact us using our contact details set out at section 8. 

1. What data do you collect about me?

Personal data means any information about an individual from which that person can be identified. 

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data includes name, passport information or other identity document information.
• Contact Data includes name, company, email address and telephone number, billing address, delivery address.
• Financial Data includes bank account and payment card details.
• Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
• Technical Data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website. 
• Profile Data includes purchases or orders made by you, your interests, preferences, feedback and survey responses.  
• Usage Data includes information about how you interact with and use our website, products and services. 
• Marketing and Communications Data includes your preferences in receiving marketing from us and our third-parties and your communication preferences.

2. How is my personal data collected?

We use different methods to collect data from and about you including through:

• Your interactions with us. You may give us your personal data by interacting with us or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
• get in touch via our online contact form;
• subscribe to our newsletter; 
• request marketing to be sent to you;
• take part in a ProfitAbility business simulation; or
• give us feedback or contact us. 
• Automated technologies or interactions. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, and other similar technologies. Please see our cookie policy for further details.
• Third-parties or publicly available sources. We will receive personal data about you from various third-parties and public sources including analytics providers, search engine providers and marketing partners. 

3. How do you use my personal data?

Legal basis

We are required by law to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:

• Performance of a contract with you: Where we need to use your personal data to enter and perform a contract with you, for example where we engage you as one of our business simulation facilitators.
• Legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, where those legitimate interest are not outweighed by any negative impact on your rights or interests. For example, we rely on our legitimate interests to use your data to give you the best and most secure customer experience.
• Legal obligation: We may use your personal data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis.
• Consent: We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter.

Purposes for which we will use your personal data 

We have set out below, in a table format, a description of how we plan to use the various categories of your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Purpose/Use	Type of data	Legal basis
To provide our products and services including: Manage payments, fees and charges Collect and recover money owed to us	Contact  Financial  Transaction  Marketing and Communications	Necessary for our legitimate interests
To manage our relationship with you which will include: Notifying you about changes to our terms or privacy policy Dealing with your requests, complaints and queries	Identity Contact  Profile  Marketing and Communications	Necessary to comply with a legal obligation (in limited circumstances such as where you make a rights request) Necessary for our legitimate interests (to keep our records updated and manage our relationship with you)
To enable you to complete a survey	Contact  Marketing and Communications	Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)	Contact Technical	Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
To deliver relevant website content to you	Contact  Profile  Usage  Marketing and Communications  Technical	Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)
To use data analytics to improve our website, products/services, customer relationships and experiences and to measure the effectiveness of our communications and marketing	Technical  Usage	Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)
To send you relevant marketing communications and make personalised suggestions and recommendations to you about products or services that may be of interest to you based on your Profile Data	Contact  Technical  Usage  Profile  Marketing and Communications	Consent, having obtained your prior consent to receiving direct marketing communications (where we are required to obtain your consent) Necessary for our legitimate interests to carry out direct marketing, develop our products/services and grow our business (where we are not required to obtain your consent)
To respond to your rights requests and confirm your identity	Contact Identity	Necessary to comply with a legal obligation
To work with our business simulation facilitators, including initial engagement, administering payments and other related administration	Contact Financial Transaction	Performance of a contract with you

Direct marketing 

You will receive marketing communications from us if you have requested information from us by filling in the contact form on our website, purchased products or services from us or taken part in one of our business simulations, and you have not opted out of receiving the marketing. 

We may also analyse your Contact, Technical, Usage and Profile Data to form a view which products, services and offers may be of interest to you so that we can then send you relevant marketing communications. 

Opting out of marketing 

You can ask us to stop sending you marketing communications at any time by following the opt-out links within any marketing communication sent to you or by contacting us at hello@profitability.com. 

If you opt out of receiving marketing communications, you will still receive service-related communications that are essential for administrative or customer service purposes such as order confirmations, appointment reminders, updates to our Terms and Conditions, or checking that your contact details are correct.

Cookies

For more information about the cookies we use and how to change your cookie preferences, please see our Cookies Policy.

4. With whom is my data shared?

We may share your personal data where necessary with the parties set out below for the purposes set out in the table at section 3 above “Purposes for which we will use your personal data”:

• Internal third-parties that are part of our group of companies. 
• Third-parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy. 
• Third-parties who help us deliver our products and services and improve your experience with us. These include:
  • Facilitators of our business simulations who help deliver our services in various locations around the world.
  • Marketing and advertising partners.
• Relevant public agencies and authorities when we are under a legal obligation or it is in our legitimate interest to do so.

We have contracts in place with all third-party service providers with whom we share your personal data, and require them to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

5. Do you transfer my data abroad?

We work with trusted business partners and third-party service providers around the world. Some of these third-parties process personal data outside of the UK. This means we may share your personal information internationally, including outside of the United Kingdom and European Union. We will always ensure we can rely on an approved UK Government adequacy decision, the UK extension of the EU-US Data Privacy Framework, or have appropriate legal safeguards in place such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses (SCCs) to protect the transfer of data.

6. How long do you keep my data?

We will only retain your personal data for as long as needed to fulfil the purposes we collected it for as set out in the table in section 3 above, and as long as needed to meet any legal, regulatory, tax, accounting or reporting requirements. 

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

In some circumstances you can ask us to delete your data: see section 7 below for further information.

7. What are my rights?

You have a number of rights under data protection laws in relation to the personal data we hold about you. 

You have the right to:

• Request a copy of your personal data.
• Request correction of any mistakes in your personal data. 
• Request erasure of your personal data.
• Object to the processing of your personal data (in particular for direct marketing purposes).
• Request the transfer of your personal data to you or to a third-party in a structured, commonly used, and machine-readable format.
• Request restriction of processing of your personal data.
• Withdraw consent at any time where we are relying on consent to process your personal data.
• Make a complaint to us in the first instance and the ICO regarding any data protection concerns you may have.

These rights are not absolute and there may be circumstances where we are entitled to refuse your request. 

If you wish to exercise any of the rights set out above, please contact us at the contact details set out in section 8 below.

8. How can I get in touch?

If you have any questions about this privacy policy or the use of your personal data or you want to exercise your privacy rights, please contact us using the following details:

ProfitAbility Business Simulations Ltd

The Wooden Barn (Unit 1)

Little Baldon Farm

Oxford

OX44 9PU

Website: https://profitability.com/

Email address: hello@profitability.com

9. How can I make a complaint?

If you wish to make a complaint about how we use your personal data, please write to us at the contact details provided in section 8 above. We hope that we can resolve any query or concerns that you may have.

You also have the right to make a complaint to the UK regulator for data protection issues, the Information Commissioner’s Office (https://ico.org.uk/make-a-complaint/). However, the ICO will expect you to have complained to us first.

10. Changes to this privacy policy 

We keep our privacy policy under regular review. This version was last updated on 31^st March 2026. 

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us, for example a new address or email address.

11. Third-party links  

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third-parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.