Last updated: January 2025
This Privacy Policy explains how The Bigger Picture Ltd (“The Bigger Picture”, “we”, “us”, “our”) collects, uses and protects your personal information. It applies to visitors to our website, people who contact us, clients, suppliers, and individuals who participate in our training sessions.
The Bigger Picture Ltd is the data controller for the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
If you have any questions, you can contact us at:
Registered office: 71–75 Shelton Street, London WC2H 9JQ
1. What Is Personal Data?
“Personal data” means any information that identifies or could identify you. We collect it when:
You provide it directly (e.g., enquiry forms, email, phone, training interactions)
It is collected automatically when you use our website
A third party (such as your employer) provides it to us for training or project administration
Anonymised data — where individuals cannot be identified — is not covered by this notice.
2. What Personal Data We Collect
A. Information you provide to us
This may include:
Name
Job title and company
Email address and phone number
Work location
Messages or enquiries
CVs, applications, employment or contractor information
Accessibility or training requirements (if relevant to your participation)
Social media profile details (when interacting with us online)
B. Information collected automatically
Through cookies and analytics tools we may collect:
IP address
Browser, device and operating system
Pages viewed and interactions
Date/time of access
Approximate geographic location
Referring websites
For more information, please see our Cookie Policy, which explains our use of analytics, advertising pixels and how consent is collected in accordance with PECR (Privacy and Electronic Communications Regulations).
3. How We Use Your Personal Data
We use your data to:
Respond to enquiries
Provide information about our services
Deliver and administer training sessions
Organise attendance, logistics, and follow-up resources
Improve our website and user experience
Manage our relationship with clients, freelancers and suppliers
Assess job or contractor applications
Maintain business records and financial accounts
Meet legal and regulatory obligations
We do not sell your personal information.
Marketing communications are only sent:
With your consent (opt-in)
Or under legitimate interest where appropriate (e.g., relevant business enquiries)
You may unsubscribe at any time.
4. Legal Bases for Processing
We process data under the following lawful bases:
Consent
Where you actively give permission (e.g., form submissions, subscribing to updates).
Legitimate Interests
For purposes such as responding to enquiries, improving our website, or managing our business.
Contractual Necessity
To deliver training services or prepare to enter a contract.
Legal Obligation
To meet financial, regulatory or reporting requirements.
You may withdraw consent at any time by emailing admin@thebiggerpictureltd.com.
5. Sharing Your Information
We may share your information with:
Trusted service providers (e.g., hosting, IT support, email platforms, analytics tools)
Professional actors, facilitators or associates who support a training project
Your employer (if they have commissioned training)
Accountants, insurers or legal advisors where appropriate
Regulators or authorities if legally required
All third-party providers must comply with UK GDPR and sign appropriate Data Processing Agreements.
If information is transferred outside the UK, we ensure suitable safeguards (Standard Contractual Clauses or adequacy decisions).
6. Data Security
We use appropriate technical and organisational measures to protect personal data from:
Unauthorised access
Accidental loss
Misuse
Alteration
Disclosure
Access is restricted to staff and associates who need it to deliver services and are bound by confidentiality duties.
7. How Long We Keep Your Data
We retain personal data only for as long as necessary for the purposes described above.
Examples:
Enquiries: usually 12–24 months
Client/project data: retained for legal, financial and record-keeping requirements
Recruitment data: normally 6–12 months unless you ask us to keep it longer
Training records (attendance, session notes): retained as required by the contract with your employer
Once no longer required, data is securely deleted or anonymised.
8. Your Rights Under UK GDPR
You have the right to:
Access your personal data (Subject Access Request)
Correct inaccurate information
Delete your data (in certain circumstances)
Object to processing based on legitimate interests
Withdraw consent at any time
Request portability of your data
Restrict processing in certain circumstances
Complain to the ICO if you believe your rights have been breached
To exercise any right, contact:
ICO: https://ico.org.uk/make-a-complaint/
9. Children’s Privacy
Our website and services are not intended for children under 16, and we do not knowingly collect data relating to children.
10. Third-Party Links
Our website may contain links to third-party sites. We are not responsible for how they handle your personal data.
11. Updates to This Policy
We may update this privacy notice from time to time. The latest version will always be available on this page.
Last updated: January 2025