Privacy Policy
Last updated: 15 March 2026 · Version 1.0
In plain English: We collect only what we need to run our service. We don't sell your data. We don't use it for advertising. We store everything in the UK. You can ask us to delete it at any time.
1. Who we are
BoardMet Ltd ("BoardMet", "we", "us", "our") is registered in England and Wales. Company number: 16740592. We provide professional governance clerking and advisory services to schools and multi-academy trusts.
We are registered with the Information Commissioner's Office (ICO) as a data controller.
Contact: [email protected] · 020 3435 4306
2. What personal data we collect
| Data | Why we collect it | Source |
|---|---|---|
| Name, work email, role, school name | Responding to audit requests and enquiries | You (contact form) |
| Email address | Sending our termly governance briefing (only if you sign up) | You (newsletter form) |
| Governor names and contact details | Providing our clerking and compliance service under contract | Client schools |
| Meeting minutes and board papers | Fulfilling our clerking obligations | Client schools |
| IP address, browser type, pages visited | Website analytics (aggregated, not individually identified) | Your browser |
3. Legal basis for processing
We rely on the following lawful bases under UK GDPR Article 6:
- Contract performance — processing necessary to deliver services under a signed agreement with a school or trust.
- Legitimate interests — responding to enquiries from prospective clients, maintaining basic website analytics, and protecting against fraud.
- Consent — sending the termly governance briefing newsletter. You can withdraw consent at any time by clicking unsubscribe or emailing us.
4. How we use your data
We use personal data only to:
- Respond to your enquiry or audit request
- Provide our clerking, compliance, and advisory services to contracted schools
- Send the termly governance briefing to subscribers
- Meet our own legal and regulatory obligations
We do not sell, rent, or share your data with third parties for marketing purposes.
5. Who we share data with
We share data only where necessary:
- Formspree Inc. — processes contact form submissions on our behalf (US-based, EU-UK adequacy framework applies). Their privacy policy is at formspree.io/legal/privacy-policy.
- GovernorHub — used to manage board records for contracted schools. UK-hosted.
- HMRC / legal authorities — where required by law.
6. How long we keep it
| Data type | Retention period |
|---|---|
| Enquiry and contact form data | 12 months from last contact |
| Newsletter subscriber email | Until you unsubscribe |
| Contract and service data (minutes, compliance records) | 7 years from contract end (statutory requirement) |
| Governor personal data held on behalf of a school | Deleted within 30 days of contract end |
7. Where data is stored
All data we hold directly is stored on UK-based servers. Where we use processors outside the UK (see section 5), we ensure appropriate safeguards are in place under UK GDPR Article 46.
8. Cookies
We use essential cookies only. These are necessary for the website to function (e.g. remembering your cookie preference). We do not use advertising, tracking, or analytics cookies that identify you individually.
You can refuse non-essential cookies without affecting your use of the site. There are no non-essential cookies to refuse.
9. Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (subject to legal obligations)
- Restriction — ask us to limit how we use your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — at any time, for processing based on consent
To exercise any of these rights, email [email protected]. We will respond within one calendar month.
10. Children's data
Our services are directed at schools and education professionals. We do not knowingly collect personal data from children under 18. If you believe a child has submitted data to us, please contact us immediately and we will delete it promptly.
11. Complaints
If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
ico.org.uk/make-a-complaint · 0303 123 1113
We would, however, appreciate the chance to address your concern directly before you contact the ICO. Please email us first at