Privacy notice.
How Boardmet handles personal data collected through this website, and what you can ask us to do with it.
Last updated: 26 August 2026
1. Who we are
Boardmet provides governance support services to schools, academies and trusts. For the personal data described in this notice, the data controller is:
- Boardmet Limited, registered in England and Wales, company number 16740592
- Registered office: 86–90 Paul Street, London EC2A 4NE
- ICO registration number: ZC098329
- Data protection contact: schools@boardmet.com
2. What we collect through this website
The only personal data this website collects directly is what you enter into the enquiry form: your name, your school or trust, your email address, your telephone number if you provide one, the type of support you are asking about, any date you tell us is important, and the details you choose to write in the message field.
Our web host also processes standard technical information, your IP address, browser type and the pages requested, as part of serving and securing the site. Before you make a cookie choice, an anonymous and cookieless signal that a page was viewed is sent to Google; it stores nothing on your device and cannot be linked to you or to a later visit. If you accept analytics cookies, we also receive aggregated information about how the site is used.
Please do not include personal data about pupils, parents or staff in a website enquiry. If your enquiry concerns a specific case, tell us that a case exists and we will agree a secure route before any detail is shared.
3. Why we use it, and our lawful basis
- To respond to your enquiry and discuss services. Lawful basis: legitimate interests, responding to a business enquiry you have chosen to send us.
- To provide services you engage us for. Lawful basis: performance of a contract, or steps taken at your request before entering one.
- To meet legal and regulatory obligations, including accounting records. Lawful basis: legal obligation.
- To understand how the website is used and how enquiries reach us. Lawful basis: consent, given through the cookie banner, for anything stored on or read from your device. The anonymous cookieless measurement described in section 4 stores nothing on your device and rests on our legitimate interest in knowing whether the site works and where enquiries come from. You can withdraw consent at any time.
4. Cookies and measurement
No non-essential cookies are set until you accept them. When you first visit, a banner offers Essential only or Accept. Your choice is stored in your browser.
The Google tag loads on every page, but until you accept it runs with all storage consent denied: it sets no cookies, reads no cookies, and stores nothing on your device. In that state it sends Google only an anonymous, cookieless signal that a page was viewed, which Google uses to estimate totals. It carries no identifier, so it cannot be tied to you or to a later visit.
If you accept, we additionally use Google Analytics to understand site usage, Google Ads conversion measurement to see which advertising produces enquiries, and the LinkedIn Insight Tag for the same purpose on LinkedIn. Those do set cookies, and involve transfers to Google and LinkedIn as processors or independent controllers under their own terms. If you choose Essential only, no cookies are set and the LinkedIn tag does not load at all.
To change your choice, clear this site’s data in your browser settings and reload the page.
5. Who we share it with
We do not sell personal data and we do not share enquiry details with third parties for their own marketing. We use a small number of processors to run the service: our website host, our email and transactional email providers, and our IT and document storage providers. Each is bound by a written contract that restricts what they may do with the data.
We may also disclose information where we are legally required to, or where it is necessary to establish or defend a legal claim.
6. Where it is held
Data is held within the UK or the European Economic Area wherever possible. Where a provider processes data outside that area, we rely on UK adequacy regulations or the International Data Transfer Agreement / Addendum to safeguard it.
7. How long we keep it
- Enquiries that do not lead to an engagement: up to 24 months, then deleted.
- Client records: for the duration of the engagement and 6 years afterwards, to meet contractual, insurance and accounting requirements.
- Website analytics: in line with the retention period configured in the analytics platform.
8. Your rights
Under UK data protection law you have the right to ask us for a copy of your personal data; to have inaccurate data corrected; to ask us to delete it; to restrict or object to how we use it; to receive it in a portable format where applicable; and to withdraw consent where consent is the basis we rely on.
To exercise any of these, contact schools@boardmet.com. We will respond within one month.
If you are not satisfied with our response you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, or by telephone on 0303 123 1113.
9. Changes to this notice
If we change how we handle personal data we will update this page and revise the date above.