As mbop holds data about young people, it is important to keep this private and secure. The Data Protection Act (2018) provides a framework for this.
For a start, the data collected is relevant and limited only to what is necessary. Student data on mbop consists of a first and last name. Staff data consists of a first and last name and an email address.
Any payment information provided is kept on stripe, which has its own privacy policy
Additionally, all mbop is hosted on fully-EU based infrastructure, ensuring that data is kept safe legally as well as physically.
You have the right to:
That's this document you're reading now
All data held on you and those in your institution is available using the management dashboards.
All data is able to be updated via the management dashboards
To accomplish this, you can delete your account via the management dashboard. All institution data will instantly be removed from the live database. mbop has a rolling backup cycle, so all data will be removed from backups within a few months.
If you have a concern about how your data is processed, or wish to enact any of the above rights without using the management dashboard, please get in touch