Privacy Policy

Our privacy policy explained for our clients

We value the trust you place in us when you share your personal data.  It is our promise to you that we will be open and honest with you about how we use the information you’ve entrusted with us. This page describes who we are, why we need to collect information about you and how we will use it. We will tell you how your information will help us improve the services we provide to schools and academies. We recognise the importance of treating your data with care and we have taken steps to ensure we only use it in accordance with your wishes.

Who we are

We are drb Schools and Academies Services Limited.

drb was established in September 2000 as an independent private provider of financial management services to schools and, more recently, accountancy services to academies. Many of our consultants have been with us from the beginning and, as a result, have over 17 years experience of working with schools and academies.

drb has been at the forefront of support to schools and academies and was initially formed by ex-local authority employees who wanted to make a positive difference to schools and contribute to an improvement in the opportunities available to children.

Our slogan has always been ‘with children and young people at the heart of all that we do’ and this points to the ethos and values of the company; by providing effective financial assurance, school improvement and the education of pupils in those schools can be enhanced.

We are registered in England and Wales (Company No. 9372668).  We are also a company limited by guarantee. We never share data outside of our organisation without your express permission.

We are the ‘Data Controller’ of personal information that this policy applies to under the Data Protection Act 1998.

The information we collect from our clients

We only collect information about you that:

  • records your details from online course bookings
  • allows us to fulfil contracted financial management support in schools
  • records your details from online bookings
  • records communications between us, so we can refer back to things should we need to
  • enables us to contact you if we need to
  • shows us how you are using the website, so we can keep improving it
  • helps us to make our website work better for you
  • helps us keep in touch with you so we can let you know about the organization, services and courses

Parts of our website may ask you for more information so that you can use services or complete transactions. You’ll always be told when this information is being collected. In many cases you’ll be asked to enter it – for example, an email address for correspondence. This information will only be used for the purposes stated.

We collect the following information from people visiting the website:

  • Questions, queries and feedback you leave, including your email address if you send us an email
  • Your IP address and which web browser (and version) you use
  • Information on how people use the site, using cookies and page tagging, to help us to improve the website  and our services

In the course of providing financial assurance to our clients we need to obtain staffing details as spending in this area accounts for the majority of expenditure. Consultants will refer to staffing spreadsheets which include names, hours worked, salary points, salary, National Insurance and pension details.

If you send us feedback, we will keep your message

What are cookies?

Like most websites, our site uses small data files stored on your computer called cookies. Please read our cookies policy, which explains the types of information we collect through the use of cookies and how you can manage their use.

Permission to contact you

Our policy states that you should only receive contact from us with information about services and courses where you have specifically opted into receive this information.

To change the way we contact you please get in touch with our team on telephone number 0121 333 3132 or email us at

How we store your personal data

With regard to information held by consultants about school staff, all of the data held will always be secure. Information is held on a secure shared drive and, on occasion, on an individual’s memory stick with the highest level of encryption security. The information is only available to the individual consultant to allow them to perform their role or, on occasion, to a manager to allow quality control processes to be carried out.

All information you provide to us is stored on secure servers in secured databases.

All card payment transactions are encrypted.

All information stored is only used whilst you continue to use the services of drb Schools and Academies Services and the data will be securely removed from our current live database two years after your last service / transaction.  Any information held beyond this point is used for statistical purposes only and is not accessible for communication purposes.

The transmission of information over the internet is never completely secure. We do our very best to protect your personal data, but cannot guarantee the security of your data transmitted to our site by submitting an online form, any transmission is at your own risk. We use strict procedures and security features to try to prevent unauthorised access.

Any information we collect from supporters is used to:

  • improve the content and design of the website
  • let you use interactive features, when you choose to do so
  • contact you, with your permission

We never share your information with other organisations for marketing, market research or commercial purposes, and we don’t pass on your personal information to any other website.

Use of postal addresses and phone numbers

If you enter your postal address or phone number or email address into any of our online forms, we may use these details to contact you, unless you ask us not to.


We will ask your consent to receive (opt in) to certain information or communications from us about drb Schools and Academies Services. We will only contact you in such circumstances.

Disclosure of your information to others

We may disclose your personal information:

  • if we are under a duty to disclose or share visitors’ personal data to comply with a legal obligation
  • for law enforcement purposes
  • to apply our terms of use and other agreement

We never sell or share information we hold with any commercial or other organisations.

When we transfer your information

From time to time we may require services, such as newsletter mailings, from suppliers, that are based worldwide and your information will be passed to them for the purposes of providing that service. Where we engage these suppliers we make sure that they apply the same levels of protection, security and confidentiality we apply. However, such information may be accessed by law enforcement agencies and other authorities to prevent and detect crime and comply with legal obligations.

Links to and from our website

Our website contains links to and from other organisations’ websites. This privacy policy, the one you’re reading, only applies to

If you go to another website from this one, you need to read their privacy policy to find out what they do with your information.

When you come to our website from another website, we may get personal information about you from the other website. You should read those websites’ privacy policies if you want to know about this.

Your rights

Under the Data Protection Act 2018, you have the right:

  • to be informed so that there is transparency about the data held
  • of access to their personal information
  • to request rectification of their personal information where appropriate
  • to erasure/deletion of their personal information
  • to restrict/block processing of their personal information
  • to have their personal information made portable
  • to object to the processing of their personal information where appropriate
  • in respect of automated decision making

If you believe that we hold personal information about you and you would like to see a copy of it (Subject Access Request), please write to The Data Protection Officer, 3 Brindleyplace, 2ndFloor, Birmingham, B1 2JB.

When we are assured of your identity we will send you a copy of your personal information that we are legally required to disclose.

Changes to our policy

As we continue improving our websites, we may update this policy. Any changes we may make to our privacy policy in the future will be posted on the website.


Please get in touch if you believe that information we hold about you is inaccurate and want it to be corrected:

Tel: 0121 333 3132

For a copy of the personal information we hold about you, please write to the Data Protection Officer:

drb Schools and Academies Services Limited, 3 Brindleyplace, Birmingham, B1 2JB

If you wish to raise any concerns about the data we hold or the accuracy of it please contact:

Data Protection Officer on 0121 333 3132 or email

Updated HS – April 2018