Safeguarding

BCSA staff have no direct contact with learners. All interactions with young people are managed by the school, council, or organisation that commissions the programme. Access to the learner platform is controlled entirely by the commissioning body.

We collect only the minimum data necessary: first name, last initial, and organisation. No email addresses, dates of birth, photographs, or other personally identifiable information is required from under-18 learners.

No third-party analytics, advertising, or behavioural tracking. No cookies beyond the essential session cookie. No social features or user-generated content. The learner interface contains no external links.

Our website is hosted in the UK and our learning platform is hosted by TalentLMS on AWS infrastructure in the United States with appropriate international transfer safeguards in place. Processing is lawful under UK GDPR Article 6(1)(f) for legitimate interests, with a completed Legitimate Interest Assessment available on request. Learners, parents, and schools can request access to, correction of, or deletion of personal data at any time. Technical and organisational measures protect data in transit and at rest.

The commissioning organisation retains full responsibility for safeguarding in their setting. BCSA provides the platform and content; the organisation manages learner access, supervision, and safeguarding disclosures.

All programme content is reviewed for age-appropriateness and designed for learners from Year 5 upwards. Content avoids graphic imagery, distressing material, and dark patterns. The interface follows ICO Age Appropriate Design Code principles.