Privacy Policy

1.1 Information You Provide Directly

• Account information: Name, email address, institution or organisation name, job title or role, and password when you create an account.
• Purchase information: Billing address, payment method details (processed securely by our payment provider - we do not store full card numbers), and order history.
• Communications: Messages, enquiries, and feedback you send us via email, contact forms, or demo request forms.
• Institutional data: Student or participant names and email addresses provided by Institutional Customers for account creation purposes.

1.2 Information Collected Automatically

• Website usage data: IP address, browser type and version, operating system, referring URL, pages visited, time spent on pages, and other standard web analytics data.
• Simulation data: In-simulation decisions, performance metrics, session duration, business outcomes, and learning analytics generated during use of Business Heroes. This data powers the analytics dashboard and is essential to the educational experience.
• Device information: Hardware model, operating system version, and application version when using the Business Heroes desktop application.

1.3 Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your experience, analyse traffic, and understand usage patterns. You can control cookie preferences through your browser settings. Essential cookies required for website functionality cannot be disabled.

We use the information we collect to:

• Provide, operate, and maintain Business Heroes and our related services.
• Create and manage your account and process transactions.
• Generate learning analytics, performance reports, and assessment data for students, educators, and administrators.
• Communicate with you about your account, orders, support requests, and product updates.
• Send marketing communications where you have opted in (you may unsubscribe at any time).
• Improve our products and services through aggregated, anonymised usage analysis.
• Detect, prevent, and address technical issues, fraud, or security threats.
• Comply with legal obligations.

We do not sell your personal information. We may share information only in the following circumstances:

• Service providers: We share data with trusted third-party service providers who assist us in operating our platform - including cloud hosting, payment processing, email delivery, and analytics. These providers are contractually bound to use your data only for the services they provide to us and to maintain appropriate security measures.
• Institutional Customers: Where you are an Authorised User under an institutional license, your simulation performance data and analytics are shared with the designated administrators and educators at your institution. This is a core function of the product.
• Legal requirements: We may disclose information if required to do so by law, regulation, legal process, or governmental request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

Where an Institutional Customer (university, school, or company) provides personal data of students, employees, or participants for the purpose of using Business Heroes:

• The Institutional Customer is the data controller; we act as a data processor on their behalf.
• We process this data solely for the purposes of providing the Business Heroes service as described in our Terms of Sale.
• Institutional Customers are responsible for ensuring they have appropriate consent or legal basis to share their users' data with us.
• Upon termination of the institutional license, we will delete or anonymise Authorised User data within 90 days unless retention is required by law or requested by the Institutional Customer.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure cloud infrastructure with enterprise-grade security controls.
• Access controls that limit data access to authorised personnel on a need-to-know basis.
• Regular security assessments and monitoring.

While we take reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
• Objection: Object to the processing of your personal data for direct marketing purposes.
• Withdrawal of consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at hello@visionaries.me. We will respond within 30 days.