Data & compliance

Built for outreach your
compliance team can sign off.

Selling into schools means handling data responsibly — in every market you operate in. Here is exactly how Big School sources, verifies, and protects data, and how we keep your outreach compliant with GDPR, CAN-SPAM, CASL, the Spam Act, and equivalent rules wherever you sell.

The principles

What to know first

Professional contact data only

The database holds role-based business contact details — names, job titles, and work email addresses for professionals at schools and school groups. It contains no student data and no personal, non-professional information.

A lawful basis in every market

Under GDPR (EU/UK), B2B outreach to relevant professionals is processed on the basis of legitimate interest; in the US, Canada, Australia and beyond, the equivalent permission model for each region applies. Every message identifies the sender and offers a clear way to opt out.

Sourced from public information

Data is compiled from publicly available professional sources — school and group websites, public directories, and official listings — then verified for accuracy before it reaches your campaigns.

Suppression built in

When a contact opts out they are automatically suppressed across your account. You can also upload your own suppression lists — including your existing clients — to permanently exclude specific domains or addresses.

One-click removal on request

If a contact asks not to be emailed, you remove them in a single click. That address is instantly suppressed across your entire account, so no future campaign — from any seat — can reach it again.

Own-domain sending, no shared pools

Every account sends from its own verified domain and mailboxes. Your sending reputation is never pooled with other customers, so your deliverability and compliance posture stay entirely your own.

How the data is handled

From public source to protected record

01

Compile

Professional contact details are gathered from publicly available sources — official school and group websites, public directories, and listings.

02

Verify

Every email address is passed through a verification process that confirms the address is valid and deliverable before it enters the live database.

03

Maintain

Records are continually reviewed and refreshed. New schools, contacts, and markets are added every month, and stale or invalid records are removed.

04

Protect

Opt-outs are captured and suppressed automatically, campaigns send from your own domain, and access is controlled per account.

Individual rights

Rights we uphold — everywhere you sell

Every individual in the database can exercise their rights, wherever they're contacted from. Requests are actioned and, where relevant, applied as permanent suppression — consistent with GDPR (EU/UK), CAN-SPAM (US), CASL (Canada), the Spam Act (Australia), and equivalent regimes elsewhere.

  • The right to be informed — every email identifies the sender and its purpose
  • The right to object / opt out — a clear unsubscribe in every message, plus one-click removal you can action directly
  • The right of access — requests for the data held about an individual are actioned
  • The right to erasure — one click removes a contact and permanently suppresses them across your account
  • The right to rectification — inaccurate records are corrected when flagged

This page is a plain-language summary and does not constitute legal advice. See our privacy policy for the full statement. privacy policy.