Data & compliance
Built for outreach your
compliance team can sign off.
Selling into schools means handling data responsibly — in every market you operate in. Here is exactly how Big School sources, verifies, and protects data, and how we keep your outreach compliant with GDPR, CAN-SPAM, CASL, the Spam Act, and equivalent rules wherever you sell.
The principles
What to know first
Professional contact data only
The database holds role-based business contact details — names, job titles, and work email addresses for professionals at schools and school groups. It contains no student data and no personal, non-professional information.
A lawful basis in every market
Under GDPR (EU/UK), B2B outreach to relevant professionals is processed on the basis of legitimate interest; in the US, Canada, Australia and beyond, the equivalent permission model for each region applies. Every message identifies the sender and offers a clear way to opt out.
Sourced professionally, verified before use
Data is compiled from professional sources including school and group websites, public directories and official listings, then reviewed and verified before it reaches your campaigns. It holds professional business contact information only.
Suppression built in
When a contact opts out they are automatically suppressed across your account. You can also upload your own suppression lists — including your existing clients — to permanently exclude specific domains or addresses.
One-click removal on request
If a contact asks not to be emailed, you remove them in a single click. That address is instantly suppressed across your entire account, so no future campaign — from any seat — can reach it again.
Own-domain sending, no shared pools
Every account sends from its own verified domain and mailboxes. Your sending reputation is never pooled with other customers, so your deliverability and compliance posture stay entirely your own.
How the data is handled
From source to protected record
Compile
Professional contact details are gathered from professional sources including official school and group websites, public directories and listings.
Verify
Every email address goes through two-stage verification confirming it is valid and deliverable immediately before it is used in a campaign.
Maintain
Every school, group and contact record is reviewed on a four to five week cycle. New schools, contacts and markets are added every month, and stale or invalid records are removed.
Protect
Opt-outs are captured and suppressed automatically, campaigns send from your own domain, and access is controlled per account.
Individual rights
Rights we uphold — everywhere you sell
Every individual in the database can exercise their rights, wherever they're contacted from. Requests are actioned and, where relevant, applied as permanent suppression — consistent with GDPR (EU/UK), CAN-SPAM (US), CASL (Canada), the Spam Act (Australia), and equivalent regimes elsewhere.
- The right to be informed — every email identifies the sender and its purpose
- The right to object / opt out — A clear unsubscribe in every message, plus one-click removal you can action directly" is accurate — that's the customer's action within their own account.
- The right of access — requests for the data held about an individual are actioned. Email privacy@bigschoolmarketingtool.com.
- The right to erasure — email us and we will remove the record from the database and suppress the address permanently.
- The right to rectification — inaccurate records are corrected when flagged
This page is a plain-language summary and does not constitute legal advice. See our privacy policy for the full statement. privacy policy.