Privacy and Cookie Policy

This privacy and cookie policy (the “Policy”) describes the personal data collected or generated (“processed”) when you use (the “Site”).

This Policy describes the types of personal data collected and how your personal data is used, shared and protected. It also explains the choices you have relating to your personal data and how you can contact us.

It is important that you read this Policy together with any other privacy notice or fair processing notice that we may provide at or around the time that we collect or process personal data about you so that you are fully aware of how and why we are using that data. This Policy supplements the other notices and is not intended to override or replace them.

For ease of reading, we have divided this Policy into several sections:

  1. Who we are

  2. What information will Student Beans collect about me and how is it collected

  3. How will Student Beans use the information it collects about me?

  4. Why is Student Beans allowed to use my information in this way?

  5. How long will you keep my personal data?

  6. Do you share my data with any other organisations?

  7. Your rights

  8. When will Student Beans contact me?

  9. Web browser cookies

  10. Contact Details

  11. How to complain

This Policy was last updated on Feb 14th 2019


Student Beans and the Site are operated by The Beans Group. We registered in England and Wales under company number 5486885 and have our registered office at 1 Vincent Square, London, SW1 2PN.

Student Beans is the World's Leading Student Loyalty Network, we help hundreds of global brands run their own student discount programs using our award-winning student verification technology via their websites, apps and stores.

Our mission is to provide students worldwide access to the best discounts from the biggest brands, using market-leading technology that is well designed, simple to use and always reliable.

Our partners consist of brands and publishers. We provide a global student verification and marketing network for brands, and discount syndication for publishers.
The controller responsible for your personal data is The Beans Group.

We have appointed a data privacy manager who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this Policy, or if you think it has not been followed, please contact the data privacy manager using the details set out below.


Student Beans uses a number of specialist databases to collect data about Companies we feel could benefit from our services. We deepen our search to discover personal data for Employees at these companies whose roles are legitimately aligned to our services.

You provide some data yourself and this may include, for instance, when speaking on the phone to our Business Development team or registering for a Student Beans mailer.

  • Your business email address

  • Your name

  • Your job title

  • Details about the company you work for (industry and company size)

  • Details about your payment department


Information about your role and the company you work for helps us see how different professionals are using the Site and Student Beans Services.

Based on what we know about you, we may also show you adverts about Student Beans services on other websites, such as Facebook, Google, Linkedin and Twitter.

We also use your data for business, regulatory and legal purposes, like:
Getting in touch if we need to tell you about something, like a change to our policies or issues with a services you have undertaken with you on behalf of your company.


Student Beans will only use your personal data in the following circumstances:

  • Where we deem there is a legitimate interest to do so.

  • Where you have asked us to do so, or consented to us doing so.

  • Where we need to do so in order to perform a contract we have entered into with you.

  • Where it is necessary for our legitimate interests (or those of a third party) and your fundamental rights do not override those interests.

  • Where we need to comply with a legal or regulatory obligation.


Except if required otherwise by law, we retain your personal data for as long as necessary to fulfil the purposes for which we collect it and also where we have a legitimate interest in doing so, such as:

  • To enable us to respond effectively to grievances that may arise after you cease to engage with us or;

  • Where you sign up to receive e-mail marketing from us we will retain your e-mail address after you ‘opt-out’ of receiving e-mails in order to ensure that we continue to honour and respect that request.

You can ask us to access, rectify or, in some circumstances, delete your personal data: see ‘Your Rights’ below for further information.

We may also anonymise your data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.


We will only provide service providers with the minimum amount of personal data they need to fulfil the services we request, and we stipulate that they protect this information and do not use it for any other purpose. We take these relationships seriously and oblige all of our data processors to sign contracts with us that clearly set out their commitment to respecting individual rights, and their commitments to assisting us to help you exercise your rights as a data subject.

Please note that some of our service providers may be based outside of the European Economic Area (the “EEA”).  Where we transfer your data to a service provider that is outside of the EEA we seek to ensure that appropriate safeguards are in place to make sure that your personal data is held securely and that your rights as a data subject are upheld.

Please contact us if you want further information in relation to the transfer of your personal data out of the EEA.

When we share your personal data outside Student Beans we will:

  • Always share it in a secure way;

  • Make sure it’s treated consistently with this Policy; and

  • Not allow other companies to use it to contact you with their own marketing unless you give your permission.


As a data subject you have a number of rights in relation to your personal data. Below, we have described the various rights that you have, as well as how you can exercise them.

  1. Right of Access
    You may, at any time, request access to the personal data that we hold which relates to you (you may have heard of this right being described as a "subject access request").
    Please note that this right entitles you to receive a copy of the personal data that we hold about you in order to enable you to check that it is correct and to ensure that we are processing that personal data lawfully. It is not a right that allows you to request personal data about other people, or a right to request specific documents from us that do not relate to your personal data.
    You can exercise this right at any time by writing to us using contact details set out here and telling us that you are making a subject access request. You do not have to fill in a specific form to make this kind of request.

  1. Your Right to Rectification and Erasure
    You may, at any time, request that we correct personal data that we hold about you which you believe is incorrect or inaccurate. You may also ask us to erase personal data if you do not believe that we need to continue retaining it (you may have heard of this right described as the “right to be forgotten”).
    Please note that we may ask you to verify any new data that you provide to us and may take our own steps to check that the new data you have supplied us with is right. Further, we are not always obliged to erase personal data when asked to do so; if for any reason we believe that we have a good legal reason to continue processing personal data that you ask us to erase we will tell you what that reason is at the time we respond to your request.
    You can exercise this right at any time by writing to us using the contact details set out here and telling us that you are making a request to have your personal data rectified or erased and on what basis you are making that request. If you want us to replace inaccurate data with new data, you should tell us what that new data is. You do not have to fill in a specific form to make this kind of request.

  2. Your Right to Restrict Processing
    Where we process your personal data on the basis of a legitimate interest (see the section of this Policy which explains why we use your personal data) you are entitled to ask us to stop processing it in that way if you feel that our continuing to do so impacts on your fundamental rights and freedoms or if you feel that those legitimate interests are not valid.
    You may also ask us to stop processing your personal data (a) if you dispute the accuracy of that personal data and want us verify that data's accuracy; (b) where it has been established that our use of the data is unlawful but you do not want us to erase it; (c) where we no longer need to process your personal data (and would otherwise dispose of it) but you wish for us to continue storing it in order to enable you to establish, exercise or defend legal claims.
    Please note that if for any reason we believe that we have a good legal reason to continue processing personal data that you ask us to stop processing, we will tell you what that reason is, either at the time we first respond to your request or after we have had the opportunity to consider and investigate it.
    You can exercise this right at any time by writing to us using the contact details set out here and telling us that you are making a request to have us stop processing the relevant aspect of your personal data and describing which of the above conditions you believe is relevant to that request. You do not have to fill in a specific form to make this kind of request.

  3. Your Right to Portability
    Where you wish to transfer certain personal data that we hold about you, which is processed by automated means, to a third party you may write to us and ask us to provide it to you in a commonly used machine-readable format.
    Because of the kind of work that we do and the systems that we use, we do not envisage this right being particularly relevant to the majority of individuals with whom we interact. However, if you wish to transfer your data from us to a third party we are happy to consider such requests.

  4. Your Right to stop receiving communications
    For details on your rights to ask us to stop sending you various kinds of communications, please contact us.

  5. Your Right to object to automated decision making and profiling
    You have the right to be informed about the existence of any automated decision making and profiling of your personal data, and where appropriate, be provided with meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing that affects you.

When you write to us making a request to exercise your rights we are entitled to ask you to prove that you are who you say you are. We will require you to provide copies of two of the following ID documents to help us to verify your identity:

  • Passport

  • Driving licence

It will help us to process your request if you clearly state which right you wish to exercise and, where relevant, why it is that you are exercising it. The clearer and more specific you can be the faster and more efficiently we can deal with your request. If you do not provide us with sufficient information then we may delay actioning your request until you have provided us with additional information (and where this is the case we will tell you).


In relation to any service, activity or online content  we think you’d be legitimately interested in.

We may personalise the message content based upon any information you have provided to us and your use of the Site and apps.

We may use information which we hold about you to show you relevant advertising on third party websites (e.g. Facebook, Google, Instagram, Snapchat and Twitter). This could involve showing you an advertising message where we know you have a Student Beans account and have used Student Beans discounts. If you don’t want to be shown targeted advertising messages from Student Beans, some third party websites allow you to request not to see messages from specific advertisers on that website in future.


  1. What is a Cookie?
    A cookie is a small amount of data, which often includes a unique identifier that is sent to your computer, tablet or mobile phone (all referred to here as a "device") web browser from a website's computer and is stored on your device's hard drive. Each website can send its own cookie to your web browser if your browser's preferences allow it. Many websites do this whenever a user visits their website in order to track online traffic flows. Similar technologies are also often used within emails to understand whether the email has been read or if any links have been clicked. If you continue without changing your settings, we’ll assume that you are happy to receive all cookies on the Site. However, you can change your cookie settings at any time.
    On the Site, cookies record information about your online behaviour.

  2. How does Student Beans use cookies?
    Information supplied by cookies can help us to understand the profile of our visitors and help us to provide you with a better service.

  3. Other information collected from web browsers
    Your web browser may also provide Student Beans with information about your device, such as an IP address and details about the browser that you are using.

If you have any concerns about the way that we use cookies or in respect of your settings, then please contact us.


If you any questions or comments about this Policy please contact The Data Privacy Manager

by email:

by post:
Student Beans
1 Vincent Square
London SW1P 2PN


We hope that we can resolve any query or concern you raise about our use of your data so please in the first instance get in touch via the contact details above.

You do however have the right to make a complaint under the General Data Protection Regulation to a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at or via telephone on 0303 123 1113.