Bromley Brighter Beginnings is committed to protecting the data and privacy of the clients, referrers, donors and volunteers with whom we work. We aim to ensure that any information we are given is held securely and appropriately.
Bromley Brighter Beginnings strives to follow sector best practice regarding how we collect, store and use personal data. This policy explains how we do that – if you have any further questions, please contact us:
You can also write to us at: PO Box 1302, Bromley BR1 9PF
Bromley Brighter Beginnings (‘BBB’) is a registered charity (number 1162113).
You can find out more about our work at www.bromleybrighterbeginnings.org.uk
In this policy, BBB may be referred to as ‘we’ or ‘us’.
The information we collect relates to the referrers, clients, volunteers and supporters with whom we interact. We will always try to be clear, honest and open whenever we collect and use personal data. The bullet points below detail the different types of personal data we may collect, and the reasons why we do so.
Like all organisations in the UK, we need a lawful basis to collect and use personal data. The law allows for six legitimate purposes which organisations can rely on to legally process people’s personal data. Of these, two are relevant to BBB for the type of activities listed above:
a) information is processed based on an individual’s consent: where a client give us consent to process their data (whether that be directly or via the referrer who passes that consent to us), we will always keep a clear record of how and when this consent was obtained. We will always ask the consent of our clients before we share any information about them with any third parties (e.g. other organisations who can provide additional assistance) – the only exception to this is when we are compelled to share information by a legal authority acting in compliance with the law, or to fulfil our safeguarding duties.
All requests for items come to BBB as referrals on behalf of the client – the onus is on the referrer to make the client aware of how their data will be used by us (as detailed on the referral form), and to indicate that this consent has been given by ticking the appropriate box.
We also process information based on consent for specific purposes from referrers or supporters e.g. to send a newsletter (based on consent provided through our sign-up form to receive emails from us).
b) information is processed on it being a legitimate interest for us to do so: the law allows personal data to be legally collected and used by an organisation if it is necessary for a legitimate business (or in our case charitable) interest of the organisation – as long as its use is fair and balanced and does not unduly impact the rights of the individual concerned. This basis covers the majority of the personal information we collect.
Our ‘legitimate interests’ means delivery of our charitable aims, which include:
• to provide essential baby, child or household items to local families in financial hardship;
• to signpost or refer families to other local sources of support as necessary.
When we use clients’ or others’ personal information, we will always consider if it is fair and balanced to do so and whether it would be within their reasonable expectations that we would use their data in this way.
We will balance their rights and our legitimate interests to ensure that the way in which we use their data never goes beyond what they would expect and is not unduly intrusive or unfair.
We remove personal data from our systems in line with our data retention policy below. The length of time each category of data will be retained will vary on how long we need to process it, the reason it is collected, and in line with any statutory requirements. After this time, the data will either be deleted or rendered anonymous.
We store all client records on our secure database which is only accessible by trained members of the BBB team.
We will keep client records for a period of 5 years, to ensure we can provide further assistance if a client subsequently needs our help, and for regulatory and audit purposes to ensure we are able to manage any future complaints and enquiries. It is important for our work that we are able to see the history of interactions with a particular client, the items we have provided for them, the team members who worked on the referral etc.
We will keep these for up to 5 years since the last referral was received from a particular referrer, to enable us to access contact details of current and previous referrers, including for addressing enquiries and complaints.
Volunteer & staff records:
We will only keep volunteer or staff records during the time someone is volunteering or working with us; if they leave, their details will be deleted from our database immediately.
Our Treasurer will hold records of donations for six years for audit purposes, impact reporting and maintenance of supporter relations.
Our Treasurer will hold details of expenses claimed by and reimbursed to team members, to enable BBB to carry out financial reconciliations, and for the purposes of audit.
We use cloud-based systems (Google & Airtable) to process data and our newsletter is sent out using MailerLite. Therefore data may be processed outside of the European Economic Area (EEA). These companies’ privacy policies can be found by clicking on the links above, in which state that they hold and process personal data in compliance with European data protection regulations and UK laws. We take reasonable steps to ensure your data is stored and processed in accordance with these regulations. By submitting your personal data you agree to this transfer, storing and processing of your information.
We will never share client information with another organisation for marketing purposes, and we will never sell their information for any reason whatsoever.
The only time that we would share a client’s information with another organisation would be if we were to make a referral on their behalf to enable them to access services we are not able to provide e.g. to Foodbank. We will always obtain client’s specific and individual consent to such referrals before making them and will document this communication on our secure database for reference.
We may be obliged to share personal information with third parties without your consent, when we are compelled to do so by a legal authority acting in compliance with the law, or to fulfil our safeguarding duties.
Where we are using clients’ personal information based on their consent, they have the right to withdraw that consent at any time. The law also gives them a number of other rights in relation to their personal data – see below. Please contact us by emailing firstname.lastname@example.org or email@example.com and we will amend the necessary details accordingly.
Right to be informed: clients and other people involved with BBB have the right to be told how their personal information will be used. This policy document, and shorter summary statements used on our referral forms and other communications, are intended to be a clear and transparent description of how their data may be used.
Right of access: clients can write us asking what information we hold on them and to request a copy of that information. We have 30 days to comply once we are satisfied they have rights to see the requested records and we have successfully confirmed their identity.
Right of erasure: in certain circumstances clients have the right to be forgotten (i.e. to have their personally identifiable data deleted). If this applies, we will ensure that client data remains secure and is not used for any purpose other than those allowed. Please contact us with any questions about this.
Right of rectification: if someone believes our records are inaccurate they have the right to ask for those records to be updated.