Skip to main content
0117 9231039

Data Protection Policy

BS3 Community Development – Privacy Policy

Effective Date: November 2022

Introduction

We, at BS3 Community Development, take data security and privacy very seriously because we know that confidentiality and the protection of information is a fundamental feature of our relationship with our service users. When we use your personal data we are required to do so in accordance with the General Data Protection Regulation (GDPR). We are responsible as ‘controller’ of your personal data for the purposes of the GDPR. We will use your personal data in accordance with your engagement with us and your instructions, the GDPR, other relevant UK and EU legislation and our professional duty of confidentiality.

Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share your personal data. It also explains your rights and how to contact us in the event you would like to exercise any of these rights.

What we’re doing

Giving you more transparency: You have the right to access the information we hold about you. We don’t hold an excess amount of data and most of the data we do hold and process we do so to comply with legal obligations and to pursue legitimate interests. We’re happy to share with you, at any time, any of your data that we hold and tell you how we use it.

Increasing privacy: As part of our data protection updates we’re changing, and in some cases limiting, how we store and access certain information to restrict use to only necessary people. You have the right to be informed about why and how we use your data.

Improving data access, deletion, and control: You also have the right to correct or update any information and additionally to request that your information be deleted or have restricted use. We do have statutory requirements to comply with but we will always work with you to exercise your rights.

If you would like to exercise any of these rights, please call 0117 9231039 or email hr@bs3community.org.uk

Privacy Notice (How we use your information)

We provide a range of services and therefore we work with various service users. The main categories of information that we collect, hold and share include:

  • Personal information (such as name, email address, home address, phone number, date of birth)
  • Characteristics (such as gender, ethnicity, language, nationality and country of birth)
  • Emergency contact / carer / next of kin details (name, relation, address, email address, phone number(s))
  • GP information
  • Bank details for payment
  • Information about health, preferences and abilities
  • Photographs

Depending on the service(s) you use, some of these categories of information will not apply.

Why we collect and use this information

If you are a Supporter

  • To provide you with our monthly newsletter and event communications specific to your interests

If you benefit from our Communities services

  • To provide you with information about our clubs, activities and events
  • To keep you safe whilst you engage with our services
  • To provide you with meals and transport
  • To tailor our offerings to your preferences and interests
  • Next of kin and main carer names, addresses, phone numbers and email addresses.

If you are part of Early Education and Childcare (including those on the waitlist)

  • To provide appropriate physical and emotional care for your child(ren)
  • To support child learning
  • To monitor and report on child progress
  • To comply with the law regarding child safety and development
  • To comply with the law regarding data sharing
  • To assess the quality of our services
  • To facilitate payment

If you are a customer (including room hire, market stall rental, and clubs)

  • To communicate processes and expectations and to answer your questions
  • To facilitate payment

If you have given financial support to the charity

  • To maintain a record of support
  • To provide you with necessary communication about funds used and/or payments due
  • To provide you with required reports/ feedback/ on-going communication about the work we are doing and how we are using the money you’ve donated.

If you are an employee, volunteer or trustee

  • To provide you with necessary communication
  • To maintain a record of your history with the charity; training and development, accidents, disciplinary action, grievances, etc.
  • To measure your efforts and attendance against what is stated in your employment contract
  • To facilitate your training and development
  • To facilitate payment
  • For statutory purposes

If you are a supplier

  • To contact you for orders and queries
  • To maintain a record of our relationship with you (orders placed/received)
  • To facilitate payment

During and after our organised events we share photos from the events on our social media channels. We ensure we have consent to do this from all involved. In the case of bigger events, mainly those that are open to the public, we will post notices that photographs and video are being taken and allow anyone in attendance the opportunity to opt-out of being photographed.

The lawful basis on which we use this information

We collect and use your information under Article 6 of UK General Data Protection Regulations (GDPR) to ensure the organisation carries out its duties lawfully and appropriately.

Data is required:

6a for the purpose of complying with any consent you’ve provided us

6b for the performance of a contract we have entered into with you

6c for compliance with our legal obligations

6d for the necessary purpose of protecting your vital interests

6e for the necessary propose of carrying out a task in the public interest

6f   for the necessary purpose of carrying out our legitimate duties

Collecting your information

Depending on your relationship with BS3 Community Development and in what capacity we collect and hold your information, the majority of your information you provide to us is mandatory. This is chiefly applicable to those data subjects involved with our Early Education and Childcare, our Older People Services and our employees. Some information is provided to us on a voluntary basis. In order to comply with the General Data Protection Regulation, we will inform you whether you are required to provide certain information to us or if you have a choice in this.

Consent is required and will be requested any time we need to collect and/or use your data and we do not have a legal reason to do so.

Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Who we share your information with

We don’t share data with anyone unless you;

Benefit from our Older People Services (OPS)

  • We may share your information with our transport drivers so they can collect you and return you to your residence.
  • We may share your dietary and allergy information with our third-party meal providers to allow us to provide you suitable meal options.

Are part of Early Education and Childcare

  • We routinely share your child’s information with:
    • schools that the child(ren) attend after leaving us
    • our local authority
    • OFSTED and the Department for Education (DfE)
    • we may routinely share information with other professionals who are supporting a child (speech and language, occupational therapy, etc.)
    • we have a legal duty to share information with First Response and/or Social Services where we are concerned about a child’s wellbeing

We do not share information about you (or any children) with anyone without consent unless the law and our policies allow us to do so.

We share your child(ren)s data with OFSTED and the Department for Education (DfE) on a statutory basis. This data sharing underpins funding and educational attainment policy and monitoring.

Have given financial support to the charity

  • Registry Trust Limited
  • We may share your data with third party, financial auditing companies.

If you are an employee, volunteer or trustee

  • If you an employee, we may share your data with our auditors, HM Revenue & Customs (HMRC) and National Employment Savings Trust (NEST).
  • If you are a Trustee, we may register your information with Companies House and Charities Commission.
  • Some employees and Trustees will have a profile on our public website.

Data collection requirements

To find out more about the data collection requirements placed on us by OFSTED and the Department for Education go to: https://www.gov.uk/government/collections/ofsteds-inspection-of-early-years-providers

Requesting access to your personal data

Under data protection legislation, any person has the right to request access to information about them that we hold. To make a request for your personal information, or be given access to your child’s record, please contact our Human Resources at hr@bs3community.org.uk or on 0117 9231039.

You also have the right to:

  • object to processing of personal data that is likely to cause, or is causing you damage or distress
  • prevent processing for the purpose of direct marketing
  • object to decisions being taken by automated means; and
  • have inaccurate personal data rectified, blocked, erased or destroyed

Contact

If you would like to discuss anything in this data protection policy, please contact our HR Administrator at hr@bs3community.org.uk