bibic Privacy Policy
bibic relies on the generosity and support of people like you. We value our relationship with you and want you to be really clear about why we ask you for your personal information and want to be honest about how we will use it.
Knowing more about you and why you use our services or support us helps us to make decisions that are both right for the children and families that we work with and right for our supporters and will help us communicate more effectively.
At bibic we are committed to protecting your information and using it responsibly.
This policy tells you how we collect, use and store your information.
The processing of your information is carried out by or on behalf of bibic. We are a registered charity in England and Wales No:1057635 and a registered company limited by guarantee No:3217418
Contacting us:
If you have any questions about this privacy policy and how we use your information you can contact us by writing to us at:
bibic, Old Kelways, Somerton Road, Langport, Somerset TA10 9SJ
You can also get in touch by using the contact us section on our website
or by emailing info@bibic.org.uk or by calling us on 01458 253344
Why we use your information
We will only use your information where we have a legal basis and will always respect your rights.
Where we use your information, it may be because you have consented to us doing so or because we consider we have a legitimate interest to do so.
Where we rely on a legitimate interest to use your information, we will always ensure that this is done in a way that is not intrusive or does not cause distress.
We may also use your information because we have a legal obligation to do so or because we need to fulfil a contractual obligation.
Some examples of what we mean by this include:
• You have given us your consent to use the information for a specified purpose, such as sending you marketing communications.
• We have a legal obligation to use your information, for example to claim Gift Aid.
• We need to use your information to fulfil a contract with you – such as providing an assessment or therapy.
• We are using your information in pursuit of a legitimate interest, for example writing to you to keep you updated about our charity and our appeals.
Other reasons include:
• To pursue our charitable purpose to deliver our mission and vision
• To raise vital funds for our work
• To ensure we meet our regulatory requirements as a charity
• To manage our ongoing relationship with our supporters and anyone we work with
• To manage our financial transactions and prevent fraud
2 How we use your information
2.1 To respond to any requests, complaints or queries you make to us
If you contact us directly, we will use the information you give to us to handle your enquiry or request. This may include responding to your query, feedback, or sending you relevant information or fundraising materials. We may also keep a record of conversations we have with you, feedback you provide and any marketing materials we send out to you. This can help us to handle queries more efficiently.
2.2 To process any donations you make, claim any relevant Gift Aid and maintain a record of your past or potential future financial contributions
This includes keeping a record of any pledges, gift agreements or any other indications that you are planning to donate to bibic. We keep a record of any donations we receive for audit purposes, and as we are legally required to keep information related to Gift Aid. We may need to use your information to prevent fraud. We may also use your information to administer any lotteries or auctions you participate in, for example, contacting you to let you know you have won a prize.
2.3 To provide you with information and support for any events, fundraising and campaigning activities or volunteering opportunities you sign up to
If you have completed a form to register or enquire about an event or activity, or to sign up to one of our campaigns, we will consider this as a request to send you details about the event, activity or campaign.
When you take part in one of our volunteering roles or sign up to support one of our sponsorship or regular giving programmes, we will use your details to contact you in relation to your role or activity and to provide you with information on the progress of that project.
Where you provide contact details, we will provide information and support by post, phone, mobile messaging, email, via social media, and any other channels for which you have provided your details and consent. When you have asked for details of an event, we will send you information including, ideas for fundraising and reminders on key information about the activity.
You can change your contact preferences at any time by getting in touch with us.
Where appropriate, we will use the information you provide to identify any help we can offer, specific to the activity you have signed up for and to provide necessary information to event organisers. Where this includes information about sensitive topics such as your health, we will only use this information if you have consented to us doing so.
We may also receive information through event organisers or through third party websites (for example JustGiving) so we know you are fundraising for us.
2.4 To manage our recruitment
When applying for a staff or voluntary role with bibic online, through a third-party portal or through a recruitment agency, the personal data you provide as part of the recruitment process will only be held and processed for the purpose of the selection processes of bibic, and in connection with any subsequent employment unless otherwise indicated.
By submitting your personal information, you are consenting to us holding and using it. You will be asked to provide certain information including your name, contact details, employment history and qualifications. This information is mandatory so we can fairly consider your application, communicate with you about your application and where successful, follow up with references or meet our statutory and internal monitoring and reporting responsibilities.
We may also view social media profiles such as LinkedIn, Facebook and Twitter, to the extent that it is relevant to your application or candidate selection. Unsuccessful applicant data will be held confidentially within the recruitment system for up to six months before it is deleted. This means you can use your information in any future applications and we can respond to statutory reporting requests.
3 How we use your information and tell you about our work
3.1 To send you marketing communications by email, mobile messaging, or direct message on social media, where you have agreed to receive this
Where you have provided an email address, mobile phone number, or details of your social media profiles and consented to being contacted in this way, we will send you information by those channels – including by direct message through social media – covering ways to give or raise money for us, campaign for us, to volunteer for us, updates on other areas of our work.
3.2 To contact you by phone and post
Where it is appropriate and relevant, and you have provided us with a telephone number or a postal address and consented to being contacted in this way, we will occasionally call or write to you to tell you about ways to give or raise money for us and our wider work.
We do this as we consider it as a legitimate interest to promote our charitable cause and communicate with you about ways you can support us. We will not contact you by phone for marketing purposes if your number is registered with the Telephone Preference Service, unless you have agreed to receive calls from us. We will not contact you by mail if you have registered your address with the Mailing Preference Service.
3.3 To manage your contact preferences
You can tell us to stop contacting you, or change the way in which we do so, by getting in touch with us using the details in the contact us section. We will keep a record of any requests to stop receiving marketing and fundraising information from us to ensure that we do not communicate with you in the future, unless you tell us you want to hear from us again.
3.4 To help us speak to you in a way that is relevant to you, and to understand our supporters more broadly
We try to ensure that our communications are as effective as possible. This means communicating with people in different ways, appropriate to them.
On occasion, we will use information you have given us, for example the record of your previous donations to us and the type of activity you have been involved with, to tailor our communications with you about future activities. We will also use information about how you use our website or interact with our emails, so we can make them more effective.
We may use broad demographic information such as statistics and analysis from third parties to better understand how our own supporter base compares to the general population. This helps us to decide who to send our communications to and is useful to ensure the communications you receive are relevant to you.
We may analyse data from our database so that we can understand our supporters.
Some of our supporters may choose to give us some higher donations. We use in-house research to help us identify people who may be able to support us with a higher gift. We use information you have given us, and from publicly available records such as the electoral roll, land records, ‘rich lists’, Who’s Who and Companies House records, as well as social media profiles. If you would prefer we didn’t use your information in this way, then you have the right to tell us to stop and can do so by getting in touch with us using the details in the contact us section.
3.5 To target our digital and social media marketing and website activity
If you visit our website, we log the IP address of the computer you are using in order to protect our servers against abuse and malicious activity. The logs are deleted every 6 weeks. Other information is used to measure the performance of our website, how many visitors (traffic) we receive, how users move around the site (we also use third party sites like google ads to help with this). For more information, please read our website privacy policy.
When you access our website, some cookies are saved to your computer, for example if you have chosen a particular landing setting or created a user account. You can also turn off your cookies so that we can’t access this information. For more information, please read our cookies policy.
We may also use the information you provide us with to target our digital and social media advertising effectively. Where you have asked us not to use your information for targeted digital advertising, you may still see adverts related to bibic. This is because the social media site or advertising network may select you based on information they hold, such as your age and location, or websites you have visited, without using information that has been provided by us.
You can control the kind of advertising which you see through the settings in the relevant social media site.
3.6 Use of any images, videos of, or other information you tell us about something you have done for bibic
If you share information about the fundraising or campaigning activities you have done for us, or your personal experiences, by post, email or over social media, we may want to use this to help us promote our events and activities in the future. If you are participating in an event with us, we’ll ask if you are happy to be included in our pictures – please tell us if you are not. In other cases, we will obtain the necessary permission to use this information or share this via social media – if you have already posted information yourself via social media about your engagement with us, we may repost your information unless you ask us not to.
3.7 To undertake our wider work
We maintain a record of information relating to areas of our wider work. This could include examples of offers you have made to donate items for a raffle, donations of time or money via a company or partner or offers to provide us with discounts and other offers. This information is stored because it is critical to help us reach our charitable goal. This will include keeping a record of contact details such as address, telephone number and email address as well as the offers you have made, and any networks or connections you have shared with us.
3.8 To comply with the law
As with all charities, we ensure that our activities comply with the law. Therefore, we may need to share or use your personal information if we are required to do so by law (for example, in response to a warrant or court order) and we may use information from other sources for the purposes of fraud prevention, for example to comply with money laundering regulations, or to protect people’s rights, property or safety.
4 Keeping your details up to date
We always use information you have provided for us to keep your records up to date and respect your preferences when you express them. We also sometimes use publicly available information to ensure information is up to date, for example, Mailing Preference Service, Telephone Preference Service, Post Office National Change of Address database. We may use other services to cross-check the accuracy of the contact details we hold for you. You can let us know if you move house or your details change by contacting us.
5 What we do if you choose to tell us about your experiences with us
Where you have provided information about your experience with us including feedback on us, through our family feedback forms, surveys, focus group, questionnaire, or when we are talking to you by phone or email, we will explain what the information will be used for and whether it will be held anonymously or not. If the information will be held in a way that could be connected to you personally, we will ask your permission to store and use what you tell us.
We will use this information for the purposes explained to you when we ask you about taking part. For example, to better understand the issues that are important to our families and supporters which helps shape our activities and communications. We may compare statistics related to our families and supporters to information about the general population, to help our understanding.
Where you provide more detailed information we may want to use this in our communications including PR and media activity, digital and social media, campaigning, fundraising materials and internal communications, to help us raise awareness of bibic, and the impact of services on children and families.
We will never use your story without obtaining your consent first. If a suitable opportunity arises for us to use the information you have given us in a way which we do not feel is covered by our normal agreements, we will contact, you to discuss the use of your story in further detail. We will fully explain how we would like to use your information, so that we may obtain your fully informed consent.
Where you have given appropriate consent, we will use information you have shared to send you communications which are relevant to, for example better support you in an activity you are doing for us; or to ensure that we do not send you any communications or ask you to take part in any activity that would not be appropriate.
6 Sharing your information with other organisations
We will never share your information with third parties for their own purposes, unless this is explained to you at the time we collect your information, you give us your permission to, or we are legally required to do so. For example, we are legally required to provide your data to HMRC if you have agreed to us claiming Gift Aid on your behalf. We may need to provide information to a third party to fulfil an auction or raffle prize.
We may also use suppliers known as ‘data processors’ to process data on our behalf, for example, to send out mailings and fulfil orders. When enlisting the services of such suppliers we ensure that they are under a contractual obligation to only use your information in accordance with our instructions and for no other purposes.
7 Transferring your information out of the EEA
Sometimes organisations who work on our behalf may manage information outside the European Economic Area (EEA). In those circumstances, we will make sure that we have a valid reason for doing so under current Data Protection legislation and have relevant agreements in place with them.
8 How long we keep your information for
As a general rule, we will hold your information for a period of up to six years from the end of your relationship with the charity in accordance with our data retention policy except for fundraising when this period is up to three years from your last donation or contact. If you have told us you plan to leave us a gift in your will we will keep your information on our system for longer. In some circumstances, we may hold your data for a shorter period of time, for example:
• information related to unsuccessful job applications please see our recruitment policy
• we keep pictures and other media for up to three years and may ask you if we can continue to keep using your pictures.
In some circumstances, this will be longer, for example, pension information of former employees. If you would like to know how long we will hold any specific information, then please contact us and we can provide further details.
9 Your Rights
Your data rights
General Data Protection Regulations (GDPR) stipulates that you have the following rights. We are happy to explain how we can help you with any requests around these rights or explain them in more detail for you.
• Information Right – the right to receive the information contained in this policy and our data collection forms about the way we process your personal data.
• Personal Data Access Right – the right to know that we are processing your personal data and, in most circumstances, to have a copy of the personal data of yours that we hold. You can also ask for certain other details such as what purpose we process your data for and how long we hold it.
• Personal Data Correction Right – You have the right to request that we correct inaccurate data or complete incomplete data that we hold on you.
• Personal Data Erasure Right – Known as the Right to be forgotten. In certain circumstances you may request that we erase your personal data held by us.
• Personal Data Restriction Right – You have the right to restrict the way we process your personal data in certain circumstances, for example if: you contest the accuracy of the data, if our processing is unlawful, to pursue legal claims, where we are relying on legitimate interests to process data.
• Data Processing Objection Right – You have the right to object to us processing your data for (i) direct marketing purposes (ii) scientific or historical research or statistical purposes and (iii) purposes of profiling related to direct marketing or based on our legitimate interests or on the performance of a task in the public interest
• Data Portability Right – you have the right to receive a copy of certain personal data or to have it transferred to another organisation in some circumstances
• Right to Withdraw Consent at any time
Where we use your personal information based on your prior consent, or where you have given us permission to send you marketing communications by email, mobile messaging and by direct message on social media, you can withdraw your consent at any time by contacting us.
10 Complaints
If you have any complaints about how we handle your personal data, please contact us so we can resolve the issue, where possible. If you need to make a complaint, you can find out more about how you can do this in our complaints policy. You also have the right to lodge a complaint about any use of your information with the Information Commissioner https://ico.org.uk the UK data protection regulator.
11 How we keep your information secure
We take appropriate measures to ensure data is held confidentially and with integrity in systems. Our staff are trained in the correct procedures for managing and handling data and our processes are regularly reviewed. Our systems hold data securely – we protect your data in a range of ways including secure servers, firewalls and encryptions. We follow industry standard compliance requirements (such as PCI compliance (for payment card processing). Data is held in restricted, password-controlled access to information which is stored on our systems.
Where we work with third parties who may provide us with data (for example Just Giving or payroll giving agencies) or hold your data via a third-party system (for example our email marketing tool), we ensure our suppliers are compliant with the current regulations and have proper systems and processes in place to fulfil their legal and contractual obligations.
12 Updates to this Privacy Policy
We may update this policy to reflect changes in how we use your information. You may wish to check this policy each time you provide us with your information. Where appropriate, we will provide you with notice of any significant changes to how we use your information, for example an email to update.