We are committed to protecting your personal information and being transparent about what we do with it, no matter how you interact with us.
We are required to provide you with the information in this Privacy Notice under applicable law which includes:
the European Union General Data Protection Regulation (Regulation (EU) 2016/679) (‘GDPR’) and the Data Protection Act 2018 (‘DPA’) referred to as the ‘data protection legislation’the Privacy and Electronic Communications Regulation (2003)
We won’t do anything with your information you wouldn’t reasonably expect.Processing of your personal information is carried out by or on behalf of the Bravo Medics.
This notice, together with our website terms and conditions and our cookies policy tells you about how we collect, use and protect your personal information.If you have any queries about our Privacy Notice, please get in touch:
By e-mail
privacy@bravomedics.org
By post
Data Protection Officer
Bravo Medics
Garden Cottage
Long Lane
Wrington
Bristol BS40
Bravo Medics is the sole ‘Data Controller’ of your information. This means that we determine the purpose and way your information is used. We will never sell your personal information or share it with another organisation for their own purposes.
We may collect and store information about you when you interact with us. For example, this could be when you:
When you interact with us on social media platforms such as Facebook, Twitter, WhatsApp or LinkedIn we may also obtain some personal information about you. The information we receive will depend on the privacy preferences you have set on each platform and the privacy policies of each platform. To change your settings on these platforms, please refer to their privacy notices.
We may obtain information about your visit to our site, for example the pages you visit and how you navigate the site, by using cookies. Please visit our cookies policy for information on this.
When you engage with us by phone, mail, in person or online, we may collect information about you (referred to in this Privacy Notice as 'personal information'). This may include your name, address, email address, telephone number, date of birth, job title and details of your education and career, why you are interested in Bravo Medics and other information relating to you personally which you may choose to provide to us.
Data protection law recognises that certain types of personal information are more sensitive. This is known as 'sensitive' or 'special category' personal information and covers information revealing racial or ethnic origin, religious or philosophical beliefs and political opinions, trade union membership, genetic or biometric data, information concerning health or data concerning a person's sex life or sexual orientation.
Sensitive information will only be collected where necessary, for example, we may need to collect health information from you when you register for a challenge event or to deliver a community service as a volunteer or member of staff. Clear notices will be provided at the time we collect this information, stating what information is needed, and why.
With your explicit consent, we may also collect sensitive personal information if you choose to tell us about your experiences relating to our services for use in a case study.
Occasionally we collect and use information about children, and aim to manage it in a way that is appropriate to the age of the child. Information is usually collected when children attend our events or fundraise for us and will always be recorded alongside the details of their responsible adult.
We will always seek consent from a parent or guardian before collecting information about children. Our events have specific rules about whether children can participate, and we‘ll make sure advertising for those events is age appropriate. We will never contact children with direct marketing and we will never share details of children without the consent of their responsible adult.
If you're aged under 16, you must get your parent/guardian’s permission before you provide any personal information to us.
We will use your personal information for the following purposes:
We will process personal information you provide in order to administer any one-off or on-going donations you make and claim Gift Aid.
If you contact us with a query, we may use your personal information to provide you with a response.
We will only send you marketing information by email, or phone if you have given us specific consent. If you withdraw your consent and then subsequently opt-in to receive marketing information again, then your most recent preference may supersede. If you respond to a fundraising appeal by post, you may also receive fundraising mail, which you can opt-out of at any time.
Some people choose to tell us about their experiences with Bravo Medics to help raise awareness and as their way of giving back. If you do this, you will give us sensitive information related to your health and family life in addition to your contact details. Please be assured we keep this data safe.
We will only ever share this information publicly if we have your explicit consent to do so. We will usually share it via our website in the patient stories section or in a specific text approved by you. Sometimes we may use your information in materials promoting our campaigning and fundraising work, or in documents such as our annual report, but only with your consent.
From time to time we may be asked for details of your story, by third parties (such as newspapers, radio stations or TV producers). We will never pass your details to them without your explicit consent each and every time we are asked.
The lawful basis for processing this data is ‘Legitimate Interests’.
We may use your information in order to improve current and future delivery of our services.
f you apply to volunteer with us, we will only use the information you give us to process your application. If we want to disclose information to someone outside Bravo Medics, for example, if we need a reference, we will tell you beforehand. The only exception is where the law obliges us to disclose information to a third party (such as the police) and we are not allowed to tell you.
If you are unsuccessful in your application, we may hold your personal information after we've finished recruiting for the post you applied for, for up to 12 months to deal with any follow up queries or issues.
We may use your personal information to record and deal with a complaint, record a request not to receive further marking information, record what our volunteers have done for us, and for other essential internal record keeping purposes.
We may invite you to participate in surveys or market research to help us improve our website, fundraising, services and strategic development. Participation is always voluntary and no individuals will be identified as a result of this research, unless you consent to us publishing your feedback.
Where required we are subject to a legal obligation, we may process your personal information to fulfil that obligation.
We may occasionally for the purposes of our legitimate interests use your personal information to conduct profiling of our supporters or potential supporters. This will help us target communications in a more focused, efficient and cost effective way, helping us reduce the chances of supporters and potential supporters receiving inappropriate or irrelevant communications. You can object to such use of your personal information for profiling at any time by contacting us at the details set out at the end of this Privacy Notice.Our profiling and analysis activities can be broken into five categories:
We may combine the personal information you have given us with data obtained from external sources, such as the Office for National Statistics, to infer the likely social, demographic and financial characteristics, so we can tailor our communications and services to better meet your needs or the needs of others like you based on the insight we gain from the profile we build. We will not use the results of this data matching activity in a way that intrudes on your privacy or your previously expressed privacy preferences
We conduct analysis of supporters by group, post code or particular area where supporters may be based. This is to ensure that campaigns or mailings are sent to those who will be most interested or likely to respond. This type of activity is not aimed at identifying specific individuals to target, but rather many individuals who may fall within a certain segment of supporters.
We may carry out research to determine whether an individual could be a potential major donor. We may use publicly available information from third party sources such as Companies House. published biographies and publicly available LinkedIn profiles. The type of information we collect can include:
We may also use profiling to produce short biographies of people who are due to meet with our leadership or attend an event that we may be hosting.
This helps our people to understand more about those we engage with, and their interests or connection to us.
As a registered charity, we are subject to a number of legal and regulatory obligations and standards. The public naturally expect charities to operate in an ethical manner and this is integral to developing high levels of trust and demonstrating our integrity.
This means that we may carry out appropriate due diligence of donors, check donations and implement robust financial controls to help protect the charity from abuse, fraud and/or money laundering.
We may carry out background checks and due diligence on potential donors or anyone planning on making a significant donation or gift before we can accept it.
We will only use your information for the purposes for which it was obtained. We will not, under any circumstances, sell or share your personal information with any third party for their own purposes, and you will not receive marketing from any other companies, charities or other organisations as a result of giving your details to us.
We will only share your data for the following purposes:
We always aim to ensure that personal information is only used by those third parties for lawful purposes in accordance with this Privacy Notice.
We make use of cloud based tools and services for much of our day to day work. This includes things like email, storing documents and spreadsheets and running our supporter database, running our website. Examples of these tools include Google Gsuite, Sage Accounting and Donor Manager.
We use technical and corporate organisational safeguards to ensure that your personal information is secure. We limit access to information on a need-to-know basis and take appropriate measures to ensure that our people are aware that such information is only used in accordance with this Privacy Notice.
We undertake regular reviews of who has access to information that we hold to ensure that your information is only accessible by appropriately trained staff, volunteers and contractors.
If you use your credit or debit card to donate to us, we pass your card details securely to our payment processing partners. We do this in accordance with industry standards and do not store the card details.
Please however be aware that there are always inherent risks in sending information by public networks or using public computers and we cannot 100% guarantee the security of data (including personal information) disclosed or transmitted over public networks.
We understand that additional care may be needed when we collect and process the personal information of vulnerable supporters and volunteers. In recognition of this, we observe good practice guidelines in our interactions with vulnerable people.
We will keep your personal information in respect of financial transactions for as long as the law requires us to for tax or accounting purposes (which may be up to seven years after a particular transaction).
If you request that we stop processing your personal information for the purpose of marketing we may in some instances need to add your details to a suppression file to enable us to comply with your request not to be contacted.
In respect of other personal information, we will retain it for no longer than necessary for the purposes for which it was collected, taking into account guidance issued by the Information Commissioner’s Office.
We may, on occasion decide to use the services of a supplier outside the European Economic Area (EEA), which means that your personal information is transferred, processed and stored outside the EEA. You should be aware that, in general, legal protection for personal information in countries outside the EEA may not be equivalent to the level of protection provided in the EEA.
However we take steps to put in place suitable safeguards to protect your personal information when processed by the supplier such as entering into the European Commission approved standard contractual clauses. When we transfer your personal information and process it in the United States, we do so in accordance with the EU-U.S. Privacy Shield Framework and the European Commission approved standard contractual clauses. By submitting your personal information to us you agree to this transfer, storing or processing at a location outside the EEA.
Data protection legislation gives you the right to request access to personal information about you which is processed by Bravo Medics and to have any inaccuracies corrected.
You have a right to access the personal information we hold about you and in certain circumstances to be provided with a copy of that information. To do so, please send a description of the information you want to see along with proof of your identity, by post to the address below.
Data Protection Officer
Bravo Medics
Garden Cottage
Long Lane
Wrington
Bristol BS40
You also have the right to ask us to erase your personal information, ask us to restrict our processing of your personal information or to object to our processing of your personal information.For more guidance about requesting a copy of your personal data click here: Information Commissioner’s Office – requesting personal information
We will respond within 30 days, on receipt of your written request and copies of your identification documents.
If you would like more information, or have any questions about this policy, to make a formal complaint about our approach to data protection or raise privacy concerns please contact the Data Protection Officer:
Data Protection Officer
Bravo Medics
Garden Cottage
Long Lane
Wrington
Bristol BS40
You can find further guidance on how to raise concerns about personal data here: Information Commissioner’s Office – raising concerns
Our Privacy Notice may change from time to time, so please check this page occasionally to see if we have included any updates or changes, and that you are happy with them.
(Last updated: 22nd May 2020)
