Privacy Policy

Bloom Women's Support ("Bloom", "we", "us") is committed to protecting your privacy. This policy explains what personal data we collect, how we use it, and your rights under the UK GDPR and Data Protection Act 2018.

Data controller: Bloom Women's Support, 12 Bloom House, Islington, London N1 2AB. Registered Charity No. 1234567.

1. What data we collect

• Contact data: name, email, phone number — when you use our contact form or register for services.
• Service data: information about your circumstances shared when accessing our support services.
• Donation data: name, contact details, payment information (processed by our secure payment provider; we do not store card numbers).
• Website data: anonymised analytics data (pages visited, browser type) via privacy-preserving analytics.
• Volunteering data: application details, DBS check results, emergency contacts.

2. How we use your data

• To provide and administer our support services.
• To process donations and claim Gift Aid where applicable.
• To communicate with you about your enquiry, application, or donation.
• To send you updates and fundraising appeals — only if you have opted in.
• To comply with legal and regulatory obligations.
• To improve our website and services using anonymised analytics.

3. Legal basis for processing

We process your data under one or more of the following lawful bases:

• Contract – to fulfil a service or volunteer agreement.
• Legitimate interests – for anonymised analytics and internal administration.
• Legal obligation – for DBS checks, financial records, safeguarding.
• Consent – for marketing communications and Gift Aid.
• Vital interests – where necessary to protect life in a safeguarding situation.

4. Sharing your data

We do not sell your data. We may share it with:

• Our secure payment processor (for donations).
• Disclosure and Barring Service (for DBS checks).
• Statutory agencies (police, social services) only where required by law or to protect life.
• IT service providers acting as data processors under strict contractual agreements.

5. Retention

• Service user records: 7 years after the end of service (statutory requirement).
• Donation records: 7 years (Gift Aid statutory requirement).
• Volunteer records: 3 years after the end of volunteering.
• Website analytics: anonymised, retained indefinitely.
• Marketing consent records: until consent is withdrawn, then deleted within 30 days.

6. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data (subject to legal obligations).
• Restrict processing in certain circumstances.
• Object to processing based on legitimate interests or direct marketing.
• Data portability – receive your data in a machine-readable format.
• Withdraw consent at any time for consent-based processing.

To exercise any of these rights, email privacy@bloomwomenssupport.org. We will respond within one month.

7. Cookies

Our website uses essential cookies only. We do not use advertising or tracking cookies. Anonymous analytics are processed without placing cookies on your device.

8. Security

We take data security seriously. Our website uses HTTPS. Access to personal data is restricted to authorised staff and volunteers who are trained in data protection. We review our security measures regularly.

9. Complaints

If you have concerns about how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113.

10. Changes to this policy

We may update this policy from time to time. The latest version is always available on this page.