Privacy Policy

Introduction

Beloved Berachah CIC ("we," "our," or "us") is committed to protecting your privacy and ensuring that your personal data is handled responsibly, securely, and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Because of the sensitive nature of our work—supporting women affected by trauma, addiction, domestic abuse, and mental health challenges—we take data protection exceptionally seriously. This policy explains how we collect, use, and protect your information when you visit our website or interact with our services.

2. The Data We Collect

We only collect information that is strictly necessary to provide our services and fulfil our community objectives. This may include:

• Identity and Contact Data: Name, email address, telephone number, and organisation name (e.g., when you fill out a contact or booking form).
• Technical Data: IP address, browser type, and operating system, collected automatically via cookies (see our Cookie Policy).
• Special Category Data: In the course of seeking support, you may voluntarily disclose sensitive personal information regarding your physical or mental health, personal history, or circumstances. We treat this data with the highest level of confidentiality and only process it with your explicit consent or where necessary for safeguarding purposes.

3. How We Use Your Data

We will only use your personal data when the law allows us to. We commonly use your data in the following circumstances:

• To respond to your inquiries: Managing bookings for talks, workshops, or providing relevant support information (Lawful basis: Legitimate Interests / Consent).
• To safeguard our community: If we believe you or someone else is at risk of serious harm, we may process and share relevant information with emergency services or statutory bodies (Lawful basis: Vital Interests / Legal Obligation).
• To improve our services: Analysing anonymised data to understand website traffic and improve our outreach (Lawful basis: Legitimate Interests).

4. Data Sharing and Third Parties

We will never sell, rent, or trade your personal data to third parties. We may only share your data with:

• Trusted service providers who assist us in operating our website or conducting our business (e.g., website hosting, secure email providers), all of whom are bound by strict confidentiality agreements.
• Statutory bodies, law enforcement, or emergency services, but only if we are legally required to do so, or if it is strictly necessary to protect your vital interests (e.g., a safeguarding emergency).

5. Data Security

We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. Access to personal data is strictly limited to those employees, trustees, and volunteers who have a direct operational need to know, and they are subject to a strict duty of confidentiality.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, safeguarding, or reporting requirements. Once data is no longer required, it will be securely deleted or anonymised.

7. Your Legal Rights

Under the UK GDPR, you have several rights regarding your personal data, including:

• Request access to your personal data (a "data subject access request").
• Request correction of incomplete or inaccurate data we hold about you.
• Request erasure of your personal data when there is no good reason for us continuing to process it.
• Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of these rights, please contact us.

8. Complaints

If you have any concerns about our use of your personal information, you can make a complaint to us directly at beloved@berachah.org.uk.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. You can contact the ICO at: