Babbasa understands that the privacy and security of your personal information is an important issue to you and we are committed to protecting it.

WHO WE ARE

Babbasa is a Bristol-based social enterprise that empowers young people (up to 25) from ethnically diverse and less advantaged communities to move into work, education, or business – so they feel inspired, supported and ready to fulfil their ambitions.

Registered Company Number: 08584240
Address: 50 Upper York Street, Bristol BS2 8QR
Email: admin@byep.org.uk
Data Controller – Jenny Kerridge – jenny.kerridge@byep.org.uk
Babbasa is registered with the Information Commissioner’s Office
Number: ZA167713

WHAT INFORMATION IS COLLECTED?

We collect different data depending on what services you sign up for and where you sign up. ‘Signing Up’ is the process of becoming involved in a programme or service by Babbasa.

If you contact us or join the Babbasa newsletter via our website www.babbasa.com we will collect the following information:

● Name
● Email address

When you start to access our services we collect the following:

● Name
● Email
● Telephone
● Parent/Guardian (young people only)
● Date of Birth (young people only)
● Heritage (special category data)

● How you would like to work with Babbasa
● Whether you are in education, employment or unemployed/not in education
(young people only)
● Your career history, skills and specialisms (professionals only)

WHY ARE YOU COLLECTING MY DATA?

We collect your data so we can:
● Provide a service to you
● To give you information about new services or ways of getting involved
● Enter a contract with you
And to meet our legal obligations in the following areas:
● Data protection and privacy
● Marketing and Communications
● Health and Safety
● Safeguarding
● Equal Opportunities

We will occasionally send you marketing information where we have assessed that it is beneficial to you as a supporter and also in our interests.

Such information will be non-intrusive and is processed on the ground of legitimate interests or by consent from you, depending on the format of the communication .

WHERE DO YOU GET MY DATA?
We get your data when you sign up for a service online, at an event or at Babbasa head office, when you sign up for our newsletter online or when we receive a referral from a local community organisation.

HOW DO YOU USE MY PERSONAL INFORMATION?

● Personalisation of user experience and providing you with the most
appropriate service
● To respond to contractual requirements with our funders
● Reporting to our funders and internal data requirements on how are services
are being used and by whom
● Marketing and newsletters
● To receive feedback on our services
● When there is a risk of a safeguarding issue
● To administer our website
● For internal audits

If we intend to use your personal data for any additional purposes, we will notify you before beginning that new activity.

LEGAL BASIS

In order to lawfully collect, hold and use your personal information we must rely on one or more of six grounds set out in data privacy law. We consider the following to relevant to our use:
● Where you have given consent
● Where it is necessary to comply with a legal obligation e.g. if there is risk of
harm or criminal activity
● Where it is necessary for the performance of a contract with you or to take
steps at your request prior to entering a contract
● Where it is necessary to protect someone’s vital interests. We may refer these
enquiries on to those who are better equipped to assist if we feel yours or
another’s vital interests are at risk
● Where there is a ‘legitimate interest’ in us doing so
SHARING YOUR PERSONAL DATA
When you have given us your data, through our registration forms, it can be passed
onto (young people only):
● Bristol City Council
● Other funders who offer donations for specific projects/services

On occasion we will carry out case studies or success stories on our website and with funders. We can include your name and age but all other personal information will not be included. We will always ask your permission before doing this and you have the right to refuse to be included.

NOT PROVIDING PERSONAL DATA

If you choose not to provide any data to us storing your data we may be unable to provide you with a support service. We need to know your name, age, contact details and choice of service in order to provide you with support.

HOW LONG WILL YOU HOLD MY DATA FOR

Overall we will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

We hold your information for six years after we stop working with you. Where we
have a concern about your safety we hold your information for ten years. We hold
your information for this long because the law requires us to adhere to a ‘statute of
limitations’. After this time your data will be deleted from our system.

YOUR RIGHTS

You have the right to:
● Request access to the personal information we have stored about you
● Request us to correct and delete any information
● Withdraw your consent for Babbasa to store, process, or share information
● Lodge a complaint with the Information Commissioner's Office or Babbasa
Any request to access personal information needs to be in writing and we also need
to confirm the identity of the person making the request e.g. by checking a passport,
birth certificate etc.

MAILING LISTS

As part of the registration process for our newsletters, we collect personal information. We use that information to deliver the newsletter (e.g. your email address), to tell you about the services you’ve asked us to tell you about (e.g. opportunities and updates), to contact you if we need to obtain or provide additional information, to check our records are right and to check every now and then that you’re happy and satisfied with our services.

We don’t rent or trade email lists with other organisations or businesses. We use a third-party provider, MailChimp based in the United States, to deliver our newsletter.

We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see MailChimp’s privacy notice .

You can unsubscribe to general mailings at any time of the day or night by clicking the unsubscribe link at the bottom
of any of our emails or by emailing admin@byep.org.uk.

Mailchimp is part of the Privacy Shield which requires them to provide similar protection to personal data shared between the European Economic Area and the US. For further details, see European Commission: EU-US Privacy Shield .

WEBSITE VISITORS

When you visit www.babbasa.org.uk we use Google Analytics to collect standard internet log information and details of visitor behaviour patterns.

We do this to find out things such as the number of visitors to the various parts of the site. We do not make any attempt to find out the identities of those visiting our website.

You can find out more about how cookies are used on this website in the Cookies Policy below.

If we do want to collect personally identifiable information through our website, we are up front about this.

WEBSITE COOKIES

A cookie is a small file which asks permission to be placed on your computer’s hard drive.

Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site.

Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your
needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs.

We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not.

A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies.

Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if
you prefer. This may prevent you from taking full advantage of the website.

LINKS TO OTHER WEBSITES

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website.

Therefore, we cannot be responsible for the protection and privacy of any information, which you provide whilst visiting such sites and such sites are not governed by this privacy statement.

You should exercise caution and look at the privacy statement applicable to the website in question.
We are also on a number of social media pages.

Although this policy covers how we will use any data collected from those pages, it does not cover how the providers of
social media websites will use your information.

Please ensure you read the privacy policy of the social media website before sharing data and make use of the privacy
settings and reporting mechanisms to control how your data is used.