Privacy Policy

Beyond Racism Website Privacy Policy

1. Introduction and Data Controller Details

The Birmingham Race Impact Group (BRIG) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and look after your personal data when you visit our website (the “Website”) and interact with our services.

1.1 Who We Are

The Data Controller responsible for your personal data is the Birmingham Race Impact Group (BRIG).

Full Legal Name: BIRMINGHAM RACE IMPACT GROUP
Charity Number: 1203456
Registered Address: 54-57 Allison Street, Digbeth, Birmingham, B5 5TH
Contact Email: info@wearebrig.co.uk
Data Protection Contact: [Insert Name/Role, e.g., The Operations Director]

1.2 Our Commitment

BRIG will only use your personal data in accordance with this Privacy Policy and for the purposes of achieving our charitable mission: to drive ambitious approaches to fighting racism and resourcing the next generation of activists.

2. The Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

Data Category	Examples of Data
Identity Data	First name, last name, job title, organisational affiliation, username.
Contact Data	Email address, telephone number, registered address.
Financial Data	Payment card details (processed by a third-party processor, not stored by us), donation amounts, Gift Aid eligibility.
Usage Data	Information about how you use our Website, services, and resources.
Technical Data	Internet Protocol (IP) address, browser type and version, time zone setting, operating system.
Marketing and Communications Data	Your preferences in receiving marketing from us and your communication preferences.

Special Category Data (Sensitive Data)

Due to the nature of our anti-racism mission, we may occasionally collect Special Category Data, specifically data concerning race, ethnic origin, political opinions, or religious beliefs. This data is only processed under the following strict conditions:

With your Explicit Consent: For example, when you voluntarily provide diversity information when signing up for an event or responding to a consultation.
For reasons of Substantial Public Interest: For the purpose of monitoring equality, diversity, anti-racism policy, and impact reporting, as permitted by the Data Protection Act 2018.

Any provision of Special Category Data is entirely voluntary.

3. How We Collect Your Data

We use different methods to collect data from and about you, including:

Direct Interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or corresponding with us by post, phone, email, or otherwise. This includes data you provide when you:
- Sign up for our newsletter or updates.
- Register for an event, summit, or consultation.
- Make a donation.
- Complete a survey or provide feedback.
- Submit a question or enquiry via our ‘Contact Us’ page.
Automated Technologies or Interactions: As you interact with our Website, we may automatically collect Technical and Usage Data. We collect this personal data by using cookies and other similar technologies. Please see our separate Cookie Policy for more details.
Third Parties: We may receive personal data about you from third parties, such as:
- Technical and Usage Data from analytics providers (e.g., Google Analytics).
- Financial Data from payment processors (e.g., Stripe, PayPal) regarding a completed donation.
- Data from publicly available sources (e.g., Companies House, Charity Commission) to verify institutional affiliations.

4. The Legal Basis for Processing Your Data (UK GDPR)

The UK GDPR requires us to have a valid legal basis for processing your personal data. We rely on the following:

Legal Basis	Purpose for Processing
Consent	To send you newsletters, updates, or marketing emails. To collect and process any Special Category Data.
Legitimate Interest	To administer and protect our business and the Website (including security). To analyse Website usage and improve our services and content.
Contractual Necessity	To process and confirm your event registration or a donation you have made.
Legal Obligation	To comply with our legal duties as a registered charity, including Gift Aid requirements and financial reporting to HMRC and the Charity Commission.
Substantial Public Interest	To conduct research and campaigning into race inequality to meet our charitable objects.

5. Data Security and Retention

5.1 Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to trustees, employees, volunteers, and third parties who have a business need to know.

5.2 Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Financial Records: Required to be kept for a minimum of six years plus the current year.
Campaign Data/Mailing Lists: Retained until you withdraw your consent or request to be unsubscribed.
Special Category Data: Retained for the duration of the relevant project or report, and then securely deleted or anonymised, unless a legal/contractual basis requires longer retention.

6. Your Legal Rights (Data Subject Rights)

Under the UK GDPR, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Protection Contact (Section 1.1).

Your Right	Description
The Right to be Informed	To be informed about how we collect and use your data (this Policy).
The Right of Access	To request a copy of the personal data we hold about you (a Subject Access Request).
The Right to Rectification	To request that we correct any incomplete or inaccurate data we hold about you.
The Right to Erasure	To ask us to delete or remove personal data where there is no good reason for us to continue processing it (also known as the ‘right to be forgotten’).
The Right to Restrict Processing	To ask us to suspend the processing of your personal data.
The Right to Data Portability	To request the transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format.
The Right to Object	To object to processing where we are relying on a legitimate interest or processing for direct marketing purposes.
Rights in relation to Automated Decision Making	The right not to be subject to a decision based solely on automated processing.

7. How to Complain to the Regulator

If you have any concerns about our use of your personal data, you can contact us at the details provided in Section 1.1.

You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.

ICO Helpline: 0303 123 1113
ICO Website: https://www.ico.org.uk

Last Updated: 25 September 2025