1. Introduction

At BloomElle, we value your privacy and are committed to protecting your personal data. This Privacy Notice explains how we collect, use, store, and protect your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.  This also includes when you visit our website, attend our events, join our network, contact us or receive communications from us. By interacting with BloomElle, you agree to the terms outlined in this Privacy Policy. We are committed to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.

2. Who We Are

BloomElle is a community dedicated to supporting and empowering Black women. As the data controller, BloomElle determines how and why your personal data is processed. If you have any questions about this Privacy policy, you can contact us at:

Email: hello@bloomelle.org

Registered/business address: C/o Lyncage Professional Services. Wicker Lane, Sheffield S3 8JD

Website: www.bloomelle.org

3. What Data We Collect

We may collect the following types of personal data:

• • Contact Information: Your name, email address, phone number and postal address.

• • Demographic Information: Information such as your age, gender and ethnicity, where relevant to a specific programme, initiative or funding requirement.

• • Membership and Community Information: Information provided through membership applications, your participation in the BloomElle community, and attendance at our events, programmes or activities.

• • Event and Accessibility Information: Dietary requirements, accessibility needs or other information you choose to provide so that we can safely and appropriately deliver an event or service to you. Photographs, video or other content captured at BloomElle events, where applicable

• • Communication Preferences: Your preferences for receiving news, updates, event information and other communications from us.

• • Social Media Information: Social media profile details or handles where you choose to provide them or interact with us through social media.

• • Technical and Website Data: Information such as your IP address, browser type, device information and how you use our website, including information collected through cookies and similar technologies.

Some information we collect, such as ethnicity or information relating to health, disability or certain dietary requirements, may be classed as special category personal data. Where we collect this information, we will only do so where necessary and where we have an appropriate lawful basis for doing so.

4. How We Collect Your Data

We collect personal data when:

• • You fill out our membership or event registration forms.

• • You participate in BloomElle activities, events, or initiatives.

• • You communicate with us via email, phone, or social media.

• • You visit our website or engage with our online platforms.

• • When you contact us by email, telephone, social media or through our website

• • When you provide your details at an event

• • When you subscribe to receive newsletters or other marketing communications

• • When another organisation introduces or refers you to us, where permitted by law

• • When you voluntarily provide information to us for a particular purpose

We may also receive information from third-party event, ticketing, mailing-list or technology providers such as Eventbrite that we use.

5. How We Use Your Data

BloomElle processes your data for the following purposes:

• • To manage your membership and participation in the BloomElle community.

• • To communicate with you about events, activities, and initiatives.

• • To analyse community engagement and improve our services.

• • To comply with legal obligations and ensure the safety of our members.

• • To process event registration and bookings.

• • Send newsletters and marketing communications, where permitted by law

• • Improve our events, services and communications

• • Maintain appropriate records

• • Take photographs or video at events and use these for legitimate promotional purposes, where appropriate

• • Manage payments and financial administration

• • Protect the security of our website, systems, events and people

• • Comply with legal and regulatory obligations

• • Establish, exercise or defend legal claims where necessary

We will not use your personal data for purposes that are unrelated to the purposes for which it was originally collected, unless we have your consent or another lawful basis to do so.

6. Legal Basis for Processing

We process your data based on:

• • Consent: Where you have given clear permission for us to process your data.

• • Contract: To fulfill our obligations under your membership or participation.

• • Legitimate Interests: To manage our community effectively and improve our services.

• • Legal Obligations: To comply with applicable laws and regulations.

• • Vital interests: In limited circumstances, we may process information where it is necessary to protect someone’s vital interests.

7. Marketing communications

We may send you information about BloomElle events, activities, opportunities, news and other 9relevant communications.

Where required by law, we will ask for your consent before sending electronic marketing communications.

You can unsubscribe from marketing communications at any time by:

• • Clicking the unsubscribe link in our emails; or

• • Contacting us using the details in this Privacy Policy.

Please note that you may still receive essential administrative communications, such as information relating to an event you have booked.

8.  Photographs and video

BloomElle may take photographs and/or video at events for use in promoting BloomElle and its activities, including on our website, social media channels, newsletters and other promotional materials.

Where appropriate, we will provide information at events about photography and filming.

If you do not wish to appear in photographs or video, please let a member of the BloomElle team know.

Where we intend to use an individual’s image in a specific or prominent promotional context, we may seek consent where appropriate.

9.  How We Share Your Data

We may share your data:

• • With trusted service providers who assist in delivering our services (e.g., email platforms, event organisers, event venues, event registration or ticketing providers, email and marketing platforms, IT and website service providers, payment providers, professional advisers, photographers or videographers, suppliers and contractors, and other organisations involved in delivering a specific event or activity

• • When required by law or to protect the rights, safety, or property of BloomElle

• • With your explicit consent for specific purposes.

All third parties processing your data on our behalf are required to comply with data protection regulations. We will only share information where there is a lawful basis for doing so and will take reasonable steps to ensure that information is appropriately protected. We will not sell your personal information to third parties.

10.   Third-party websites and social media

Our website and communications may contain links to websites or services operated by third parties. This Privacy Policy does not apply to those third-party websites. You should review their own privacy policies before providing them with personal information. BloomElle may also operate or maintain social media profiles. Interactions with these platforms are subject to the privacy policies of the relevant social media provider.

11.    How We Store Your Data

• • Personal data is stored securely on our systems, with access restricted to authorized personnel.

• • We use security measures to protect your information.

• • Data is retained only for as long as necessary for the purposes outlined in this Privacy policy.

We will only retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting or reporting requirements. The appropriate retention period will depend on the type of information and why we hold it. When personal information is no longer required, we will securely delete it or anonymise it.

12.      How we protect your information

We take appropriate technical and organisational measures to protect personal information against:

• • Unauthorised access

• • Loss or theft

• • Accidental destruction

• • Unauthorised alteration

• • Unauthorised disclosure

Access to personal information will be limited to people who need it for legitimate business purposes. However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

13.   Cookies and Online Tracking

Our website uses cookies to enhance your experience. Cookies collect data such as browser type and IP address. You can manage your cookie preferences through your browser settings.

14.    International transfers

Some of the third-party services we use may process personal information outside the UK. Where personal information is transferred outside the UK, we will ensure that appropriate safeguards are in place in accordance with applicable data protection law. These safeguards may include an adequacy decision, appropriate contractual safeguards or another lawful transfer mechanism.

15.     Your Data Protection Rights

You have the following rights under the UK GDPR:

Right to Access: Request a copy of the personal data we hold about you.

Right to Rectification: Request corrections to inaccurate or incomplete data.

Right to Erasure: Request deletion of your personal data where legally permissible.

Right to Restrict Processing: Request limited use of your data.

Right to Object: Object to data processing based on legitimate interests.

Right to Data Portability: Request transfer of your data to another organization.

If you wish to exercise any of these rights, please contact us using the details provided above. These rights are subject to certain legal exemptions and limitations. We may need to verify your identity before responding to your request.

16.      Complaints

If you have concerns about how BloomElle has handled your personal information, please contact us first so that we can investigate and resolve your concern.

You also have the right to complain to the UK’s data protection regulator:

Information Commissioner’s Office (ICO)

Website: Information Commissioner’s Office

The ICO provides information about data protection rights and how to make a complaint.

17. Children’s information

Our services and activities are primarily intended for adults and businesses. We do not knowingly collect personal information from children unless this is necessary for a specific activity and appropriate arrangements are in place. If you believe that a child has provided us with personal information without appropriate consent, please contact us.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our activities, technology, legal requirements or how we process personal information. The latest version will always be made available through our website, with the date of the latest update shown at the beginning of the policy.

19. Contact Information
For any questions or concerns about this Privacy Policy or how we handle your data, please contact:
Email: hello@bloomelle.org

This Privacy Policy ensures transparency and trust in how BloomElle manages your personal data, aligning with our commitment to protect and respect your privacy.