UK GDPR statement | B-Transformed Mission Agency

Our commitment

B-Transformed Mission Agency is committed to protecting personal information and respecting your privacy. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who is responsible

B-Transformed Mission Agency ([registered charity no.]) is the data controller. Contact us about data protection at [email] or write to [address]. ICO registration: [ICO number]. [Data protection lead: name to be added.]

The principles we follow

Lawful, fair and transparent: we tell you what we do with your information and why.
Purpose limitation: we use data only for the reasons we gave you.
Data minimisation: we ask only for what we need.
Accuracy: we keep records up to date and correct mistakes.
Storage limitation: we don't keep data longer than necessary.
Security: we protect data against loss, misuse and unauthorised access.
Accountability: we can show how we comply.

Sensitive information

Some of the information people share with us is especially sensitive, such as religious belief, health, or criminal convictions. We process it only where the law allows, for example with your explicit consent, to provide support you have asked for, to protect someone from harm, or as a not-for-profit body with a religious aim in relation to our members and people in regular contact with us. We apply stricter access controls to this information.

Your rights

To be informed about how your data is used.
To access the personal data we hold about you.
To have inaccurate data corrected.
To have your data erased, in certain circumstances.
To restrict or object to our use of your data.
To receive your data in a portable format, where it applies.
To withdraw consent at any time, where we rely on it.

We respond to requests within one month. There is normally no charge. We may need to check your identity first.

Sharing and transfers

We do not sell personal data. We share it only with your consent, where the law requires it, to protect someone from harm, or with processors who work for us under contract (such as payment, email and hosting providers). If data is transferred outside the UK, we make sure appropriate safeguards are in place.

Children and young people

We take particular care with information about children and young people, and handle it in line with our safeguarding policy. Where consent is needed, we obtain it from a parent or carer where appropriate.

Data breaches

If a breach is likely to put people at risk, we report it to the Information Commissioner's Office within 72 hours and tell the people affected without undue delay.

Making a complaint

If you are unhappy with how we have used your data, please contact us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Related policies

See our privacy policy, cookie policy and safeguarding policy.