BelEve UK is committed to protecting and respecting your privacy.
,This Privacy Policy (together with our terms of use found at (https://beleveuk.org/terms-and-conditions/) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please be sure to read the following carefully before using or submitting information to this Website to understand our views and practices regarding your personal data and how we will treat it.
By visiting this Website, you are accepting and consenting to the terms of this Privacy Policy. Whenever you submit information via this Website, you consent to the collection, use, storage and disclosure of that information in accordance with this Privacy Policy.
| Version: 1.0 | Date: June 2026 | Review: Annual | Owner: Head of Operations |
1. About This Policy
BelEve is a registered charity that delivers programmes for girls and young women aged 8–22. We are committed to protecting the personal information of everyone we work with — including our participants, their parents and guardians, our staff and volunteers, and our partner organisations.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have. It applies to all personal data processed by BelEve, including through our website and event sign-up forms.
Because we work with children and young people, we take our data protection responsibilities especially seriously. Our approach is guided by UK GDPR, the Data Protection Act 2018, and the ICO’s Children’s Code (Age Appropriate Design Code).
2. Who We Are
| Organisation | BelEve |
| Legal structure | Registered Charity 1176525 |
| Registered address | 372 Brockley Road SE4 2BY |
| Data Controller | Chyloe Powell |
| Data contact email | Info@beleveuk.org.uk |
If you have any questions about how we handle your data, please contact us at the email above.
3. What Personal Data We Collect
The data we collect depends on your relationship with BelEve. We only collect data that is necessary for the purposes described in this policy.
3.1 Young People (Participants)
| Data | Why we collect it |
| Full name and date of birth | To register you and confirm eligibility for our programmes |
| School, college or setting | To understand the communities we are reaching |
| Health, dietary and access needs | To provide appropriate support and keep you safe |
| Emergency contact details | To contact a trusted adult if needed |
| Photographs and video (with consent) | For programme records and, with explicit consent, communications |
| Attendance and participation records | To monitor engagement and evaluate programme impact |
3.2 Parents and Guardians
| Data | Why we collect it |
| Full name and relationship to young person | To identify who has parental responsibility |
| Contact details (email, phone) | To communicate about your child’s participation and any concerns |
| Consent declarations | To record authorisation for participation and data use |
3.3 Staff and Volunteers
| Data | Why we collect it |
| Name, contact details, date of birth | Employment/volunteering administration |
| Right to work documentation | Legal compliance |
| DBS check records | Safeguarding and safer recruitment |
| Emergency contact | Health and safety |
| Bank details (staff only) | Payroll |
| Performance and development records | People management and professional development |
3.4 Partner Organisations and Funders
| Data | Why we collect it |
| Key contact names and email addresses | To manage the partnership relationship |
| Correspondence and meeting records | Accountability and delivery tracking |
| Financial and reporting data | Grant management and compliance |
4. Our Lawful Basis for Processing
UK GDPR requires us to have a lawful basis for processing personal data. Depending on the type of data and purpose, BelEve relies on:
| Lawful Basis | When we use it |
| Consent | Photographs and video; optional marketing communications; processing data of children under 13 (parental consent required) |
| Legitimate interests | Running programmes safely; communicating with participants; partnership management |
| Legal obligation | DBS checks; safeguarding; employment law; financial reporting to funders |
| Vital interests | Sharing information in an emergency to protect someone’s life or safety |
| Contract | Employment and supplier contracts |
Where we rely on consent, you can withdraw it at any time without affecting anything done before withdrawal. Where we rely on legitimate interests, you can object — please contact us to discuss.
5. Children and Young People — Additional Protections
Because our core purpose is to support girls and young women aged 8–22, we apply enhanced protections for the processing of children’s data, in line with the ICO’s Children’s Code.
Under 13
We require a parent or guardian to provide consent before we collect or process a child’s personal data. Children under 13 may not sign up to BelEve programmes independently.
Ages 13–15
We ask for parental awareness and agreement alongside the young person’s own assent. We will always seek to involve the young person in decisions about their data where it is safe and appropriate to do so.
Ages 16–22
Young people aged 16 and over may consent independently. We encourage them to share information about how we use their data with a trusted adult.
Across all age groups, we apply the following principles:
- We do not use children’s data for marketing unless separately and explicitly consented to
- We do not share children’s data with third parties for their own commercial purposes
- We use the minimum data necessary and retain it only as long as needed
- We explain our data practices in age-appropriate language where relevant
6. How We Use Your Information
We use personal data only for the purposes for which it was collected. These include:
- Registering participants for events and managing their involvement in our programmes
- Communicating with participants, parents, staff, volunteers and partners
- Safeguarding — identifying and responding to concerns about a young person’s welfare
- Monitoring attendance and evaluating programme impact for reporting and improvement
- Fulfilling our legal obligations as an employer and charity
- Managing grants and funder reporting requirements
- Producing promotional content (with separate explicit consent for identifiable images)
We will never use your data for purposes incompatible with those above without telling you and, where required, seeking your consent.
7. Who We Share Your Information With
We share personal data only where necessary and with appropriate safeguards in place.
| Recipient | Reason for sharing |
| BelEve staff and volunteers | Third-party service providers |
| Partner organisations (e.g. local authorities, schools) | Joint programme delivery, where relevant and with appropriate agreements in place |
| Funders and commissioners | Grant reporting and accountability requirements |
| Safeguarding lead / statutory agencies | Where there is a concern about a young person’s welfare — we may share without consent in these circumstances |
| Emergency services | Where there is an immediate risk to life |
| Third-party service providers | E.g. website hosting, email platforms, DBS checking services — under Data Processing Agreements |
We do not sell personal data. We do not share it with third parties for their own marketing or commercial purposes.
Where we use third-party service providers who process data on our behalf, we ensure they do so under a written Data Processing Agreement and in compliance with UK GDPR.
8. How We Store and Protect Your Data
We store personal data securely using [describe your systems — e.g. password-protected cloud storage, secure email, encrypted databases]. Access is restricted to authorised staff and volunteers on a need-to-know basis.
We do not routinely transfer personal data outside the UK. If this changes, we will ensure appropriate safeguards are in place in line with UK GDPR requirements.
In the event of a data breach that is likely to result in a risk to individuals’ rights and freedoms, we will notify the ICO within 72 hours and, where required, notify affected individuals without undue delay.
9. How Long We Keep Your Information
| Data Type | Retention Period |
| Event/programme registration data | 12 months after the event or programme end date |
| Participant records (ongoing engagement) | For the duration of engagement, plus 3 years |
| Photographs and video | Until consent is withdrawn, or 3 years from last engagement |
| Staff employment records | 7 years after employment ends (statutory requirement) |
| Volunteer records | 3 years after volunteering ends |
| Safeguarding records | Retained in line with statutory guidance [confirm with your safeguarding lead] |
| Financial and funder records | 7 years (charity law requirement) |
When data is no longer needed, we securely delete or anonymise it. Physical records are shredded; digital records are permanently deleted.
11. Our Website
Our website may use cookies and similar technologies to improve your experience. Please refer to our separate Cookie Policy for details.
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.
10. Your Rights
Under UK GDPR, you and, where relevant, your parent or guardian have the following rights:
| Your right | What it means |
| Access | Request a copy of the personal data we hold about you (Subject Access Request) |
| Rectification | Ask us to correct inaccurate or incomplete data |
| Erasure | Ask us to delete your data, where there is no overriding legal reason to retain it |
| Restriction | Ask us to limit how we use your data while a dispute is resolved |
| Portability | Request your data in a machine-readable format (where applicable) |
| Object | Object to processing based on legitimate interests or for direct marketing |
| Withdraw consent | Withdraw consent at any time for processing that relies on it |
To exercise any of these rights, please contact us at [data@beleve.org.uk]. We will respond within one calendar month. We will not charge a fee for reasonable requests.
If you are not satisfied with how we handle your request, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
12. Changes to This Policy
We review this Privacy Policy at least annually and whenever there are significant changes to how we process personal data. The current version and date will always be shown at the top of this document and on our website.
Where changes are material, we will notify relevant individuals by email or through our website.
13. Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact:
| Name | Data Lead/Designated Person |
| Role | Chyloe Powell |
| Info@BelEveUk.org | |
| Address | 372 Brockley Road London SE4 2BY |
BelEve — Empowering girls and young women aged 8–22
Registered Charity 1176525 · beleveuk.org
Be a part of our movement
Join our community of changemakers and start making a difference today! Our mailing list will keep you connected.
