BEAUTY BACKED Trust's privacy notice.
This privacy notice provides information on how the Beauty Backed Trust (BB) collects and processes your personal data when you visit our website; apply to be a Mentor (see below); donate monies to BB or apply to receive funds. BB respects your privacy and is committed to protecting your personal data.

BB is a Private Limited Company by guarantee. Company number 13997866.
BB is registered with the Information Commissioner’s Office with registration number ZB139404.

We keep our privacy policy under regular review. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.  

In this policy “Applicants” are people who apply for funding and “Donors” are people who donate monies that are donated to Applicants. “Mentors” are those who volunteer to provide a mentoring service to Applicants.

We do not transfer personal data outside the UK or EEA or make automated decisions.  
‍
1. Important information and who we are
‍BB is the controller and responsible for your personal data.  
Our contact details are:  
‍Name or title of data privacy manager: Amy McLean;
‍Email address: amy@beautybacked.com;
‍Postal address: 6th Floor, Manfield House, 1 Southampton Street, London, WC2R 0LR
‍
Should we be unable to resolve any queries that you may have please contact the Information Commissioner’s Office https://ico.org.uk.

2. The data we collect about you
‍We may collect, use, store and transfer different kinds of personal data about you as follows:
‍Identity Data – your name; marital status; gender and date of birth
‍Compliance Data – any verification checks (CRB; KYC or references) which we undertake
‍Contact Data – address; telephone numbers and email addresses
‍Financial Data - donations made by Donors and information submitted by Applicants in support of an application for funding.  
‍Technical Data -  includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website
‍
3. How we use your personal data
‍We will only use your personal data for the purpose for which we collected it which include the following:  
-To register you as a donor and to receive a donation. In certain circumstances, for compliance reasons, we will conduct due diligence on a Donor which may lead to the disclosure of personal data of the Donor and others associated with the Donor.
- To verify the credentials of any Applicant or Mentor.
- To manage any application for support made by an Applicant (this is set out on the Request Assistance page of our website.
- To improve the functionality and user experience of our website.  
- From time to time we ask Applicants if they want to publicise their involvement with us.

Unless you share with us as part of the application process we do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Any such information will be voluntarily and freely shared. Nor do we collect any information about criminal convictions and offences.

We will use your data to fulfil our commitments to you as a Donor or Applicant. You have approached us and have therefore consented to BB processing of your data.  

Applicants acknowledge that the details that they share with us will be shared with prospective Mentors who may then contact you and will retain that personal data for as long as it is needed. Each Mentor is a separate data controller and responsible to Applicants for their processing of Applicants’ personal data. No duty if care is owed by us to any Applicant in this regard.  
‍
In certain circumstances we will share data with third parties such as law enforcement; the Charity Commission or HMRC.  As stated above we may ask you to publicise your experience and we may share your personal data with a public relations company who will contact you on our behalf.

As we are processing data on the basis of consent you can withdraw your consent at any time but this will preclude us from any further processing of your personal data.

We will not use the personal data for any marketing whether conducted by us or by a third party.

Our website uses functional cookies.  

4. Data Retention
Applicants
We will retain the personal data for successful applications for 7 years and for unsuccessful application for 1 year. Any testimonials or publicity will be retained for no longer than a year.
‍Donors
As this information is financial in nature it will be retained for 7 years. This extends to any further due diligence conducted on Donors.
‍Mentors
‍To meet any legal requirements.  

5. Your legal rights
‍Under certain circumstances, you have rights under data protection laws in relation to your personal data:
- Request access to your personal data.
- Request correction of your personal data.
- Request erasure of your personal data.
- Object to processing of your personal data.
- Request restriction of processing your personal data.
- Request transfer of your personal data.
- Right to withdraw consent.
If you wish to exercise any of the rights set out above, please contact us.

‍No fee usually required
‍You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
‍
‍What we may need from you
‍We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

‍Time limit to respond
‍We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
‍