1. Introduction
The Bright Morning Star Prisons and Homelessness Outreach (“TBMS”, “we”, “us”, or “our”) is a registered non-profit organisation (Company No. 9954660) based in Brixton, London. We are committed to protecting the privacy and personal data of everyone who interacts with us – including visitors to our website, donors, volunteers, newsletter subscribers, and beneficiaries.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit https://thebrightmorningministries.com or interact with us. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please read this policy carefully. If you have any questions, contact us using the details in Section 11.
2. Who We Are (Data Controller)
For the purposes of data protection law, the data controller is:
The Bright Morning Star Prisons and Homelessness Outreach
Ground Floor, Chartham Court Community Hall
Canterbury Crescent, Brixton, London, SW9 7PT
Email: info@thebrightmorningministries.com
Phone: +44 7946 288144
3. Personal Data We Collect
We collect personal data in the following ways and categories:
3.1 Donation and Payment Information
When you make a donation through our website, we may collect:
- Full name
- Email address
- Billing address
- Payment card details (processed securely by our payment processor; we do not store raw card data)
- Gift Aid declaration details (if applicable), including your home address and taxpayer status
- Donation amount and frequency
3.2 Contact and Enquiry Forms
When you contact us via our website’s contact form, we collect:
- Full name
- Email address
- Phone number (if provided)
- The content of your message
3.3 Newsletter and Email Subscriptions
When you sign up for our newsletter or email updates, we collect:
- Name (if provided)
- Email address
- Your subscription preferences
3.4 Website Usage Data
When you visit our website, we may automatically collect technical data including:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent
- Referring website
This is collected through cookies and similar technologies. Please see Section 9 (Cookies) for more information.
4. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
4.1 Processing Donations
To process your charitable donations, issue receipts, process Gift Aid claims with HMRC, and maintain accurate financial records.
Legal basis: Contract performance; legal obligation (Gift Aid); legitimate interests.
4.2 Responding to Enquiries
To respond to questions, requests for support, or general correspondence you send us.
Legal basis: Legitimate interests.
4.3 Sending Communications
To send you newsletters, event updates, programme news, and fundraising information where you have subscribed or consented to receive them.
Legal basis: Consent. You may withdraw your consent at any time by clicking “Unsubscribe” in any email or by contacting us directly.
4.4 Improving Our Website
To monitor and analyse website usage, fix technical issues, and improve the user experience.
Legal basis: Legitimate interests.
4.5 Legal and Regulatory Compliance
To comply with our legal obligations as a registered non-profit, including financial reporting, charity law, and safeguarding duties.
Legal basis: Legal obligation.
5. Special Category (Sensitive) Data
Given the nature of our work – supporting prisoners, ex-offenders, homeless individuals, and vulnerable young people – we may come into contact with sensitive personal data such as health information, criminal history, or data relating to vulnerable circumstances.
This data is handled only where strictly necessary, with additional safeguards applied, and only with explicit consent or where the law permits. We never collect sensitive data through our general website forms.
6. Who We Share Your Data With
We do not sell, rent, or trade your personal data. We may share it only in the following limited circumstances:
- Payment processors: Secure third-party providers who process donations on our behalf (e.g., payment gateway providers). They process your data only as necessary to complete transactions.
- Email service providers: To send newsletters and communications (e.g., Mailchimp or similar). These providers act as data processors under contract with us.
- HMRC: Where you have completed a Gift Aid declaration, we are required to share your details with HMRC to reclaim tax.
- Legal authorities: Where required by law, court order, or to protect the safety of individuals.
- Partner organisations: Only with your explicit consent, and only where necessary to deliver a service you have requested.
All third parties we work with are required to handle your data securely and in accordance with UK data protection law.
7. How Long We Keep Your Data
- Donation records: Donation records:
We keep donation records for 7 years to comply with HMRC and charity accounting requirements.
- Contact enquiries: Typically 2 years from last contact, unless an ongoing relationship exists.
- Newsletter subscriptions: Until you unsubscribe or withdraw consent.
- Website usage data: Typically 26 months (industry standard for analytics).
After the relevant retention period, your data is securely deleted or anonymised.
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access – to request a copy of the personal data we hold about you.
- Right to rectification – to ask us to correct inaccurate or incomplete data.
- Right to erasure – to request we delete your data (“right to be forgotten”), subject to legal obligations.
- Right to restrict processing – to ask us to pause processing your data in certain circumstances.
- Right to data portability – to receive your data in a structured, machine-readable format.
- Right to object – to object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent – where processing is based on consent, you may withdraw at any time without affecting prior processing.
To exercise any of these rights, please contact us at info@thebrightmorningministries.com. We will respond within one calendar month. There is no charge for standard requests.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.
9. Cookies
Our website uses cookies to improve your browsing experience and to collect usage statistics. Cookies are small text files stored on your device.
We use the following types of cookies:
- Essential cookies: Necessary for the website to function (e.g., session management).
- Analytics cookies: Help us understand how visitors use the site (e.g., Google Analytics). These are only set with your consent.
- Functionality cookies: Remember your preferences.
You can control or disable cookies through your browser settings. Note that disabling certain cookies may affect website functionality. You can also opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.
10. Data Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures including:
- SSL/TLS encryption on our website (HTTPS)
- Secure, access-controlled systems for storing data
- Limiting access to personal data to authorised staff and volunteers only
- Using reputable, security-certified third-party processors
Despite these measures, no data transmission over the internet is completely secure. If you suspect any misuse of your data, please contact us immediately.
11. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights, or have a concern about how we handle your data, please contact:
Data Enquiries – The Bright Morning Star
- Ground Floor, Chartham Court Community Hall
- Canterbury Crescent, Brixton, London, SW9 7PT
- Email: info@thebrightmorningministries.com
- Phone: +44 7946 288144
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of our website following any changes constitutes acceptance of the updated policy.