Privacy Policy

Last updated: September 2026

At 2BU Somerset, we are committed to protecting your privacy and ensuring that any personal information you share with us is handled safely, securely and in accordance with UK data protection legislation.

2BU Somerset supports LGBTQIA+ children, young people, families, carers, professionals and allies across Somerset. This Privacy Notice explains what information we collect, why we collect it, how we use it, and your rights regarding that information.

Who We Are

2BU Somerset is the Data Controller responsible for the personal information we collect.

Contact Details

2BU Somerset
Email: info@2bu-somerset.co.uk

Charity Number: 1198300

If you have any questions about this Privacy Notice or how we use your information, please contact us.

What Information We Collect

Depending on how you engage with us, we may collect:

• Name and contact details
• Date of birth
• Emergency contact information
• Parent or carer details where appropriate
• Information about participation in groups, activities and support services
• Wellbeing, safeguarding and support information
• Equality monitoring information such as sexual orientation, gender identity, ethnicity and accessibility requirements
• Information submitted through referrals, registrations and online forms
• Website usage information and cookies

We only collect information that is necessary to deliver our services, safeguard young people, monitor our impact and meet our legal obligations.

Why We Collect Information

We use personal information to:

• Deliver support, activities and youth work services
• Communicate with young people, families and supporters
• Safeguard children, young people and vulnerable adults
• Monitor and evaluate the impact of our services
• Improve the support we provide
• Organise events, trips and activities
• Meet funding, reporting and legal requirements
• Respond to enquiries, feedback and complaints

Information We Receive From Others

We may receive information from parents and carers, schools, colleges, local authorities, health professionals, social workers and partner organisations where this helps us provide support or fulfil safeguarding responsibilities.

Safeguarding and Confidentiality

Confidentiality is important to us. However, there may be circumstances where we need to share information without consent if:

• A child, young person or adult is at risk of harm
• There are safeguarding concerns
• We are required to do so by law
• There is an immediate risk to someone's health, safety or wellbeing

Where appropriate, we will explain what information is being shared and why.

Who We Share Information With

We do not sell, rent or trade personal information.

Where necessary and lawful, information may be shared with:

• Local authorities
• Schools and colleges
• Health and wellbeing services
• Social care teams
• Safeguarding agencies
• Emergency services
• Professional partners supporting children and young people

Information is only shared where there is a lawful basis to do so.

Digital Services

As part of our work, we use trusted digital systems and platforms, including:

• Google Workspace
• Microsoft 365
• Google Forms
• Mailchimp
• Discord
• Website hosting and analytics providers

These providers are expected to maintain appropriate security and data protection standards.

Photography and Media

We may occasionally use photographs, videos or testimonials to promote our work and demonstrate the impact of our services.

Where identifiable images are used, consent will normally be obtained beforehand. For children and young people under 18, consent may also be sought from a parent or carer where appropriate.

Cookies

Our website uses cookies to improve functionality and help us understand how visitors use the site.

Cookies help us:

• Improve website performance
• Analyse website traffic
• Remember visitor preferences
• Enhance user experience

You can manage cookie settings through your web browser at any time.

How We Protect Information

We use appropriate technical and organisational measures to keep information secure. These include:

• Secure cloud-based systems
• Access controls
• Password protection
• Multi-factor authentication where appropriate
• Staff training
• Regular reviews of our security procedures

How Long We Keep Information

We only keep personal information for as long as necessary to fulfil the purpose for which it was collected and to meet legal, safeguarding and regulatory requirements.

When information is no longer required, it is securely deleted or anonymised.

Your Rights

Under UK GDPR, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of information in certain circumstances
• Restrict or object to processing
• Withdraw consent
• Request transfer of your data where applicable
• Make a complaint

To exercise any of these rights, please contact us at:

info@2bu-somerset.co.uk

Complaints

If you are unhappy with how we have handled your information, please contact us first so that we can try to resolve your concerns.

You also have the right to complain to the Information Commissioner's Office (ICO).

Visit https://ico.org.uk for further information.

Changes to This Privacy Notice

We may update this Privacy Notice from time to time. The latest version will always be available on this website.

Full Privacy Notice

A full copy of 2BU Somerset's Privacy Policy is available on request by emailing info@2bu-somerset.co.uk.