Legal Documentation

Privacy Notice

Friends of Brockwell Park Privacy Notice 

This privacy notice tells you what to expect us to do with your personal information. We are committed to protecting your personal information and being transparent about what we do with it, however you interact with us.  

  • Contact details

  • What information we collect, use, and why

  • Lawful bases and data protection rights

  • Where we get personal information from

  • How long we keep information

  • Who we share information with

  • Sharing information outside the UK

  • How we protect your information

  • How to complain


Contact details


What personal information do we collect, use, and why

We may collect or use the following information to receive and process membership applications and donations and to organise events, volunteering opportunities and fundraising activities:

  • Names and contact details

  • Addresses (including postal and email)

  • Payment transaction information (note: we do not ourselves collect your payment card or bank account details, these are only processed via secure, regulated third party payment service providers or inter-bank services)

  • Donation history   

  • Tax payer information (for Gift Aid purposes)

  • Gifts in wills

  • Volunteering interests

  • Age (if under 18)

We may collect or use the following personal information for compiling and sending ournewsletters, ad hoc unsolicited communications about our work, campaigns, surveys or relevant local news or developments (such as council consultations or planning applications), content for our social media channels and other fundraising/marketing purposes:

  • Names and contact details

  • Marketing preferences

  • Recorded images, such as photos or videos of our events and volunteer sessions, in which you are clearly identifiable

  • Information about yourself which you share with us on a non confidential basis

  • We may collect or use the following personal information for dealing with enquiries, complaints or claims: 

  • Names and contact details

  • Information relevant to the subject matter 

  • Membership or donation history


We may collect or use the following information in connection with applications to join our executive committee or become a lead volunteer or our member or supporter surveys or questionnaires*

  • Names and contact details

  • Information relevant to the subject matter 

  • Membership or donation history

  • References, CV, professional or educational qualifications and similar

    * but we will only publish results of surveys or questionnaires in anonymised form

We may also collect or use the following special category informationin connection with your volunteering activities and where relevant to queries, complaints or claims. This information is subject to additional protection due to its sensitive nature:  

  • data concerning health (for example, accessibility needs, allergies, safeguarding concerns). 


  • If you’re under 16, you must provide us with your parent or legal guardian’s permission before providing us with your personal information. 


Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the UK ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.


Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to receive and process membership applications and donations and to organise events, volunteering opportunities and fundraising activities are:

  • Legitimate interests– we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: Internal administration; legal obligations (eg, HMRC, charity law and regulation); processing necessary to provide our charitable purpose activities (eg, volunteer opportunities).


Our lawful bases for collecting or using personal information for sending our regular newsletters, ad hoc unsolicited communications about our work, campaigns, surveys or relevant local news or developments (such as council consultations or planning applications) or fundraising/marketing purposes are:


  • By E-mail:  Legitimate Interests where you have provided us with an email contact address when you supported or expressed an interest in our work and we gave you the opportunity to opt out of FOBP using your details for email marketing when we first collected them.  Even if you did not opt out initially, you can object to us using your information this way at any time by using the unsubscribe option included in our email communications or by contacting us directly using the Contact Details above. 

  • By text or phone:    Consent  (note that currently does not use voice calls or SMS for marketing purposes)

  • By post:    Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:  meeting our and our supporters expectations that we will keep you informed about developments within Brockwell Park, our activities and opportunities for you to support us, in a way ie by post that we have assessed as unlikely to cause harm to you or anyone else.


Our lawful bases for collecting and including recorded images of you, such as photos or videos of you attending our events, member general meetings and volunteer sessions, in which you are identifiable, or information which you choose to share with us on a non confidential basis, in ourregular newsletters , websites,  social media channels and other fundraising/marketing materials are :    

Consent

In the case of photographs or video taken at events or meetings, we will also always ask at the time if you are happy to be photographed or filmed before including you. Where practicable, we will ask for your written consent. 


Our lawful bases for collecting or using personal information for dealing with enquiries, complaints or claims are:

Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: providing advice and information; legal obligations; internal administration; complaint/dispute resolution. 


Our lawful bases for collecting or using personal information for our member or supporter surveys or questionnaires orapplications to join our executive committee or become a trustee or volunteer are:     ConsentOur lawful bases for collecting or using special category informationin connection with your volunteering activities or where relevant for dealing with queries, complaints or claims are:      

Consent

Our lawful bases for collecting and using information for the purposes of carrying out proportionate donor due diligence in accordance with Charity Commission guidance are:     

Consent

Where we have said we rely on legitimate interests as the lawful bases,  you can contact us for further details of those interests using the contact details set out above.

Where we have said we rely on Consent as the lawful bases, this means we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you retain the right to withdraw your consent with respect to future uses at any time. 


Where we get personal information from

  • Directly from you, for example, when you complete one of our online membership, donor or volunteer interest forms or send us an email enquiry

  • We may also get personal information via referrals made with your consent from other organisations you have contacted, for example, the Lambeth Parks team. 


How long we keep information

We keep personal information relating to your financial transactions , including Gift Aid taxpayer information, for as long as legally required for tax or accounting purposes; this  may be for up to 6 years after the end of the tax year in which the transaction occurs.

We keep membership records for a minimum of 10 years and records of our public meetings indefinitely.

We will not keep other information longer than is necessary for the purposes for which it was originally collected, having regard to Charity Commission guidance, and normally we will delete or anonymise records we have of you within 5 years after our relationship with you ends (ie, after you cease to be a member, volunteer or donor). 

If you opt to unsubscribe from future marketing communications, we may need to add and retain your details on a suppression file solely to help ensure your request not to be contacted is complied with.

There may be exceptions in the case of specific information which needs to be preserved for legal reasons,  for example,  where necessary in reasonable contemplation of legal proceedings .  

In addition, photographic, video and documentary records of our events and important meetings (such as General Meetings) may be kept indefinitely as part of our organisation’s historic archives and shared with other local archives such as Lambeth Archives. 

For more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above. 

Who we share information with

Data processors who provide our Website and data hosting and mailing services 

We ensure that we conduct pre-conduct due diligence on these service providers and that there are appropriate contractual data protection terms in place. 

Others we share personal information with who act as “data controllers”  or, in some cases, as both “processor” and “controller” (depending on the different reasons for which they process the data): 

  • payment service providers (such as Stripe or GoCardless):  though these services are integrated into our website, they collect and process data directly from you; we cannot see or access the information you input. We only use payment service providers who are bound by the PCI-DSS (Payment Card Industry Data Security Standards).

  • You can read more about how our payment service providers protect your data here

  • Organisations we’re legally obliged to share personal information with (for example, for safeguarding purposes).

  • Other charitable organisations with the same or similar objects to ours, with whom we may in future merge or transfer our assets to, following the necessary membership approvals and UK Charity Commission requirements.


    Sharing information outside the UK

Where necessary, we (or, under their service agreements with us, our service providers)  transfer personal information outside of the UK. This means your personal information may also be transferred to service providers located in countries which the UK government has not at the time of transfer assessed as having a level of data protection that is “not materially lower” than UK law.  When making such transfers, we comply with the UK GDPR, making sure appropriate safeguards are in place. 

The relevant transfers are: 

Supplier name: Squarespace Inc; Mailchimp Inc; Stripe LLC

Category of recipient: website and data hosting and storage; mail services; card payment services 

Country the personal information is sent to: USA

How the transfer complies with UK data protection law:  We have conducted a transfer risk assessment, to decide, acting reasonably and proportionately, that the standard of protection for the type of personal information we collect is not materially lower than in the UK after we transfer that information.  We have then taken steps to ensure that our contracts with these suppliers incorporate the standard data protection clauses of the UK ICO’s International data transfer agreement (IDTA) and data transfer addendum (the Addendum) and that the suppliers have certified their adherence to the UK Extension to the EU-US Data Privacy Frameworks and that certifications are kept up to date. 


How we protect your information

We use and ensure that service providers who process you personal information use technical and organisational security measures to ensure your information is secure and that greater protection is afforded to any special category information. 

Access to information is limited on a need to know basis to key FoBP personnel via a secure, password protected, encrypted connection.  However, there are always inherent risks when information is sent via public networks or using public computers.  


How to complain

If you have any concerns about how we use your personal data, you can make a complaint to us using the contact details at the top of this privacy notice or, if it makes it easier for you, by using the complaint form which you can download here

We will acknowledge your complaint within 30 days and respond to it without undue delay.  

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint


Changes to this Privacy Notice

We may need to update this Privacy Notice from time to time. If so, we will post the changes under the Privacy Notice section of this website.  Please check this page occasionally to see if we have included any updates or changes  and that you are happy with them. If you have any concerns about any changes, please contact us using the Contact Details above. 


Cookies: for information on how we use cookies, please see our Cookie Policy here


Last updated 28th July  2026