What personal information we collect, why we need it, and your rights.

The short version: we only collect what we need, we keep it safe, we never sell it, and you can ask to see it or have it deleted.

1. Who we are

Brightline Youth Support (“BYS”, “we”, “us”) runs the Life Skills Programme for care leavers. We decide how your personal information is used, so in law we are the “data controller”.

• Business: Brightline Youth Support. [ADD: “a limited company, number 12345678” OR “a partnership” OR “run by Rose [SURNAME] as a sole trader”]
• Address: [REGISTERED OR BUSINESS ADDRESS]
• Email: info@brightlineyouthsupport.co.uk
• ICO registration number: [NUMBER, ONCE REGISTERED]

2. Website visitors and people who contact us

When you use our contact form or email us, we collect:

• your name and email address
• your message
• anything else you choose to tell us, such as your phone number or organisation

We use this to reply to you and talk about working together. Our legal reason is “legitimate interests”: we need it to answer your enquiry. We keep enquiries for up to 2 years after we last hear from you, unless we go on to work together.

For how our website uses cookies, see our Cookie Policy.

3. Organisations that book the programme

We collect the names, job titles, work emails and phone numbers of staff at care providers and local authorities that book with us. We use them to arrange and invoice the programme. Our legal reason is “contract”. We keep invoices and business records for 6 years, because tax law requires it.

4. Young people on the programme

If you take part in the programme, we may collect:

• your name, age and how to contact you
• the name and contact details of your personal adviser, social worker or key worker
• an emergency contact
• anything we need to know to support you, such as health needs, allergies or access needs
• your attendance, and your feedback on the sessions
• notes about safeguarding concerns, if we ever have any

We use this to run the sessions, keep you safe, and improve the programme. We usually receive these details from the organisation that referred you, or from you.

Our legal reasons are “legitimate interests” (running a safe programme) and, for health information, your consent or, where we need it to keep someone safe, “safeguarding of children and individuals at risk”, which the Data Protection Act 2018 allows.

We share feedback and attendance with the organisation that booked your place, but we only use your name in reports if you agree. When we report on the programme to anyone else, we leave names out.

We keep attendance and contact records for [6 YEARS] after the programme ends. Safeguarding records may be kept longer where the law or official guidance says so.

5. Who we share information with

We never sell your information or share it for marketing. We only share it with:

• the organisation that booked or referred a young person, about that young person
• services that keep people safe, such as children’s services, adult social care, the police or the NHS, if we are worried someone may be harmed
• companies that help us run BYS, such as our website host (Webador), our email provider (Google) and our accountant. They may only use your information to provide their service to us
• anyone the law requires us to share it with

Some of these companies may store information outside the UK. When they do, they must protect it to the standard UK law requires.

6. How we keep it safe

We keep information in password-protected accounts with two-step sign-in. Paper records, such as registers, are kept locked away and scanned or shredded after each session. Only Rose and Stanley can see personal information.

7. Your rights

You have the right to:

• see the information we hold about you (free of charge)
• ask us to correct it if it’s wrong
• ask us to delete it
• ask us to stop or limit how we use it
• object to us using it
• take back your consent at any time, where we rely on consent
• ask for a copy to take to another organisation

Email info@brightlineyouthsupport.co.uk to use any of these rights. We will reply within one month. Some rights have limits, for example we may need to keep safeguarding records. If so, we will explain why.

8. Complaints

If you are unhappy with how we have used your information, please tell us first at info@brightlineyouthsupport.co.uk. We will confirm we have your complaint within 30 days and let you know how we are dealing with it.

If you are still unhappy, you can complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

9. Changes to this policy

We will update this policy when anything changes and show the new date below.

Last updated: 23.10.26. Next review: October 2027.