PRIVACY NOTICE

Privacy Notice

1. Introduction
The Blackberry Hub CIC (“we”, “us”, “our”) is committed to protecting the privacy and security of personal information. This notice explains how we collect, use, store, and share personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The Blackberry Hub CIC is the data controller for the personal information we process.

 Our contact details are:

• Email:      theblackberryhub@gmail.com
• Phone:  07305071821
• Address:  17a Electric Lane

3. What Personal Data We Collect

We may collect the following categories of personal data:

• Identification  and contact details (e.g. name, email, phone number, address)
• Information  relating to family or support needs (only where necessary to deliver  services)
• Records of your communication with us
• Service participation details (e.g. workshops attended, referrals requested)

4. Purposes of Processing

We process personal data to:

• Deliver  and administer our workshops, events, and services
• Communicate with service users about programmes and opportunities
• Make referrals to trusted third-party organisations where appropriate
• Monitor, evaluate, and improve our services
• Comply with legal and regulatory obligations

5. Legal Basis for Processing

We rely on the following lawful bases under UK GDPR:

• Legitimate Interests: where processing is necessary for us to provide and improve our      services in a proportionate way.
• Consent: where referrals or sensitive information are involved, we will seek your  explicit consent.
• Legal  Obligation: where processing is required by law.

6. Data Sharing

We do not sell personal data. We may share personal data with:

• Trusted  third-party organisations, but only where a referral is appropriate and in your best interests
• Regulators or public authorities where required by law

7. Data Retention

We only retain personal data for as long as necessary to fulfil the purposes for which it was collected. When no longer required, data will be securely deleted or anonymised.

8. Data Security
We use appropriate organisational and technical measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction.

9. Your Rights
Under UK GDPR, you have the following rights:

• The right to access the personal data we hold about you
• The right to request correction of inaccurate or incomplete data
• The right to request erasure of your personal data (where applicable)
• The right to object to processing based on legitimate interests
• The right to withdraw consent (where consent is the lawful basis)
• The right to data portability (where applicable)

To exercise these rights, please contact us using the details provided      above.

10. Complaints
If you are unhappy with how we use your personal data, please contact us in the first instance. You also have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk.