Brink Foundation CIC Privacy Policy
Last updated: March 2026
Brink Foundation CIC (“Brink”, “we”, “us”, “our”) is the data controller responsible for your personal data.
This privacy policy explains how Brink uses personal information we collect via our work and our website. We are committed to protecting your privacy and take all reasonable precautions to safeguard personal information. Our approach to handling data is aligned with our internal data governance framework, ensuring data is managed responsibly, securely, and in compliance with applicable laws and regulations.
1. What kind of information do we collect?
Sign-up details: If you register or sign up for events, newsletters or publications on the site, we will ask you for personal information such as your name, email address, occupation and other contact details such as a contact phone number.
Job application details: If you apply online for a job at Brink, we will collect information about you and your experience through that application process.
Other application details (e.g. for services or funding): If you submit a tender to provide any services, apply for funding or support from Brink, or register to attend one of our events, we may ask for more detailed information which we will use to process your application.
Feedback and surveys: We may also ask you for feedback about Brink or to complete surveys.
Research: If you agree to work with us in relation to any research we are conducting we will ask you for your name and contact details, occupation and may ask for further information relevant to the research.
Online activity: When you use our website, we obtain information about the device from which you accessed it, your visits and use of the website including your IP address, location, browser type and version, referrer and activity. We record your activity and preferences when visiting the site through the use of cookies (see "Cookies", below).
2. What do we do with information we collect and what is our legal basis for this?
Third party processors: As indicated below, we may use third party platforms and processors to deliver newsletters, process applications, event registrations, tickets or publication sales, payments, surveys, and requests to update your contact preferences. In using these third parties, we pursue our legitimate interest in using technology to operate efficiently and effectively as an organisation. To balance our interests against yours, we take steps to ensure that these third parties maintain appropriate technical and organisational measures to keep your personal information secure and only process it in accordance with applicable data protection laws.
Sign-up details: If you sign up for us to send you newsletters, publications and other information about Brink, our partners and activities (see the “Marketing” section below), we will use your personal information to send these to you. Our legal basis for doing this is your consent. You have the right to withdraw this consent at any time, as explained in the “Marketing” section below.
If you are given the opportunity to sign up, register for an event or programme, or create a personal profile through a third party platform such as Facebook or X, that platform may make the email address registered to your account available to Brink, and Brink may use that email address to enable you to log in to the relevant platform. Our legal basis for doing this is our legitimate interest in using third party platforms to improve business efficiency and ease of registration for users.
Events: If you register to attend one of our events, we will use your personal information to process your application to attend the event, take payment where applicable, administer and manage the event, and send you updates or information regarding the event. Our legal basis for doing so is that this processing is necessary to perform our agreement with you in relation to your attendance.
We may use Eventbrite or similar third party registration systems for some of our events. These providers may store or process your personal information outside the UK or European Economic Area (EEA), including in the United States. Where this happens, we will ensure that appropriate safeguards are in place to protect your personal information, such as Standard Contractual Clauses or other lawful transfer mechanisms recognised under UK data protection law. Please see the relevant provider’s privacy policy for more information.
Purchases: If you buy a ticket for an event, or make a purchase via the website, we will use the information provided to fulfil your order. We use third party systems to process purchases and payments. In some cases, the payment processing organisation will be the separate data controller of your information for the purpose of processing the transaction and may process your information outside the UK or EEA. Please read the relevant terms and conditions and privacy information before completing your purchase and making payment.
Job application details: We will use your personal information to process your application. We undertake this processing because it is necessary to fully assess your application and, if successful, to take steps to enter into a contract with you. This is our legal basis for the processing.
At Brink, we use a third party platform provider to process job applications. We will make the terms and conditions clear at the point of application. For more information, please see the Breezy privacy policy.
Other application details: We will use your personal information to process applications you make via the site, including where you tender to provide services, apply for funding or support, or apply to participate in one of our programmes or initiatives. We undertake this processing because it is necessary to fully assess your application and, if successful, to take steps to enter into an agreement with you. This is our legal basis for the processing.
If you tender to provide services, apply for funding or support, or enter one of our, or our partners’, prizes, you may be directed to another platform to process the application. Some of these platforms may be managed by third parties other than Brink, and further details will be given to you when you start the application. Please ensure you read the terms and conditions and privacy information for those platforms when making any such applications. Where those third parties process personal information on our behalf, they will do so in accordance with our instructions and applicable data protection law.
Feedback and surveys: If you agree to give us feedback or complete a survey, we will use the information to improve our work and activities. We usually use Typeform or similar tools to process surveys, and where they act on our behalf, they process your information in accordance with our instructions. For more information, please see the relevant provider’s privacy policy.
If you agree to participate in any survey that forms part of a research project, we will tell you at the time you take part how your information will be used for that particular project or programme, and how long it will be kept for.
Research: If you agree to take part in any research, we will use your information for the purpose of that research project or programme. Full details of how your personal information will be used will be given to you at the time you agree to participate. This could include using the information to inform the development of a new prize, project, programme or other initiative, incorporating it into reports or other research outcomes, and in some cases displaying it publicly on web pages relating to the relevant research project or programme. Where appropriate, our legal basis for this processing will be consent and/or our legitimate interests, depending on the nature of the research and the way in which the information is collected and used.
Online activity: The information we obtain about your device and use of our website helps us monitor the website, improve its performance, maintain its security, understand more about our users’ interests and preferences, and inform our marketing strategy. The cookies we use tell us how you use the site and what pages you have visited. Some of these cookies may also be used for remarketing purposes and, where required, will only be used with your consent. For more information, see the “Cookies” section below.
Our legal basis for this processing is our legitimate interest in monitoring and improving the performance, relevance and security of our website, and consent where required for non-essential cookies or similar technologies.
Social media interaction: We do not currently use any third party providers to process the contact details of our followers on social media.
For all kinds of information collected: Please make sure that any personal details you provide are accurate and up to date, and let us know about any changes. Please obtain consent before giving us anyone else’s personal information.
The nature of Brink’s work means we often work in partnership with other organisations. However, we will not share your information with any other organisation unless we have your permission first, or unless we have a legitimate interest or other lawful basis to do so (see section 5 below).
We may also use your information to carry out analysis and research to improve our publications, events and activities, customise our website and its content to your preferences, notify you of changes to our website or activities that may affect you, prevent and detect fraud and abuse, and protect other users.
However you choose to engage with or support Brink, we may retain and use your information where necessary for our legitimate business interests, including statistical analysis, and to review, develop and improve our business activities. In these circumstances, we will only keep personal information where necessary and will put in place appropriate safeguards, including, where possible, anonymising or minimising the data retained.
3. International data transfers
Some of our third-party providers (such as email, analytics, or event platforms) may process personal data outside the UK or European Economic Area (EEA), including in the United States.
The previous EU-US Privacy Shield framework referenced in earlier versions of this policy is no longer valid. We now rely on appropriate safeguards, such as:
- Standard Contractual Clauses (SCCs)
- or other lawful transfer mechanisms recognised under UK GDPR
These safeguards ensure your personal data continues to be protected to a standard equivalent to that required within the UK/EEA.
4. How long will we keep your information for?
General principle: We will only keep personal information for as long as necessary to fulfil the purpose for which it was collected. When it is no longer required, we will securely delete or anonymise it, as outlined below.
Events: If you attend one of our events, we will use your information for the purpose of administering the event and will only contact you for other purposes where you have consented.
We will retain personal information collected for events for up to 3 years for evaluation and business development purposes, including to better understand our audience and improve future events.
Consent: We retain records of consent, including any withdrawal of consent, for as long as your personal information is processed on that basis and for a period of up to 6 years afterwards, unless you request otherwise.
Job application details: If you apply for a role or submit a CV, we will retain your information for up to 2 years from the end of the recruitment process, after which it will be securely deleted.
If your application is successful, your information will be retained as part of your employee record for the duration of your employment and for up to 6 years after it ends.
Other application details (services, funding, etc.): If you submit a tender, apply for funding or support, or participate in a programme:
- Successful applications: retained for up to 6 years after the agreement ends, or up to 12 years where required (e.g. if executed as a deed)
- Unsuccessful applications: retained for up to 3 years for evaluation and to inform future opportunities
Where projects are externally funded or subject to contractual requirements, we may retain data for longer where required. You will be informed of this at the point of application.
If you do not wish to be contacted about future opportunities, you can opt out at any time using the contact details below.
Research: If you participate in research, your personal information will be retained for as long as necessary for the purposes of the research project and in line with any applicable legal, regulatory, or funding requirements.
Research data will be reviewed periodically (at least every 5 years) to assess whether continued retention is necessary. Where possible, personal data will be anonymised or pseudonymised, unless this would compromise the integrity or value of the research.
Where verbatim quotes are used, we will always seek your consent before attributing them to you.
Where personal data forms part of published research outputs (e.g. reports), it may be retained as part of those materials on a long-term or permanent basis.
Statistical analysis: Where personal data is used for statistical analysis or to improve our services, we will only retain it for as long as necessary and will apply appropriate safeguards, including anonymisation where possible.
5. Who else has access to your information?
We may share your information with:
- partners and collaborators involved in delivering our work
- service providers supporting operations
- organisations involved in events, programmes or funding
Some of these organisations may process data outside the UK/EEA. Where this happens, we ensure appropriate safeguards are in place (see Section 3).
We do not share your information unless:
- it is necessary to deliver a service
- we have your consent
- or we have a legitimate interest to do so
We may also disclose data where required by law.
6. Cookies
Our website uses cookies to improve your experience and understand how the site is used.
We use:
- Strictly necessary cookies – required for core functionality
- Performance/analytics cookies – to understand usage and improve the site
- Marketing cookies (where applicable) – for advertising or remarketing
Where required, we use a cookie consent mechanism allowing you to accept or reject non-essential cookies.
You can also control cookies via your browser settings. Please note that some features of the site may not function correctly if cookies are disabled.
7. Security
We take appropriate technical and organisational measures to protect personal data and prevent unauthorised access, loss or misuse. If you have a password for an account on Brink’s online systems due to your role as an employee, associate, contractor or otherwise, please keep this safe and do not share it with anyone else. You are responsible for all activity on your account and must contact us immediately if you are aware of any unauthorised use of your password or other security breach.
8. Contacting us, exercising your rights and complaints
You are legally entitled to know what personal information we hold about you and how that information is processed, which includes the right to:
- access your personal data
- correct inaccurate data
- request deletion
- restrict or object to processing
- withdraw consent
If you wish to exercise your rights or have any questions, please contact our Data Protection Lead:
Email: foundation@hellobrink.co
Or write to:
Brink Foundation CIC
86-90 Paul Street
London, EC2A 4NE
You also have the right to complain to the UK Information Commissioner’s Office (ICO):
- On the ICO website;
- By mail at Wycliff House, Water Lane, Wilmslow, Cheshire SK9 5AF, or
- By calling the helpline on 0303 123 1113.
9. Changes to the privacy policy
We may update this policy from time to time. Please check this page periodically to stay informed.
Brink Foundation CIC, a private limited company registered in England and Wales with company number 13505338
Registered office: 86-90 Paul Street, London, EC2A 4NE
Email: foundation@hellobrink.co
