Privacy Policy

Boys & Girls Clubs Northern Ireland (BGCNI)
Effective Date: 23/03/26

Who we are

Boys & Girls Clubs Northern Ireland supports young people and local clubs across Northern Ireland through youth work, programmes, training, and events.

As part of this work, we collect and use personal information. We are responsible for making sure this information is handled properly and in line with the law, including the UK GDPR and the Data Protection Act 2018.

What information we collect

We only collect information that we genuinely need to run our services safely and effectively.

This may include:

  • Names and contact details

  • Dates of birth (to make sure activities are age-appropriate)

  • Emergency contact information

  • Attendance and participation records

In some cases, we may also collect more sensitive information, such as:

  • Medical details (e.g. allergies or conditions)

  • Additional support needs

  • Safeguarding or welfare information

We may also take photos or videos during activities, and collect basic information through our website, such as how people use it.

Why we collect it

We use this information to:

  • Deliver programmes and activities

  • Keep young people safe and supported

  • Stay in touch with members, parents/guardians, and partners

  • Understand what’s working and improve what we do

  • Meet our legal and safeguarding responsibilities

We won’t use your information for anything unexpected or unrelated to these purposes.

Our legal basis for using your data

Data protection law requires us to have a valid reason for using personal information. Depending on the situation, we rely on:

  • Your consent (for example, for photos or marketing)

  • Our responsibility to deliver services you’ve signed up for

  • Legal obligations, particularly around safeguarding

  • Legitimate interests (such as improving our services)

  • In some cases, protecting someone’s safety or wellbeing

Sharing information

We do not sell personal data.

We may share information where it is necessary, for example:

  • With safeguarding authorities if there are concerns about a child or young person

  • With partner organisations involved in delivering programmes

  • With funders (usually anonymised data)

  • With trusted service providers (such as secure IT systems)

We only share what is needed, and we do so carefully and securely.

How we store and protect data

We take appropriate steps to keep information safe, including:

  • Secure systems and password protection

  • Limiting access to those who need it

  • Training staff and volunteers on data protection

We don’t keep personal data for longer than necessary. Some information, particularly safeguarding records, may need to be kept for longer in line with legal requirements.

Your rights

You have rights over your personal information. These include the right to:

  • Ask for a copy of the data we hold about you

  • Ask us to correct inaccurate information

  • Request that we delete your data in certain situations

  • Object to how your data is being used

  • Withdraw consent at any time (where consent is the basis)

If you’d like to exercise any of these rights, just get in touch with us.

Children and young people

Because we work with children and young people, we take extra care with their information.

We:

  • Seek parent/guardian consent where appropriate

  • Use clear, simple language when explaining how data is used

  • Prioritise safety and safeguarding at all times

Safeguarding

If we are concerned about the safety or wellbeing of a child or young person, we may need to share information without consent.

This is always done in line with our safeguarding responsibilities and legal obligations.

Website and cookies

Our website may use cookies to help improve how it works and understand how it is used. You can manage cookie settings through your browser.

Concerns or complaints

If you have any concerns about how your information is used, please contact us and we’ll do our best to resolve it.

You can also contact the Information Commissioner’s Office (ICO), which oversees data protection in the UK.

Updates to this policy

We may update this policy from time to time. The most recent version will always be available through our website or on request.