Privacy Policy
Last updated: 22 October 2025
Who we are: BRIDGE for Ukrainians (UK Registered Charity No. 1212450)
BRIDGE for Ukrainians (“we”, “us”, “our”) is a volunteer-driven charitable organisation supporting the Ukrainian community in London. We respect your privacy and are committed to protecting your personal data. This notice explains what we collect, why we collect it, how we keep it safe, and the choices you have.
1) What this policy covers
This policy applies to personal data processed via our website bridgeforukrainians.co.uk, including contact forms. It does not cover third-party websites we link to.
2) The data we collect
We collect only what we need to run our community services and respond to you. Contact details – your name, email, phone, and the message you send us via Contact Us. Technical data – basic logs generated by our web host to keep the site secure (e.g., IP address, time of access, pages viewed). We do not use analytics or tracking tools. Donations – if you contact us about donating directly, we may record your name and contact details to arrange it. We do not process card payments on this website.
3) How we use your data – and our legal bases
We use your data to:
-
Respond to enquiries you send through the site
-
Legitimate interests (to run our charity and reply to you).
-
Share event information when you ask for it
-
Keep the website secure and functioning (server logs, troubleshooting)
-
Meet legal obligations (for example, safeguarding or regulatory requirements)
We do not conduct automated decision-making or profiling.
4) Cookies and tracking
We aim to use only essential, security or preference cookies if required for the site to work. We do not use analytics, advertising or social media tracking cookies.
5) Sharing your data
We do not sell your data. We only share personal data when necessary to: run our website and keep it secure (for example, with our UK-based web host or IT support under confidentiality terms), comply with the law or protect people’s vital interests, or with your explicit consent.
We do not currently use third-party marketing, analytics, ads or form services. If we introduce any new service, we will update this policy before enabling it.
6) International transfers
We aim to keep your data in the UK. If exceptionally a service stores data outside the UK, we will ensure appropriate safeguards are in place and update this policy.
7) How long we keep data
We keep personal data only as long as necessary for the purpose collected, then delete or anonymise it. General enquiries – up to 12 months after we close the enquiry. Safeguarding/serious incident records – for the period required by law or guidance. Server logs – typically 30–90 days for security and diagnostics.
8) How we keep data secure
We use appropriate technical and organisational measures – access controls, least-privilege practices, secure hosting and encryption in transit – to protect your data against loss, misuse or unauthorised access.
9) Your rights
Under UK GDPR you have the right to:
-
access your data,
-
correct inaccurate data,
-
erase data in certain cases,
-
restrict or object to processing,
-
data portability (where applicable),
-
and complain to the Information Commissioner’s Office (ICO).
ICO guidance on your rights is available on their website.
10) How to exercise your rights or contact us
To make a request or ask a question, contact us.
11) Complaints
We hope to resolve any concern directly. If you remain unhappy, you can contact the ICO:Information Commissioner’s Office
12) Children’s data
Our website and services are aimed at adults and families. If you believe a child has provided personal data without appropriate consent, please contact us – we will act promptly.
13) Changes to this notice
We may update this policy from time to time. The latest version will always be on this page with an updated “Last updated” date. If we make significant changes, we will highlight them on the site.