The Bromley Trust (BT) is committed to protecting your privacy. This privacy notice explains what personal information we collect, why we collect it, how we use it, and your rights in relation to it. We keep our privacy notice under regular review to ensure it is up-to-date and compliant with the latest legal requirements. You should check this page regularly to ensure that you are aware of any changes. This notice was last updated on 14 October 2025.
If you have any questions about this notice, you can contact us at enquiries@thebromleytrust.org.uk.
Who we are
We collect personal information from you for the purposes of:
- Answering your queries ahead of applying.
- Assessing your grant application and carrying out our due diligence.
- Administering, supporting, and monitoring a grant once it has been awarded.
- Communicating with you regarding your application or grant.
- Maintaining accurate records of our grant-making activities.
Why we collect personal information
We collect personal information from you for the purposes of assessing a grant application and to enable us to pay, support and monitor a grant once it has been made. We ask for your contact details so that we can be sure the application is genuine and to provide us with a point of contact. We are unable to process your application without this.
You are responsible for ensuring that you have the necessary agreement and permission of any individuals identified in your application to pass their information to the Bromley Trust. This includes permission to use any photographs included in the application or grant reports to us.
In making an enquiry or application to the Bromley Trust and/or accepting any grant made you give us permission to process your personal information. You can withdraw your consent at any time by writing to us. Please note, we will not be able to process an application or continue to fund your organisation without the necessary personal information required to do so. In addition to obtaining consent there are other lawful reasons for processing your data as described below.
The Lawful Basis for Processing Your Information
Under the UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following lawful bases:
- Legitimate Interests: We process your personal information for our legitimate interests (or those of a third party) in relation to our grant-making and other charitable activities. Our legitimate interests include assessing and processing applications, managing our relationship with grantees, and undertaking research to improve our charitable impact.
- Contract: The processing is necessary to perform a contract with you or to take steps at your request before entering into a contract (e.g. when we enter into a grant agreement with you or if we commission you to provide a service).
- Legal Obligation: The processing is necessary for us to comply with a legal or regulatory obligation that applies to us (e.g. reporting to the Charity Commission or providing information to law enforcement agencies upon a valid legal request).
- Consent: Where we have your specific consent to use your personal information for a specific purpose (e.g. sending you direct marketing at a future date), we will rely on this basis. You have the right to withdraw your consent at any time.
We will not sell personal data to third parties and do not currently engage in direct marketing. However, we may in the future send electronic communications to individuals who have previously engaged with the Trust. In accordance with the ‘soft opt-in’ rule for charities, and we would always offer a clear and simple way to opt out.
How We Process Your Information
We will use the information you provide only for the purposes stated in this privacy notice. We will not keep your personal information for longer than necessary and will destroy it securely according to our data retention policy.
All the personal data we collect is processed by our staff and Trustees in the UK. However, for the purposes of IT hosting and maintenance, we use secure cloud-based data storage. This means that the information you provide may be processed and stored in international organisations or countries outside the UK. We ensure that any such transfer is made in compliance with the UK GDPR 2018 and the Data (Use and Access) Act 2025, by ensuring the destination country has an adequacy decision from the UK government or through the use of appropriate safeguards, such as the UK’s International Data Transfer Agreement, to ensure the data is protected to a standard that is not materially lower than that provided under the UK GDPR.
Who will see your data
Your information may be disclosed to the following categories of recipients for the purposes set out in this notice:
- Our employees and Trustees.
- Third-party consultants, contractors, or other service providers who may need to access your personal information when providing services to us (such as IT support, accounting services, or external advisers).
- Government bodies, regulators (including the Charity Commission), and law enforcement agencies where legally required.
- Auditors or other professionals assisting with or advising on our business needs.
- Other grant-making organisations with a similar charitable purpose to enable learning.
We publish summary information on organisations that have received grants from us in our annual accounts, including the name of the organisation and the amount and purpose of the grant awarded. We also publish details of our grants as open-source data on our website and via 360Giving, enabling our data to be freely accessible and comparable with data from other funders.
Your Rights
Under the UK GDPR, you have a number of rights in relation to your personal information. These include the right to:
- Access: Request a copy of the personal information we hold about you.
- Rectification: Ask us to correct personal information that is wrong or incomplete.
- Erasure (Right to be Forgotten): Ask us to stop using or delete your personal information in certain circumstances.
- Restriction: Ask us to restrict the processing of your personal information so that the data will only be used for limited purposes.
- Data Portability: Request that we transfer your personal data to another organisation in a structured, commonly used, and machine-readable format.
- Object: Object to our processing of your personal information, particularly where it is based on legitimate interests.
- Lodge a Complaint: You have the right to complain to us directly at enquiries@thebromleytrust.org.uk and if you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) and further information can currently be found at https://ico.org.uk/make-a-complaint/.
More details on your rights and the specific context in which they apply can currently be found at https://ico.org.uk/global/privacy-notice/your-data-protection-rights/
Any requests or queries should be made in writing to our contact details below. If you wish to raise a formal complaint on how we have handled your personal data, we will follow our formal complaint handling procedure, as required by law, and will investigate and seek to resolve the matter in line with our legal duty to do so. Including to acknowledge a complaint within 30 days and the obligation to take appropriate steps to respond without undue delay.
Cookie Policy
Our website uses cookies to collect anonymous information on how visitors use our site, with the aim of improving it for future users. We provide a cookie notice on arrival at our website which gives you the option to opt-in or opt-out of this information collection. We may also use some cookies for essential functionality, such as security and accessibility features, that do not require your explicit consent as they are necessary to provide the service you have requested.
The cookies we use, such as those from Google Analytics, generate statistical and other information about website use. This data is entirely anonymous and will not identify you as an individual. Google, not The Bromley Trust, stores this activity information, and you can view their privacy policy on their website.
Other Information
- Links to other websites: Our website contains links to other websites. We do not have any control over the content or security of external sites and are not responsible for the protection and privacy of any information you provide whilst visiting them.
- Disclaimer: In no event will BT be liable for any damages arising out of or related to this website. Content is provided free of charge for information purposes only.
- Following the Data (Use & Access) Act 2025 the Information Commissioner’s Office will be changing its name, website, and contact information and we will endeavour to update this policy as soon as possible after this change occurs.
How to contact us
You can email us at enquiries@thebromleytrust.org.uk or write to: The Director, The Bromley Trust, Studio 5, Unit G03, The Leather Market, 11/13 Weston Street, London, SE1 3ER.