Privacy Policy

1. Who we are

Data controller: Aoife's Bubbles Charity
Charity registration number: 1191761
Email: info@aoifesbubbles.co.uk

For any questions about this policy or how we handle personal data, please contact us using the email above.

2. What personal data we collect

Depending on how you interact with us, we may collect:

• Referral / Bubble Hub enrolment data — names, ages, contact details, and information you provide on The Bubble Hub referral form about your family’s circumstances and support needs.
• Contact data — email address and message content when you email us.
• Donation data — if you donate via JustGiving, payment and donor details are processed by JustGiving under their own privacy policy; we may receive limited donor information from them.
• Technical data — limited information such as browser type or device needed to run the website securely (see our Cookies Policy).

We do not intentionally collect more children’s data than is needed to provide support. Where we process children’s data, we do so carefully and only for safeguarding, care and service delivery.

3. Why we use your data (lawful bases)

We process personal data only where we have a lawful basis under UK GDPR, including:

• Consent — for example, when you submit a referral form or accept optional cookies.
• Legitimate interests — to run our website securely, respond to enquiries, and operate our charitable services in a way that does not override your rights.
• Legal obligation — where we must keep records for charity, safeguarding or regulatory requirements.
• Vital interests — in rare safeguarding situations where someone’s safety is at risk.

Special category data (for example health-related information on a referral form) is only processed where necessary to provide support, with appropriate safeguards, and typically on the basis of explicit consent or substantial public interest in supporting vulnerable individuals.

4. How we use your data

• To process Bubble Hub and other support referrals
• To communicate with you about sessions, Zoom access and support
• To improve our services and keep our website working
• To meet safeguarding, charity governance and legal duties

We do not sell your personal data.

5. Who we share data with

We only share personal data when necessary, for example with:

• Music therapy / session providers (such as Suffolk Music Therapy Services) to deliver Bubble Hub sessions safely
• Zoom and similar tools used to host online sessions (after you are enrolled)
• JustGiving if you choose to donate
• Professional advisers or regulators where required by law or safeguarding practice

Any third parties we use are expected to handle data securely and only for the agreed purpose.

6. How long we keep data

We keep personal data only for as long as needed for the purpose it was collected, including any legal, accounting or safeguarding retention requirements. Referral records are reviewed periodically and deleted or anonymised when no longer required.

7. International transfers

Some tools we use (for example Zoom or donation platforms) may process data outside the UK. Where that happens, we rely on appropriate safeguards required by UK data protection law, such as UK adequacy regulations or standard contractual clauses.

8. Your rights

Under UK GDPR you have the right to:

• Access your personal data
• Correct inaccurate data
• Request erasure (in certain circumstances)
• Restrict or object to certain processing
• Data portability (where applicable)
• Withdraw consent at any time (where processing is based on consent)

To exercise these rights, email info@aoifesbubbles.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO).

9. Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No method of transmission over the internet is completely secure; please take care when sending sensitive information by email.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. Please check back periodically.