Privacy Policy

Welcome to Brightpath.org. We understand the trust you place in us when sharing your personal data. This Privacy Policy explains how bemix (Charity No. 1205783. Incorporated in the United Kingdom as a Community Interest Company on 21 October 2002 and as a Charitable Incorporated Organisation on 17 November 2023), operating as “Brightpath” to deliver the Oliver McGowan Mandatory Training on Learning Disability and Autism™, processes and protects your personal information.

 

2. Who We Are

Data Controller: bemix

Registered Address: Office 44 Canterbury Innovation Centre, University Road, Canterbury, CT2 7FG

Data Protection Contact: dataprotection@bemix.org

 

3. Information We Collect

We collect and process the following categories of personal data:

 

Essential Information

• Name and job title
• Work contact details (email address, phone number)
• NHS/Social Care organisation details
• Training participation records

 

Optional Information

• Demographic information such as postcode
• Professional interests and preferences
• Survey responses and feedback

 

We collect this information through:

• Direct submission via our website
• Course registration forms
• Communications with our team
• Surveys and feedback forms

 

4. Legal Basis for Processing

We process your personal data under the following legal bases:

 

• Contractual Necessity: To deliver the training you’ve registered for
• Legitimate Interests: To improve our training services and maintain records
• Consent: For marketing communications and optional surveys
• Legal Obligation: To comply with NHS and professional training requirements

 

5. How We Use Your Information

We use your information to:

 

• Deliver and administer your training
• Maintain training records and certifications
• Send essential communications about your booked courses
• Improve our training services
• Provide support and assistance

 

With your explicit consent, we may also:

 

• Send you updates about future training opportunities
• Share project developments and impact stories
• Invite you to participate in research to improve our services

 

6. Data Protection

We implement appropriate technical and organisational measures to protect your personal data, including:

 

• Secure data storage systems
• Regular security reviews and updates
• Staff training on data protection
• Access controls and authentication measures
• Encryption of sensitive data

 

7. Your Rights

Under GDPR, you have the following rights:

 

• Access your personal data
• Correct inaccurate data
• Request the erasure of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner’s Office (ICO)

 

To exercise these rights, contact us at dataprotection@bemix.org or write to our registered address.

 

 

8. Data Retention

We retain your personal data for:

 

• Training records: 7 years from completion
• Marketing preferences: Until consent is withdrawn
• Website analytics: 26 months
• Financial records: 7 years (legal requirement)

 

9. Cookies and Website Technology

Our website uses cookies to improve your experience. These include:

 

Essential Cookies

• Purpose: Website functionality
• Duration: Session only
• Legal basis: Legitimate interest

 

Analytics Cookies (require consent)

• Purpose: Understanding website usage
• Duration: 26 months
• Provider: Google Analytics

 

You can manage cookie preferences through your browser settings.

 

10. Third Party Sharing

We share data with:

 

• Training delivery partners (for course administration)
• Website hosting provider
• Analytics services

 

We ensure appropriate safeguards are in place and never sell your data to third parties.

 

11. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Significant changes will be notified via email or website notice.

 

12. Complaints

If you’re unhappy with how we handle your data:

1. Contact us directly: dataprotection@bemix.org
2. Contact the ICO: www.ico.org.uk

 

13. Contact Us

For privacy-related queries: 

Email: dataprotection@bemix.org

Post: bemix, Office 44 Canterbury Innovation Centre, University Road, Canterbury, CT2 7FG

Phone: 01227 374285 

 

Note: This privacy policy relates to website data processing only and is separate from the Arlo platform privacy policy governing course participant data.