Privacy Policy

YouthFinance Birmingham ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Information We Collect

Personal Information

We collect information that you provide directly to us, including:

• Name and contact information (email address, postal address)
• Child's age and educational level (when relevant to programme selection)
• Payment information (processed securely through third-party providers)
• Communication preferences
• Any information you provide in enquiry forms or correspondence

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including:

• Browser type and version
• Operating system
• IP address
• Pages visited and time spent on pages
• Referring website addresses

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your programme enrolments and payments
• Respond to your enquiries and provide customer support
• Send administrative information, updates, and programme materials
• Communicate about new programmes or services (with your consent)
• Analyze website usage to improve user experience
• Comply with legal obligations

Legal Basis for Processing (UK GDPR)

We process your personal data on the following legal bases:

• Contract: To fulfill our contractual obligations when you enroll in our programmes
• Legitimate Interest: To operate our business, improve our services, and communicate with you about relevant programmes
• Consent: For marketing communications and certain cookies (where required)
• Legal Obligation: To comply with applicable laws and regulations

Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third parties who perform services on our behalf (payment processing, email delivery, website hosting)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with any merger, sale of company assets, or acquisition

All third-party service providers are contractually obligated to keep your information confidential and use it only for the purposes we specify.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication procedures
• Staff training on data protection

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we securely delete or anonymize it.

Your Rights

Under UK data protection law, you have the following rights:

• Access: Request a copy of the personal information we hold about you
• Rectification: Request correction of inaccurate or incomplete information
• Erasure: Request deletion of your personal information in certain circumstances
• Restriction: Request limitation on how we use your information
• Objection: Object to our processing of your information
• Portability: Request transfer of your information to another service provider
• Withdraw Consent: Withdraw consent for processing based on consent (without affecting prior processing)

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

Children's Privacy

Our services are designed for children and teenagers, but we collect personal information from parents or guardians, not directly from children under 13. We do not knowingly collect personal information from children without parental consent. If you believe we have inadvertently collected information from a child, please contact us immediately.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website. For detailed information about the cookies we use and your choices, please see our Cookies Policy.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.

International Data Transfers

Your information may be transferred to and processed in countries other than the United Kingdom. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK authorities.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Address: 47 Colmore Row, Birmingham, B3 2BS, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues.