Bread + Roses is a trading arm of the Bradford Co-operative Association Ltd, a co-operative society registered in the UK.
It explains the procedures we follow and the standards you can expect from us. It also explains your rights and how you can get access to the information we hold about you.
We will only collect, keep, process and share personal data for legitimate business purposes as detailed below or if we are legally required to do so.
Your rights are protected by a number of data protection laws including the Data Protection Act 2003 which came into force in October 2007, General Data Protection Regulation (GDPR) which came into force on 25 May 2018 and The Privacy and Electronic Communications (EC Directive) Regulations 2003.
This code of practice does not replace the law; it aims to show how we will comply with the law when we use the information that we collect.
We will be as clear and transparent as possible with you on the personal data we collect and how it will be processed.
For as long as we maintain records of your personal data, we will keep it up-to-date and protect it with the appropriate safety measures. To learn more about how long we will retain your personal data, please see the ‘Data Retention’ section below.
You can request a copy, transfer or deletion of the personal data we keep about you at any time by contacting: firstname.lastname@example.org
What information may we collect about you and why are we collecting it?
We collect, keep and process some or all of the following personal data for legitimate business purposes or if we are legally required to do so:
- Full name
- Company/organisation/trading name
- Email addresses
- Landline and mobile numbers
- Mailing and billing addresses
- Social media handles
- PA contact details (name, email, landline)
- Short biography
- Payment methods (encrypted)
- Forms and survey responses
- IP addresses and website visit behaviour (cookies)
- Purchase history
- User login details
Our lawful bases for processing personal information
All personal data we collect, process and store is:
- For the the purpose of providing you with products such as events, merchandise and content (Contract)
- Sharing and promoting our news, as well as providing subscribers with curated content and various opt-in online products and surveys (Consent)
- Marketing purposes (Legitimate Interest – Marketing)
- Surveying our online presence and adapting it to insure it suits our audience interests (Consent)
- Fundraising (Legitimate Interest, Consent and Contract)
We collect information about you directly when you:
- Buy tickets or register for our events
- Participate in one of our events, workshops or classes
- Register to receive our newsletters and content
- Complete surveys and forms
- Provide feedback or request details about our services or offers
- Purchase something using our online shop
- Donate to Bread + Roses
- Take part in competitions
- Become a user or volunteer of Bread + Roses
- Apply for a position with Bread + Roses, paid or voluntary
- Join as a member of the Bradford Co-operative Association
- Contact us on one of our online platforms such as (but not exclusively) Twitter, Facebook, Instagram
- Contact us directly by telephone, electronically, post or in person with feedback about your experience with Bread + Roses
- When you give your consent for filming and/or photography at one of our participatory workshops or events
We collect information about you indirectly when you:
- Purchase tickets through an agent or third party for one of our events
- Purchase something on our website
- Open and/or follow links and interact with emails and marketing you receive
- Interact with us or mention us on social media sites
- Attend a public event when there is a photographer or videographer present
- Website usage information is collected using cookies
How will we use the information about you?
We collect, process and manage information about you to keep you updated about Bread + Roses newsletters and, if you agree, to email you about other festivals, ticketed and free events, fundraising, opportunities to get involved, content and products we think may be of interest to you.
We use your information collected from the website to personalise your repeat visits to our website.
Bread + Roses will not share your information for marketing purposes with organisations outside Bread + Roses.
If you have consented to receive emails from us, you may opt out at any time. You have a right at any time to stop us from contacting you. If you no longer wish to be contacted, please click here.
If you opt in to receive our general newsletters you will receive information regarding Bread + Roses and events, content and specially curated offers. We will collect information on open rates and click throughs to assess and improve our newsletters and any other information you provide whilst subscribing at this link.
You can easily unsubscribe from our newsletters by clicking on the link displayed at the bottom of each newsletter.
We may contact you with information regarding our events, products and offers, via email, post or phone, and in compliance with the direct marketing regulations. You have a right at any time to stop us from contacting you for marketing purposes, by writing to email@example.com
Social media profiles (Twitter, Facebook and Instagram)
We collect publicly available information from social media profiles (Twitter, Facebook and Instagram), when users mention our social media profiles (Twitter, Facebook and Instagram) handles, comment on or retweet/share our posts. We collect posts, handles, names and follower count.
We process this information, under the lawful basis of Legitimate Interest – tracking engagement. We will use this information to manage our social media profiles (Twitter, Facebook and Instagram), assess impact and recognise potential collaborators and prospects.
We collect information from emails sent to our users, volunteers, staff and members. We collect names and contact details of contacts that can contribute to our work.
Reporting and analysis
We use the data you give us directly and indirectly to report on sales, audiences and participation with Bread + Roses. This reporting is created from aggregated data and is not attributable to individuals.
Where your data is stored
We use third party processors to collect, export, process and store personal data on our behalf. All our processors are compliant with the General Data Protection Regulations and you can view their websites for further detail:
Keeping your data secure
Sending information over the internet is generally not completely secure, and we can’t guarantee the security of your data while it’s in transit. Any data you send is at your own risk. We have procedures and security features in place to keep your data secure once we receive it.
We will retain some personal data categories in order to comply with legal requirements. Otherwise, we will remove information that is not required for our processes. Images and film taken of public and participants may be used for up to ten years for marketing and publicity purposes by Bread + Roses. After this point it will either be deleted, or if deemed to be of historical and public interest, added to our archive.
You can find out what information we hold about you, and ask us not to use any of the information we collect.
If you’ve signed up for email alerts, you can unsubscribe or change your settings at any time by selecting the ‘unsubscribe’ link that appears in every email.
If you want to know more about the Data Protection Act 2003 which came into force in October 2007, General Data Protection Regulation (GDPR) which came into force on 25 May 2018 and The Privacy and Electronic Communications (EC Directive) Regulations 2003 please get in touch with The Information Commissioner’s Office.
If you have any complaints about our processing, please contact us directly. You can also lodge a complaint with The Information Commissioner’s Office.
Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. For further information visit www.aboutcookies.org or www.allaboutcookies.org. You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However in a few cases some of our website features may not function as a result.
We collect information about browsing behaviour on our website so we can update it and ensure it is relevant for our audience. We anonymise and mask IP addresses and never store your full IP address.
How to contact us
By email: firstname.lastname@example.org