Privacy Policy - Black Blood Matters

Last updated: April 2026

Black Blood Matters (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and protect your information when you engage with us through our website, events, and campaigns.

1. Who We Are

Black Blood Matters is a UK-based community initiative focused on increasing blood donation awareness and participation.

Data Controller: Black Blood Matters
Address: 124 City Road, London, EC1V 2NX
Email: privacy@blackbloodmatters.co.uk

We are responsible for how your personal data is collected and used in line with the UK General Data Protection Regulation (UK GDPR) and guidance from the Information Commissioner's Office.

2. What Data We Collect

We may collect the following types of personal data:

a) Information you provide directly

  • Full name

  • Email address

  • Phone number

  • Date of birth

  • Donor ID (where relevant)

b) Sensitive (special category) data

In some cases, we may collect:

  • Health-related information (e.g. eligibility screening questions such as anaemia)

  • Information about conditions such as sickle cell or sickle cell trait

  • Ethnicity (where relevant to our work)

We only collect this data where necessary and with your explicit consent.

c) Automatically collected data

When you use our website, we may collect:

  • IP address

  • Device and browser information

  • Usage data via analytics tools

d) Social media and communications

If you contact us via platforms such as Instagram, we may collect:

  • Your name, username, and any information you share

  • Relevant details to support your enquiry or event participation

3. How We Use Your Data

We use your data to:

  • Register you for events (e.g. blood drives)

  • Communicate important event information

  • Send newsletters and updates (where you have opted in)

  • Coordinate volunteers and campaign participants

  • Deliver campaigns and community initiatives

  • Report anonymised impact data to funders (e.g. NHS Blood and Transplant)

We will only use your data where we have a lawful basis to do so.

4. Legal Basis for Processing

We rely on the following legal bases:

  • Consent – for marketing communications and sensitive data

  • Legitimate interests – to run events and operate our initiative effectively

  • Legal/contractual obligations – where required for reporting or compliance

Where we process sensitive data (e.g. health or ethnicity), we do so based on your explicit consent.

5. How We Share Your Data

We may share your data where necessary with:

  • NHS Blood and Transplant for blood donation-related activities

  • Trusted event partners supporting delivery of our initiatives

  • Service providers (e.g. website platforms, form tools, analytics providers)

We do not share your personal data with sponsors for marketing purposes.

All third parties are required to handle your data securely and in line with data protection laws.

6. International Data Transfers

Some of the tools we use (such as website platforms, analytics providers, and social media services) may process data outside the UK.

Where this happens, we ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your data in accordance with UK GDPR.

7. Data Retention

We only keep your data for as long as necessary:

  • Event registration data: up to 5 years for reporting, evaluation, and operational purposes

  • Sensitive health data: up to 3 months after the event, unless required longer

  • Email subscribers: until you unsubscribe or after 24 months of inactivity

  • Analytics data: up to 26 months

  • General enquiries: up to 6 months

We regularly review and securely delete data that is no longer needed.

8. Data Security

We take appropriate measures to protect your data, including:

  • Secure platforms and systems

  • Password protection and two-factor authentication

  • Restricted access (limited to authorised individuals only)

9. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Object to or restrict processing

  • Withdraw consent at any time (where applicable)

To exercise your rights, contact: privacy@blackbloodmatters.co.uk

You also have the right to lodge a complaint with the Information Commissioner's Office.

10. Cookies

Our website may use cookies and similar technologies to improve your experience and understand how the site is used.

You will be able to manage your cookie preferences through a cookie banner when visiting our site.

11. Children’s Data

Our services may be accessed by individuals under 18, particularly in educational or community settings.

We do not knowingly collect personal data from children under 13 without appropriate consent. Where required, we will seek parental or guardian consent.

12. Photography, Videography & Campaign Content

At events and campaigns, we may capture photos, videos, or testimonials for use in:

  • Social media

  • Marketing materials

  • Campaign storytelling

We will always seek appropriate consent before capturing or using identifiable content. You have the right to withdraw your consent at any time.

13. Updates to This Policy

We may update this policy from time to time. The latest version will always be available on our website.