Privacy Policy

Effective Date: 1st August 2026

Bridge the Gap Hub CIC ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you engage with our services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Bridge the Gap Hub CIC is a Community Interest Company registered in the United Kingdom. We provide employment support services, including workshops, mentoring, employer engagement and digital access support.

We act as the data controller for the personal data we collect.

2. Information We Collect

We may collect and process the following types of personal data:

2.1 Personal Information

  • Full name

  • Contact details (email address, phone number, address)

  • Date of birth

2.2 Service-Related Information

  • Employment status and work history

  • Education and skills information

  • CVs and job application data

  • Participation records (workshops, mentoring sessions)

2.3 Sensitive Data (Special Category Data)

Where necessary and with your consent, we may collect:

  • Information about health or disabilities

  • Ethnicity or other demographic data (for equality monitoring purposes)

2.4 Technical Data

  • IP address

  • Website usage data (if applicable)

3. How We Use Your Information

We use your personal data to:

  • Deliver our services, including workshops, mentoring, and support

  • Match participants with employment opportunities

  • Communicate with you about services and opportunities

  • Monitor and evaluate our programmes

  • Meet legal and regulatory obligations

4. Legal Basis for Processing

We rely on the following lawful bases under UK GDPR:

  • Consent

  • Contract (to deliver agreed services)

  • Legal obligation

  • Legitimate interests (such as improving our services)

5. Sharing Your Information

We may share your data with:

  • Employers (with your consent) for job opportunities

  • Partner organisations and service providers

  • Funders and commissioners (in anonymised or aggregated form)

  • Regulatory authorities where required by law

We will never sell your personal data.

5.1 Data Processing by Partners and Employers

Where we share data with partners or employers:

  • We ensure appropriate data sharing agreements or data processing agreements are in place

  • Partners must process personal data only for agreed purposes and in compliance with UK GDPR

  • Partners are required to implement appropriate security measures to protect data

  • We remain responsible for ensuring that data is shared lawfully and securely

6. Data Storage and Retention

  • Your data will be stored securely using appropriate technical and organisational measures

  • We will retain your data only for as long as necessary to fulfil the purposes outlined in this policy

6.1 Data Retention Schedule

We retain personal data in line with the following timeframes:

  • Participant records (including mentoring and workshop data): up to 6 years after last engagement

  • Employment support records (CVs, job applications): up to 3 years

  • Safeguarding records: up to 6 years (or longer where legally required)

  • Equality and monitoring data (anonymised where possible): up to 6 years

  • Financial and transaction records: up to 6 years in line with HMRC requirements

  • Contact enquiries: up to 12 months

Retention periods may be extended where required by funders, contractual obligations, or legal requirements.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure of your data (where applicable)

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

To exercise your rights, please contact us using the details below.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data including secure storage system, restricted access to authorised personnel only, encryption and password protection where appropriate.

9. Cookies (if applicable)

Our website may use cookies to improve user experience. You can control cookie settings through your browser.

10. Third-Party Links

Our website or services may contain links to third-party websites. We are not responsible for their privacy practices.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Bridge the Gap Hub CIC

Email: projects@bridgethegaphub.org.uk

13. ICO Registration and Data Protection Compliance

Bridge the Gap Hub CIC is registered with the Information Commissioner’s Office (ICO) as a data controller ZB795059

We comply with all applicable data protection laws and principles, ensuring that personal data is:

  • Processed lawfully, fairly, and transparently

  • Collected for specified, explicit, and legitimate purposes

  • Adequate, relevant, and limited to what is necessary

  • Accurate and kept up to date

  • Retained only for as long as necessary

  • Processed securely

14. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://www.ico.org.uk

15. Acknowledgement

By engaging with Bridge the Gap Hub CIC services, you acknowledge that you have read