Privacy Policy
Thank you for visiting the BDD Foundation website. This online privacy policy is designed to tell you about how we will collect and use information from our site so that you can make an informed choice about using this site. The primary purpose of the BDD Foundation is to provide support and information to people affected by Body Dysmorphic Disorder (BDD).
Please be advised that your use of this site constitutes your acceptance of the provisions of this Privacy Policy. If you do not agree to these provisions, you should immediately terminate your access to and not use the Site. The BDD Foundation reserves the right to change the provisions of this privacy policy at any time but will alert you that changes have been made by indicating on the privacy policy the date it was last updated. Your use of the site following the posting of such changes or revised policy shall constitute your acceptance of any such changes. We encourage you to review our privacy policy whenever you visit our website to make sure that you understand how your information will be used.
The BDD Foundation, is a registered charity (1153753) and operates as a CIO in the United Kingdom and controls this site from its offices, according to UK laws.
How do we collect information from you?
We obtain information about you when you use our website for example, when you contact us about products and services, to make a donation, to purchase products/services, to work in partnership with us in any capacity, to volunteer or work with us, to fundraise, or if you registered to receive one of our regular e-newsletters.
What information do we gather?
Information on the BDD Foundation is gathered in two ways: (1) passively (for example, through our site’s technology), and (2) actively (for example, if you send us an e-mail request).
When you visit our site, our software automatically collects some information from your computer. The information includes the unique Internet address assigned to your computer, your Internet service provider, your browser type and version, and your operating system.
We also collect information when you voluntarily submit it to us. For example, if you ask for more information on the services that the BDD Foundation provides, we may store and use the information you provide for marketing purposes. If you submit a technical question to us, we may store your question and we may contact you if we need clarification on the question.
Similarly, if you contact us through our site to inquire about employment opportunities with BDD Foundation, we may collect and store the information you provide for recruiting purposes. On the Recruiting site, you will be asked for information necessary for the recruiting process such as your name, contact information and technical experience. Because different jurisdictions have different privacy laws and the BDD Foundation is committed to complying with such laws, when applying for positions in some locations before you can submit your CV you will need to indicate your consent to the following uses of your CV by the BDD Foundation: (1) The BDD Foundation, its affiliates, and agents will store, access, and use the information in any jurisdiction, including jurisdictions whose privacy laws may be different and less protective than those of your home jurisdiction; and (2) The BDD Foundation, its affiliates and agents, may use this information to evaluate your eligibility for employment and to contact you for recruiting purposes. Please note that people under 18 years old are not authorized to submit recruiting information.
We use MailChimp, a third party application, to manage our membership database and newsletters. If you sign up to become a BDD Foundation member via our website form MailChimp processes the request. MailChimp will collect the email address, IP address, any personal details such as an address (if filled in) and timestamp associated with everyone who submits a form. Submission of a request to become a member and receive our newsletter means that you agree to transfer your contact information to MailChimp, store your contact information in our MailChimp account, receive emails regarding new BDD Foundation site features, news about the BDD Foundation, events, marketing offers, products, services, and other opportunities from our MailChimp account and track interactions for email marketing and ad placements purposes in accordance with our privacy policy.
MailChimp’s privacy policy https://mailchimp.com/legal/privacy/
We will collect all/some of the following information:
- Name / name of company
- Gender
- Contact information including email address
- Date of birth
- Demographic information such as postcode
- Gift aid status
- Details of fundraising activity/event
- Details of research project including contact details of researcher and (supervisor)
- Whether you wish to participate in volunteering opportunities (including media work)
- Where you heard about the BDD Foundation
- Details of training/consultancy/partnership/informal partnership opportunity and proposed benefit to the BDD Foundation
- Details of amount paid /donation given
- Details of training undertaken including professional body membership, qualifications, DBS status, referee information (and contact details)
- Contact details of self help group facilitators and details of self help groups
- For self help structured support group referral requests only: We collect information as follows: GP contact details, mental health history, suicidal ideation risk rating, and outcome data.
We do not obtain data about you from any third party without your knowledge or consent.
The above information is collected by the BDD Foundation to ensure that the services provided are accessible and for monitoring and evaluation purposes.
We collect all/some of the above information depending on the product or service that you wish to access and/or your reason for making contact with us.
How do we use the information we collect?
We may collect the information you voluntarily submit to us and use it for the purposes for which it was submitted. We may also use the information that you voluntarily submit to us in the following ways:
- To provide you with information about the BDD Foundation;
- To request feedback and to enable us to develop and improve the features and content of the site and the services available from the BDD Foundation;
- To contact you regarding your use of the site;
- Changes to the Terms of Use, Privacy Policy, or other policies; and our use of the information you submit;
- To contact you regarding new site features, news about the BDD Foundation, events, marketing offers, products, services, and other opportunities.
- If we wish to use the information for other purposes, we will notify you prior to such use.
If you object to any such use, you can e-mail us at info@bddfoundation.org and let us know of your objection, and we will not use your information for such purpose. If you wish to have any personal information you have sent to us removed from our database, please e-mail us at info@bddfoundation.org.
What are cookies and how do we use them?
A cookie is a small file of information which our server may send to your computer when you visit our site. Cookies allow our server to track how you navigate through our site, such as what pages you viewed. The cookies we may use identify you merely as a number and they are destroyed when you leave our site. (If you are uncomfortable regarding cookies use, please keep in mind you can disable cookies on your computer by changing the settings in the preferences or options menu in your browser. However, disabling cookies may impair your ability to participate in certain activities on our site).
Cookie Usage and Google Analytics
The BDD Foundation uses cookies to track the pages you visit via Google Analytics. If you would rather that Google Analytics data collection was disabled, please click here to opt out.
How do we use the information we collect passively and with cookies?
We may analyse the information we collect passively and with cookies to determine what is most effective about our site, to help us identify ways to improve it and, eventually, to determine how we can make it more effective.
The BDD Foundation will not sell, lease, or rent information we collect passively or with cookies. Nor will we sell, lease, or rent information you provide to us directly. The BDD Foundation may disclose information it has collected if required to do so by law, or in the good-faith belief that such action is reasonably necessary to (1) comply with legal process; (2) respond to any claims; or (3) protect the rights, property, or personal safety of the BDD Foundation, our customers, or the public. In addition, if the BDD Foundation or substantially all of its assets are acquired, information you have provided to us will be one of the assets that is transferred.
We use the following cookies:
| Cookie Name | Provider | Type | Description | Duration |
| _ga | bddfoundation.org | HTTP | Registers a unique ID that is used to generate statistical data on how the visitor uses the website | 2 years |
| _gat | bddfoundation.org | HTTP | Used by Google Analytics to throttle request rate | Session |
| _gid | bddfoundation.org | HTTP | Registers a unique ID that is used to generate statistical data on how the visitor uses the website. | Session |
| ads/ga-audiences | google.com | Pixel | Used by Google AdWords to re-engage visitors that are likely to convert to customers based on the visitor ‘s online behaviour across websites. | Session |
| NID | google.com | HTTP | Registers a unique ID that identifies a returning user’s device. The ID is used for targeted ads. | 6 months |
| PREF | youtube.com | HTTP | Registers a unique ID that is used by Google to keep statistics of how the visitor uses YouTube videos acr oss different websites. | 8 months |
| VISITOR_INFO1_LIVE | youtube.com | HTTP | Tries to estimate the users’ bandwidth on pages with integrated YouTube videos | 8 months |
| YSC | youtube.com | HTTP | Registers a unique ID to keep statistics of what videos from YouTube the user has seen. | Session |
Disclosure of Personal Information
We will not disclose to unaffiliated companies any information we gather from you which could be used to personally identify or contact you (”Personal Information”), except as set forth in this Privacy Policy or as disclosed to you at the time you provide such information. The BDD Foundation may disclose such Personal Information to independent contractors, service providers and consultants who are engaged by or working with the BDD Foundation. We request that any third parties who obtain access to such information comply with the terms of this Privacy Policy.
Your choice
You have a choice about whether or not you wish to receive information from us. If you do not want to receive direct marketing communications from us about the vital work that we do supporting those with BDD and our range of products and services, then you can select your choices by ticking the relevant boxes on the form on which we collect your information.
We will not contact you for marketing purposes by email, phone or text message unless you have given your prior consent. We will not contact you for marketing purposes by post if you have indicated that you do not wish to be contacted. You can change your marketing preferences at any time by contacting us.
For information on your individual rights in relation to the General Data Protection Regulation (GDPR) please see: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
Data Retention Policy
The BDD Foundation requires that different types of records be retained for a specific period of time to comply with UK legislation and good practice. The BDD Foundation requires that records be treated consistently. All records whether physical or digital are covered by this policy.
This policy is intended to ensure that the BDD Foundation meets its obligations under the Data Protection Act 1998 and keep records and documents only for as long as necessary.
Organisational Records
| TYPE OF RECORD | RETENTION PERIOD |
| Annual Accounts | Permanent |
| Audit Reports and Financial Records | 7 years |
| Board Reports, Board Minutes | 7 years |
| Contracts | 7 years |
| Employers’ Liability Insurance Certificate | 40 years |
| Health & Safety Records | 7 years |
| Insurance Data | 10 years |
| Invoice – Capital Item | 10 years |
| Policy Statements | Permanent |
Personal Data
| TYPE OF RECORD | RETENTION PERIOD |
| Staff Emails | Up to 7 years |
| Tax including Gift Aid | 7 years |
| Self Help Support Group Data | Up to 7 years |
| Volunteer Records & Data | 1 year post cessation of volunteer |
| Employee/Personal Records | 7 years after employment |
| Incidents, Complaints Data | 7 years |
| Membership forms | 2 years |
| Membership info | Up to 5 years |
| Recruitment data | 6 months post application |
| Fundraisers and donors | Up to 7 years |
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
Non-sensitive details (your email address etc.) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our systems.
The legal basis for collecting your data
The BDD Foundation adheres to the Information Commissioner’s Office (ICO) guidance in respect of the lawfulness of processing data as per below:
- Lawfulness of processing conditions
- Consent of the data subject
- Processing is necessary for the performance of a contract with the data subject or to take steps to enter into a contract
- Processing is necessary for compliance with a legal obligation
- Processing is necessary to protect the vital interests of a data subject or another person
- Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
- Necessary for the purposes of legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject.
Disclosure of Aggregate Information
We may provide information we collect that does not allow you to be personally identified or contacted (”Aggregate Information”) to third parties, including without limitation information about your access and use of the site. For example, we might provide such Aggregate Information to a third party to inform the party of the number of users of the site and the activities they conduct while on the site.
Links to other websites
Our website may contain links to enable you to visit other websites of interest easily. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy notice applicable to the website in question.
16 or under
We are concerned to protect the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian’s permission beforehand whenever you provide us with personal information.
Questions?
If you have any questions now or during your visit, please contact us.