Team photo

We are BCHC

Privacy Notices

BCHC Charity Trustee Privacy Notice

How BCHC Charity collects information about trustees and what is done with it.

Logo: Birmingham Community Healthcare Charity

Charity Trustee Privacy Notice

This Privacy Notice explains how Birmingham Community Healthcare NHS Foundation Trust Charity collects, stores, uses and protects personal information that you provide to us and outlines your associated data protection rights.

 

Birmingham Community Healthcare NHS Foundation Trust (BCHC) Charity is the Data Controller for personal information processed, unless stated otherwise.

Who we are

BCHC Charity is the official charitable arm of Birmingham Community Healthcare NHS Foundation Trust and is registered with the Charity Commission under Charity Number 1069427.

 

The Charity exists to support and enhance patient care, staff wellbeing, and service improvement through fundraising, donations, grants, and charitable activities carried out on behalf of the Trust.

Personal data we collect about you and how it is used

As a trustee or board member acting on behalf of the Corporate Trustee, we may collect and process the following information about you:

  • Full name.
  • Date of birth.
  • Contact details (address, email, telephone number).
  • Trustee role, appointment details, and declarations.
  • Identity verification information where required.
  • Records relating to governance, compliance, and eligibility checks.
  • Copies of forms or statements you provide to fulfil legal or regulatory requirements.

 

We use your information for administrative, legal, and governance purposes, including:

  • Complying with banking requirements such as Know Your Customer (KYC) and Anti Money Laundering (AML) checks.
  • Meeting Charity Commission requirements for the registration and oversight of trustees.
  • Responding to due diligence requests from donors, grant funders, auditors or regulators.
  • Maintaining accurate and legally compliant governance records.
  • Ensuring the Charity operates transparently and accountably.
  • Contacting you about trustee duties, charitable matters, and governance obligations.
  • Supporting Fit and Proper Person checks where relevant.


We do not use trustee data for marketing or fundraising purposes.


Our legal bases for processing trustee information include:

  • Legal obligation - compliance with charity, financial, and regulatory law.
  • Legitimate interest - ensuring the effective governance of the Charity.
  • Public task - where processing is necessary as part of the functions of an NHS Foundation Trust charity.

How long do we keep your information?

We keep your trustee information only for as long as necessary to meet legal, regulatory, and governance requirements. Typically, this means retaining records for six to seven years after you cease to be a trustee, unless a longer retention period is required for audit, regulatory, or legal purposes.

What measures do we take to protect your information?

We take our responsibility to safeguard your personal information extremely seriously.

 

The Charity and the wider Trust employ a range of technical and organisational measures designed to maintain the confidentiality, integrity, and security of the personal data we handle. This includes secure systems, access controls, staff training, and compliance with Trust-wide information security and data protection policies.

Transfer of data outside the European Economic Area

We do not routinely transfer trustee information outside the EEA.

 

If a transfer is required for a specific purpose, we will ensure that appropriate safeguards are in place in accordance with UK data protection law, and you will be informed wherever legally required.

Your rights

As a data subject, you have several rights under UK data protection legislation, including:]

  • The right to request access to your personal information.
  • The right to request correction of inaccurate information.
  • The right to request deletion of your information (where applicable).
  • The right to request restriction or objection to processing.
  • The right to data portability (in certain circumstances).

 

Some rights may not apply where the Charity is required by law to retain or process specific information for governance or regulatory purposes.

Use of automated decision-making or profiling

We do not use automated decision‑making or profiling in relation to trustee personal data.

Contact us

You can contact us with any enquiries, concerns, or complaints about how we use your personal data and your associated rights:

 

The Data Protection Officer for Birmingham Community Healthcare Trust is responsible for ensuring that BCHC and BCHC Charity comply with Data Protection legislation. You can contact them at bchc.dpo@nhs.net

Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office

Our patients and their carers and families are the reason we're here, so we want to hear your views about the Trust and our services.