Privacy Policy

Bramley Baths and Community Limited collects and uses personal information to help us operate our facilities, provide our activities and programmes, communicate with our community whilst meeting our legal responsibilities.

Depending on your relationship with us and how you interact with Bramley Baths, we may use your information for the following purposes:

Memberships and facility use: to set up and manage memberships, process payments, record attendance, administer bookings and provide swimming, gym, fitness and other activities. Predominantly, this information is collected and accessed through our membership management system Ashbourne, whose privacy policy can be viewed here.
Swim school: to manage enrolments, communicate with parents and carers, monitor progress and help keep children safe. Predominantly, this information is collected and accessed through our swim school management system Course Pro, whose privacy policy can be viewed here.
Events, venue hire and website services: We use information submitted through our website, hosted by Wix, to respond to enquiries, manage events and some activities and venue hire enquiries. We use cookies to maintain website functionality and understand how visitors use our website. For more information on the Cookies we use, please email jennie@bramleybaths.com
Community projects and wellbeing programmes: to coordinate activities, manage referrals, provide appropriate support, monitor participation and report on project outcomes to funders and partners where required.
Shareholders, donations and fundraising: to maintain shareholder records, administer interest and donations, communicate with supporters and meet relevant financial and legal obligations.
Volunteers, job applicants and employees: to manage volunteering, recruitment, employment, training, payroll and related responsibilities.
Marketing and communications: to share information about our facilities, activities, events and community work, where permitted by law and in accordance with your preferences.
Photography and recordings: We may take photographs and recordings to document activities, celebrate our community and promote Bramley Baths. Where individuals are clearly identifiable in close-up or feature photography intended for promotional use, we will seek their consent or other appropriate permission before using the images. At larger events, it may not be practical to obtain individual consent from everyone who appears in general crowd photographs. In these circumstances, we will take reasonable steps to make attendees aware that photography or recording is taking place, for example through event information and signage. We will respect requests from individuals who do not wish to be photographed and, where reasonably practicable, take steps to avoid including them in images. We will take particular care when photographing children and young people and will ensure that any photography and use of images has an appropriate lawful basis and complies with applicable data protection and privacy requirements.
Safety and security: to protect visitors, staff, property, respond to incidents and investigate incidents, CCTV is in operation around the building. No changing areas are visible on any of our cameras. Access to CCTV footage is restricted to authorised individuals and it will only be disclosed or downloaded where there is an appropriate and lawful reason to do so. This may include sharing footage with the police or other relevant authorities where necessary and lawful. For our full CCTV policy, please email david@bramleybaths.com

We only collect and use personal information that is relevant to these purposes and retain it in accordance with our data retention arrangements.

Our lawful basis for using your information

Data protection law requires us to have a lawful basis for collecting and using personal information. The basis we rely on depends on the purpose for which the information is being used.

Depending on the circumstances, these bases may include:

Contract: where we need to use your information to provide a membership, process a booking or fulfil an agreement with you, or take steps you have requested before entering into an agreement.
Legal obligation: where we need to use information to comply with a legal requirement, such as relevant financial, employment or record-keeping obligations.
Legitimate interests: where using information is necessary for our legitimate interests, or those of a third party (such as Ashbourne and Coursepro), and these interests are not overridden by your rights and freedoms. We consider the potential impact on individuals when relying on this basis.
Consent: where we ask for your permission for a specific use of your information and consent is the appropriate legal basis. Where we rely on consent, you can withdraw it at any time.
Vital interests: where using information is necessary to protect someone's life, for example in certain emergency situations.

We do not sell or rent your personal information.

We only share information that is relevant and necessary for the purpose and within the law.

We take appropriate steps to protect personal information when sharing it. Depending on the arrangement, these may include using contractual safeguards, checking providers' data protection arrangements, restricting access to authorised people and using secure methods of transferring information.

Where another organisation processes information on our behalf, we take appropriate steps to ensure that it handles the information in accordance with applicable data protection requirements. Where organisations use information for their own purposes, they may have separate responsibilities as data controllers.

We do not share personal information with other organisations simply because they are partners or funders. Any sharing must have an appropriate purpose and lawful basis.

Website, cookies and analytics

When you visit our website, certain technical information may be collected to help the website function, maintain security and understand how visitors use it.

We may use cookies or similar technologies for essential website functions and, where applicable, analytics or other purposes. Non-essential cookies and tracking technologies will be managed in accordance with applicable consent requirements.

You can find further information about the cookies used on our website, their purposes and how to manage your preferences in our cookie information, where provided.

If you contact us through our website, we will use the information you provide to respond to your enquiry or carry out the action you have requested.

Updated Oct 2026

Managing NHS Data

Bramley Baths is one of many organisations working in the health and care system to improve care for patients and the public

Whenever you use a health or care service, such as attending Accident & Emergency or using Community Care services, important information about you is collected in a patient record for that service. Collecting this information helps to ensure you get the best possible care and treatment.

The information collected about you when you use these services can also be used and provided to other organisations for purposes beyond your individual care, for instance to help with:

• Improving the quality and standards of care provided

• Research into the development of new treatments

• Preventing illness and diseases

Monitoring safety

• planning services

This may only take place when there is a clear legal basis to use this information. All these uses help to provide better health and care for you, your family and future generations. Confidential patient information about your health and care is only used like this where allowed by law.

Most of the time, anonymised data is used for research and planning so that you cannot be identified in which case your confidential patient information isn’t needed.

You have a choice about whether you want your confidential patient information to be used in this way. If you are happy with this use of information you do not need to do anything. If you do choose to opt out your confidential patient information will still be used to support your individual care.

To find out more or to register your choice to opt out, please visit www.nhs.uk/your-nhs-data-matters. On this web page you will:

See what is meant by confidential patient information
Find examples of when confidential patient information is used for individual care and examples of when it is used for purposes beyond individual care
Find out more about the benefits of sharing data
Understand more about who uses the data
Find out how your data is protected
Be able to access the system to view, set or change your opt-out setting
Find the contact telephone number if you want to know any more or to set/change your opt-out by phone
See the situations where the opt-out will not apply

You can also find out more about how patient information is used at:

https://www.hra.nhs.uk/information-about-patients/ (which covers health and care research); and

https://understandingpatientdata.org.uk/what-you-need-know (which covers how and why patient information is used, the safeguards and how decisions are made)

You can change your mind about your choice at any time.

Data being used or shared for purposes beyond individual care does not include your data being shared with insurance companies or used for marketing purposes and data would only be used in this way with your specific agreement.

Health and care organisations have systems and processes in place so they can be compliant with the national data opt-out and apply your choice to any confidential patient information they use or share for purposes beyond your individual care. Our organisation is currently compliant with the national data opt-out policy.

Data Protection Officer - David Wilford david@bramleybaths.com

CCTV Policy

This policy can be requested in writing by emailing jennie@bramleybaths.com