Privacy notice

This notice explains what personal data BROS (Breaking Rules Of Silence) collects through this website, why, and your rights under UK GDPR and the Data Protection Act 2018. Contact us about anything here using our contact form.

What we collect

• Newsletter: your email address, when you signed up, and where on the site. Lawful basis: your consent. Unsubscribe any time from any email.
• Contact form: your name, email and message. Lawful basis: legitimate interests (replying to you). If your message includes anything about your health, we treat it as special category data, use it only to reply to you, and delete it once your query is dealt with.
• Staff and volunteers: a sign-in email and the photos and notes you upload through the admin area.

We do not use advertising or tracking cookies. Staff who sign in get a login cookie. The site also stores two small settings in your browser (whether you have seen the intro, and whether you dismissed the “add to home screen” tip). These never leave your device.

Photos at meet-ups

We only publish photos of people who have agreed to be in them, and every photo page is checked by a person before it goes live. If you are in a photo and want it removed, email us and we will take it down.

Who processes data for us

• Supabase (database and file storage)
• Vercel (website hosting)
• Anthropic (drafts the text for photo pages from staff uploads; drafts are always checked by a person)

Some of these providers process data outside the UK under appropriate safeguards such as the UK International Data Transfer Addendum.

How long we keep it

Newsletter details until you unsubscribe. Contact messages for up to 12 months. Staff accounts until the person leaves.

Your rights

You can ask to see, correct, delete or move your data, object to how we use it, or withdraw consent at any time. Contact us using our contact form. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.