Privacy Policy

RBVE Privacy Notice for Lifeworks

Introduction

Lifeworks is a division of Royal British Veterans Enterprise. This website is owned and managed by Royal British Veterans Enterprise (RBVE), a charity registered in England and Wales (Charity No. 210063) and a company limited by guarantee (Company No. 00158479). Our main trading address is:

RBVE
Hall Road
Aylesford
Kent ME20 7GT

We take your privacy seriously. This notice explains how we collect, use, store, and protect your personal information when you interact with us online, by phone, face-to-face, or in writing. It also outlines your rights and how to update your preferences.

This notice was last updated in October 2025 and replaces all previous versions. Please check it periodically for updates.

By using our website or services, you agree to the practices described here. If you have any questions, contact:

Data Protection Officer
RBVE
Hall Road
Aylesford
Kent ME20 7NL
Email: [email protected]

RBVE is registered with the Information Commissioner’s Office under the Data Protection Act 2018 (Registration No. Z6761919).

Our Commitment to Privacy

We comply with the UK General Data Protection Regulation (UK GDPR) and are legally required to protect any personal information we collect.

Fundraising Preference Service

RBVE supports the Fundraising Regulator and the Fundraising Preference Service (FPS), which helps donors manage their communications. We are committed to transparency and best practice in fundraising.

Your data is only accessed by staff who need it for their work. We only share or disclose it:

With your consent.
When required by law.
As permitted under UK GDPR.

We keep your data accurate and secure, and will correct any errors promptly. You can request a copy of your personal data at any time.

How We Collect Information

We collect personal data when you:

Provide goods or services to RBVE.
Enquire about our activities.
Register with us.
Email us.
Make a donation.
Ask a question.
Interact with us online or via social media.

We may also receive data from third parties (e.g. mailing list brokers) and collect technical data like your browser type or IP address to improve our website.

You do not need to provide personal data to browse our site. We only collect what’s necessary to fulfil your request or improve our services.

What Information We Collect

We may collect:

Name, date of birth, email, postal address, phone number.
Credit/debit card details (via approved third party services).
Health information (if relevant).
Regiment or Corps (where applicable).
Website usage data (e.g. most visited pages).

We use anonymous or aggregated data wherever possible. See our Cookies section for more details.

Why We Collect Your Information

We collect data to:

Promote RBVE’s charitable aims.
Communicate effectively with supporters.
Provide support to beneficiaries.

Legal bases for processing:

Consent: For marketing communications, social media interactions and the technical information you provide as managed by your browser settings.
Contract: For purchases, event registrations, or donations.
Legitimate interest: For general communications, applications, and service use. We also rely on legitimate interest to send marketing information by post to our supporters.

Shop Marketing Preferences:

If you make a purchase from the RBVE shop and choose not to opt in to shop marketing, this will only affect your shop preferences. It does not change your overall marketing consent.
You can update your marketing preferences at any time using the links provided in our emails or other communications.

How We Use Your Information

We use your data to:

Promote RBVE’s work
Personalise services for beneficiaries
Respond to enquiries
Share updates on campaigns, volunteering, fundraising, and trading
Improve our website
Claim Gift Aid
Conduct market research
Segment audiences for relevant communications
Manage administration

If you enter contact details in an online form but don’t submit it, we may still contact you to help resolve any issues.

We may use automated decision-making, including profiling, to help tailor our communications and engagement strategies. This is to ensure that our supporters receive the most relevant updates, appeals, and opportunities based on their interests and interactions with us.

Sharing Your Information

We may share your data with trusted suppliers who process it on our behalf. They:

Only act on our instructions,
Are bound by data processing agreements.

We may also disclose data if required by law. We do not sell personal data to other charities or third parties.

Our website may link to other sites. RBVE is not responsible for their privacy practices please read their policies before sharing data.

Storing and Protecting Your Information

We take data security seriously. Your information is stored securely on UK-based computers or paper files. Online forms are encrypted, and donations are processed via secure servers.

We retain data only as long as needed for:

Providing services.
Managing relationships.
Research and supporter preferences.
Legal and tax compliance.
Avoiding unwanted communications.

When no longer needed, data is securely disposed of per our Records Retention Policy.

How long we keep your data:

Fundraising communications: Up to 72 months if we don’t hear from you.
Marketing consent: Retained for 2 years after our last interaction.
Enquiries: Retained for 6 months unless you ask us to keep it longer.
Financial (including purchases, donations, gift aid) : Retained for up to 7 years.

Where data can be deleted sooner, we will do so, to ensure we only keep your data for the time that it is necessary.

Additional Data Practices for Residential and Property Services

This section outlines additional data practices specific to individuals engaging with RBVE’s Residential and Property Services.

Safeguarding and Risk Management

To fulfil our duty of care and ensure the safety of residents and staff, we may process personal data relating to:

Anti-social behaviour.
Financial circumstances (e.g. debts, benefits).
Housing history (e.g. evictions, arrears).
Risk-related behaviours (e.g. substance misuse, aggression).
Criminal activity and convictions.

This data is used solely to assess risk, deliver appropriate support, and comply with safeguarding obligations.

Equality, Diversity and Inclusion Monitoring

We may collect diversity data (e.g. ethnicity, religion, sexual orientation) for statistical purposes to monitor fairness and inclusivity. This data is optional and not used for individual decision-making.

Internal Appeals and Complaints

If you are dissatisfied with how your personal data is handled, you may raise concerns with your service manager or contact the Data Protection Officer. We aim to resolve issues internally before escalation to the Information Commissioner’s Office.

Credit Checks

Where relevant to service provision, we may conduct credit checks. This will be done transparently and only when necessary.

Internal Sharing Across RBVE Divisions

To ensure continuity of care and access to services, we may share your data across RBVE departments and subsidiaries. This is done securely and only when necessary.

Data Sharing with Elected Representatives

We may share your data with MPs or Councillors acting on your behalf, where appropriate and lawful.

Additional Data Practices for employees, volunteers, and trustees

We collect and process a broader range of personal data for employment and volunteering purposes, including:

Salary, pension, and benefits information.
Disciplinary, grievance, and performance records.
Trade union membership.
Health and medical data (e.g. occupational health reports).
Criminal convictions and disqualification status.
Profile packs from third parties to support volunteers with medical or disability needs.
CCTV and swipe card data.
Use of internal communication systems.

Purposes of Processing

This data is used to: