Privacy Policy

hands supporting holographic brain

Who we are:

Our website address is

Last updated July 2022


GBIA is committed to keeping your information secure and managing it in accordance with our legal responsibilities under privacy and data protection laws.
This Privacy Policy provides information about how we process your personal information. 

About Us 

GBIA treats the information and personal details that you share with us in a professional manner.

We will not sell or share your data with any third parties. 


GBIA (the data controller) and our subsidiaries we mean:

  • The non-profit

  • Suppliers such as consultants working on our behalf

our data protection officer can be contacted at

Your Information – what we collect and how we use it

GBIA collects information from the public in a number of different ways.  For example, you may sign up to our mailing list. We ask for contact details and other information when members of the public sign up to a conference or seminar. This may include information such as your name and contact information. We use this information to help us provide and improve our services as a non-profit and to keep a record of our communications with you.

If you are a member of GBIA or have made a donation, we will ask for information that enables us to administer your membership.  This will normally include information such as your name, contact details such as address, email or telephone number and your payment details and Gift Aid status.

If you have given us your consent, we will contact you with information and updates on our work, events, services and how you can support us. This may be by post, email, telephone or text message, depending on your preferences. We will also continue to ask about your marketing preferences, to ensure that you are still happy to be contacted by us and by which means.


The Law on Data Protection is derived from legislation – General Data Protection Regulation (the ‘GDPR’) became enforceable in May 2018. The GDPR states that personal data (information relating to a person that can be individually identified) can only be processed if there is a legal ground to do so. Activities like collecting, storing and using personal information would fall into the GDPR’s definition of processing. The GDPR provides six legal grounds (reasons) under which personal information can be processed (used) in a way that is lawful. For the processing to be permitted by law (lawful), at least one of the legal grounds must apply.

The five legal grounds that are most relevant to GBIA’s use of your personal information are:

  • Consent

  • Legitimate Interest

  • Contract

  • Legal Obligation

  • Vital interest


GBIA will only process (use) your personal information if we have:

  • asked you and have a record of your express and recent consent for us to do so;

  • a ‘Legitimate Interest’ to do so in order to support our non-profit purposes or research purposes if you have opted to join our research. Our use will be fair and balanced and never unduly have an impact on your rights.;

  • contract with you that we can only fulfil by using your personal information, e.g. to send you an item that you have requested;

  • legal obligation to use or disclose information about you, e.g. we are required by law to keep records of gifts that are given to us with Gift Aid for 4 years.

We will not unduly prioritise our interests as a non-profit over your interests as an individual. We will always balance our interests with your rights. We will only use personal information in a way and for a purpose that you would reasonably expect in accordance with this Policy.

GBIA will not rent, swap or sell your personal information to other organisations for them to use in their own marketing activities.


GBIA will always ask for your consent before we communicate with you for certain purposes. For example, we will only email or phone you about our activities if we have an accurate record of your recent and freely given consent to do so.

You can withdraw your consent at any time by emailing

There are times when it is not practical to obtain and record consent. At those times, we will only process personal information if that processing would meet another legal ground e.g. Legitimate Interests, in which case we would only process in accordance with the law’s strict rules on legitimate interest processing.

Legitimate Interest


This legal ground for processing means that organisations can process your personal information if they 1. have a genuine and legitimate reason for doing so and 2. That use does not harm any of your rights and interests as an individual.


We do not unduly prioritise our legitimate business interests as a non-profit over your interests as an individual. We always respect your rights. Which is why we carry out a balancing exercise of the rights of the non-profit with the rights of our supporters.

We believe that the best way to look after the interests of our supporters is to consider their unique interests and expectations. As a result, we have established the following categories for GBIA supporters. This provides us with an additional method for assessing that we use your personal information in a way that matches your relationship with us; your interests; and your expectations about your rights.

  • Legacy donations

  • provided financial donations

  • demonstrated an interest in our cause by contacting us for more information, e.g. to find out more about one of our products, services or campaigns, or have attended an event.


We believe that GBIA members, supporters and beneficiaries are connected to our mission and want to know how they can continue to help us to achieve our charitable aims. Unless you tell us not to, we think you are content for us to process (keep and use) your personal information for the following lengths of time. As of May 2018, we promise not to keep your personal information for longer than we specify below. This is not the length of time that we will continue to contact you – this could be a shorter period of time (see below for an explanation on our personalised approach to communications).

  • Members

We offer a free membership for people with acquired brain injury and their carers. We will keep this membership active for 5 years and will get in touch at this time to see if you would like to remain a member for a further 5 years.

We will keep members information for 5 years after they have lapsed.

  • Financial Supporters

Donations you’ve made to us for 7 years since the date of your last donation

  • legacy donations

If you indicate that you’d like to leave us a legacy gift we will retain personal data until 7 years after the legacy is received

  • Purchasing services, like conference or seminar attendance

We will retain your information for 3 years

  • Subscribing to a newsletter

You can unsubscribe at any time

It is always your choice. If you don’t think this is quite right for you, you can tell us to change your communication preferences and our use of your information. You can do this at any time by emailing


Unless you tell us not to, we will rely on our Legitimate Interest ground (explained above) for sending you direct mail. From time to time, we would like to send you exciting updates about our work, products, services and how you can support us, including fundraising activities and events. Unless you have requested that we do not send you some, or all of this, our direct mailings include marketing and fundraising asks which further the aims and objectives of GBIA.

We are always mindful of trying to only send you what you are interested in and only as often as is appropriate. If we do not appear to be sending communications that are of interest, we will review this and will endeavour to reduce and then stop these types of communications in a much shorter time than the above defined period of Legitimate Interest.


We aim to be clear about what information we collect, to enable you to make meaningful choices about how it is used.

When it is necessary we will contact you for administrative purposes, e.g. to contact you regarding a specific service or payment. We will also hold the minimum personal information required to support our ability to respect your preferences for communication with us.

To help you to understand when and why GBIA would use Legitimate Interest to process your personal information we provide the following examples:

  • To send direct mail via email or by post communications

  • To enhance, modify, personalise and improve our services and communications for the benefit of our supporters and members.

  • To improve security of our websites and systems.

  • To prevent fraud when transacting on our website.

  • To process donations.

  • To fulfil online transactions; process and deliver your order(s). To take payment and arrange delivery, we need to collect personal information, including your payment details, your full name, delivery address and contact details.

  • To provide appropriate and personalised support to you

  • To analyse your personal information to ensure that our communications are relevant to you.

The above list of examples is on the basis that the processing will not be done if it harms your rights and interests as an individual, or if you tell us that you’d like us to stop. You can do this at any time by emailing

Data Protection

In order to communicate with you more effectively, better understand your preferences and ability to support our work, we may analyse your data.

We may contact you to inform you of activities, which are taking place in your area, for example.

We like to find out about your professional background as it helps us to give you the information about products and services most relevant to you.  In some instances, we may carry out research and/or analysis of the personal information that you have provided to us and add publicly available information (such as public records or social media) to help us tailor our communications to you, this may include wealth screening.

We do this to create a fuller picture of our supporters, to improve our service and to manage our contact with you in an appropriate and cost-effective way. This information could include things like your interests, preferences and the level of any potential donations.

Data Sharing

To help us communicate the work we are doing and provide these services we use trusted service providers such as management and communication consultants.

GBIA do not share, sell or swap your information with other organisation for their own marketing.

We work closely with a number of trusted partners with whom we need to share personal information to help us operate this website and manage our on-going relationship with you. These include:

  • banks and payment providers – to authorise and complete payment transactions;

  • organisations within the payment card industry to help prevent online fraud;

  • law enforcement bodies in order to comply with any legal obligation or court order and, where we are otherwise requested to provide information, we may provide it but only in accordance with applicable privacy and data protection laws; and

  • HM Revenue & Customs, but only if we need to authorise claims for Gift Aid or other forms of tax efficient ways of giving.

We may also provide information to third-party service providers who process information on our behalf to help run some of our internal business operations including email distribution, IT services and customer services (see Working with other service providers and our local voluntary committees).
We will only share information with such organisations where we have your permission to do so in accordance with this Policy, or where we believe it is necessary for a legitimate reason connected with the services we offer.

Changes to Your Data

From time to time we may contact you to ensure that the information you have provided us with remains accurate and up to date.

Like all organisations, we comply with requests for the disclosure of personal information where this is required or permitted by law.  This could include requests from legal providers, law enforcement or tax agencies. In these circumstances, the request must be submitted in writing and in accordance with the relevant legal requirements.

If you believe your privacy rights have been violated, you may file a complaint with us or with the Information Commissioners office

You can contact us at any time by emailing to discuss changes to your data

Cookies and Web Privacy

GBIA guarantees our commitment to respecting and protecting your online privacy.

This includes your need and your right to know what we do with the personal information you share with us. It also guides our company’s policies regarding the management of this data, including how the information is collected, processed, and for what purposes.

By accessing GBIA’s website you are consenting to the way information is collected and used, as described within this Privacy Policy. In return, GBIA gives the commitment that we will use the personal data you provide only in ways that are compatible with the following Privacy Policy.


Every time you log on to our website your IP (Internet Protocol) address registers on our servers. Your IP address reveals no information other than the number assigned to you. We do not use this technology to get any personal data against your knowledge or free will (i.e., automatically recording e-mail addresses of visitors). Nor do we use it for any purpose other than to help us monitor traffic on our website, or (in case of criminal activity or misuse of our information) to cooperate with law enforcement.


We use a number of different cookies on our site. If you do not know what cookies are, or how to control or delete them, then we recommend you visit for detailed guidance.

The list below describes the cookies we use on this site and what we use them for. Currently, we operate an ‘implied consent’ policy which means that we assume you are happy with this usage. If you are not happy, then you should either not use this site, or you should delete the cookies having visited the site, or you should browse the site using your browser’s anonymous usage setting (called “Incognito” in Chrome, “InPrivate” for Internet Explorer, “Private Browsing” in Firefox and Safari etc.)


These are cookies that are set by this website directly.

Google Analytics: We use Google Analytics to collect information about visitor behaviour on our website. Google Analytics stores information about what pages you visit, how long you are on the site, how you got here and what you click on. This Analytics data is collected via a JavaScript tag in the pages of our site and is not tied to personally identifiable information. We, therefore, do not collect or store your personal information (e.g. your name or address) so this information cannot be used to identify who you are.

Find out more about Google’s position on privacy as regards its analytics service.


These are cookies set on your machine by external websites whose services are used on this site. Cookies of this type are the sharing buttons across the site allow visitors to share content onto social networks. Cookies are currently set by LinkedIn, Twitter, Facebook, Google+ and Pinterest. In order to implement these buttons and connect them to the relevant social networks and external sites, there are scripts from domains outside of our website. You should be aware that these sites are likely to be collecting information about what you are doing all around the internet, including on this website.

You should check the respective policies of each of these sites to see how exactly they use your information and to find out how to opt out, or delete, such information.


If you choose to join our mailing list, the email address that you submit to us will be saved in our database until you specifically request removal from the list. You can do this by requesting removal via email. When requesting removal, please send your email to us using the email account that is subscribed to the mailing list.

Some emails that we send you have no tracking in at all e.g. service emails with invoices attached. Other emails we send we can track, at an individual level, whether the user has opened and clicked on the email. We do not use this information at a personal level, rather we use it to understand open and click rates on our emails to try and improve them. If you want to be sure that none of your email activity is tracked, then you should opt out of our emails which you can do via the unsubscribe link at the bottom of every email we send.


Financial transactions made online to GBIA using this website are secure (Paysafe).  No one can access your credit card details via the internet.


All information given on this site is to the best of our ability.

Whilst GBIA is happy to signpost any information and guidance regarding acquired brain injury to members of the public, it must be appreciated that GBIA will NOT be liable for injury, loss or damage arising from such guidance supplied.

You may print any information from our website for your own information, but you may NOT sell it, reproduce it on the Internet, distribute it, alter it, or reprint it in any publication without permission from GBIA.

The name and logo of GBIA are registered Trade Marks. Members may use the “member of GBIA’ logo which is supplied on application.

This information was last updated in July 2022. From time to time, we will make changes to the information on this page. The amended information will apply from the date it is posted on the site and will govern the way in which we collect and use personal information from then on.