Privacy Policy
Last updated: 29 August 2026
1. Who we are
Brave Homes Community Interest Company is the data controller for the personal information described in this policy. We are a community interest company limited by guarantee, registered in England and Wales, company number 17348356, registered office 147 Benhurst Avenue, Hornchurch, England, RM12 4QN.
Contact us about privacy at support@bravehomes.co.uk.
We are registered with the Information Commissioner’s Office under registration number ZC226772.
2. What this policy covers
This policy explains what personal information we collect through bravehomes.co.uk and the Brave Homes app, why we collect it, how long we keep it, who we share it with, and what rights you have.
We are not a registered charity. We are a community interest company.
3. Information we collect
When you create an account Name, age, city, email address, password (stored encrypted), and any profile photograph or description you choose to add.
When you verify your age A live selfie (and, if needed, a photo of an identity document) captured and assessed by our verification partner Didit. Didit stores the images on its secure systems; our own systems store only the outcome of the check. Authorised Brave Homes staff can view a verification in Didit’s console where necessary — for example to investigate a report or a disputed check.
When you use the Platform Messages you send and receive, voice notes, and records of video calls (date, time, duration and participants — we do not record the content of calls). Details of meetings you arrange through the Platform.
When you donate Name, email address, donation amount, date, and the last four digits and type of your card. Your full card details are collected and processed by Stripe. We never see or store them.
Automatically IP address, device and browser type, operating system, and pages visited.
When you contact us Anything you send us by email, through the contact form, or through a report.
Special category data We do not ask for health information. Members sometimes mention health, care needs, religion or similar in conversation or in a report to us. Where that happens we treat it as special category data and rely on your explicit consent, or on the substantial public interest condition for safeguarding of adults at risk (UK GDPR Article 9(2)(g) and Data Protection Act 2018 Schedule 1 Part 2 paragraph 18).
4. Why we use it and our lawful basis
| What we use it for | Lawful basis |
|---|---|
| Creating and running your account | Contract |
| Enabling messaging, calls and introductions between members | Contract |
| Verifying identity and age | Legitimate interests — protecting adults at risk |
| Investigating reports, complaints and safeguarding concerns | Legitimate interests, and legal obligation where reporting is required |
| Processing and recording donations | Contract and legal obligation (accounting and tax records) |
| Site security, fraud prevention and abuse detection | Legitimate interests |
| Service emails (password resets, changes to terms) | Contract |
| Marketing and fundraising emails | Consent |
| Anonymous statistics about how the Platform is used | Legitimate interests |
You can withdraw consent to marketing at any time using the unsubscribe link or by emailing us. Withdrawing consent does not affect processing carried out before you withdrew it.
5. Who we share it with
Other members. Your name, age, city, photograph and profile description are visible to other members. Your email address, and any other contact details, are not shown unless you choose to give them to someone.
Our suppliers. Stripe (payment processing), Didit (identity and age verification), and our hosting and email providers. They act on our instructions and are bound by contract.
A member’s family or care provider, where necessary for that member’s welfare or safety.
Police, safeguarding authorities and other authorities. We will share information without your consent where we believe there is a risk of harm to you or another person, where we suspect a criminal offence, or where we are required to by law. We may not be able to tell you when we do this.
Professional advisers, insurers and auditors, where necessary.
We do not sell personal information. We do not share it for third party advertising.
6. International transfers
Some of our suppliers process data outside the UK. Where that happens we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.
7. How long we keep it
| Data | Retention |
|---|---|
| Account and profile | While your account is open, then 12 months after closure |
| Messages, voice notes, call records | 12 months, then deleted |
| Donation records | 7 years (accounting and tax) |
| Safeguarding reports and investigations | 7 years from the date the matter is closed |
| Records of members removed for serious breaches | 7 years, to prevent re-registration |
| Correspondence with us | 3 years |
| Website logs | 12 months |
8. Security
Data is encrypted in transit. Passwords are hashed. Access to member data inside Brave Homes is limited to those who need it. No system is completely secure. If a breach occurs that is likely to result in a risk to your rights, we will notify the ICO within 72 hours and tell you where required.
9. Your rights
You have the right to:
- ask for a copy of the personal information we hold about you;
- have inaccurate information corrected;
- ask for information to be deleted;
- object to processing based on legitimate interests;
- ask us to restrict processing while a dispute is resolved;
- receive your data in a portable format;
- withdraw consent where consent is the basis we rely on.
These rights are not absolute. We may keep information where we need it for a safeguarding matter, a legal claim, or a legal obligation, and we will tell you if that applies.
To make a request, email support@bravehomes.co.uk. We respond within one month. There is no charge.
If you are unhappy with our response, you can complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would ask you to raise it with us first.
10. Children
The Platform is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If we discover that an under-18 has registered, we will close the account and delete the data.
11. Changes
We may update this policy. Where a change is significant, we will tell you by email or on the Platform. See also our Terms and Conditions and Community & Safety Rules.