Privacy and terms

Brightsparks Agency LTD (the Company) own and operates this website on behalf of our client Solihull Metropolitan Borough Council (the Client).

Brightsparks Agency Ltd is a data Processor on behalf of Solihull Metropolitan Borough Council for the purposes of foster career recruitment services. The Company may share your data captured through this website and associated publishers with Solihull Metropolitan Borough Council. We may also share your data with third party organisations that have been approved and contracted by Solihull Metropolitan Borough Council to support the improvement of our services to you.

The Company is committed to protecting your privacy when you use our services and will always strive to ensure that we handle personal data fairly and lawfully, and with justification. Our aim is not to be intrusive by invading your privacy or to undertake any task which is irrelevant. Instead our aim is to ensure we collect information that is of the highest quality in terms of accuracy, relevance, adequacy, non-excessive and which is "fit for purpose".

The Privacy Notice below explains how we use information about you and how we protect your privacy. Please see the service specific privacy notices for more information about who we may receive information from, share your information with and why we may need to share information.

We have a Data Protection Lead who makes sure we respect your rights and follow the appropriate legislation. If you have any concerns about how we look after your personal information, please contact our Data Protection Officer, by completing the online enquiry form below or by writing to us at the following address:

Brightsparks Agency Ltd

55 Manor Drive North

York

YO26 5RY

Privacy Notice

This Site collects, uses and is responsible for certain personal information about you. When we do so we are regulated under the General Data Protection Regulation (GDPR) which applies across the European Union (including in the United Kingdom) and we are responsible as ‘controllers’ of that personal information for the purposes of those laws.

Brightsparks Agency LTD and Solihull Metropolitan Borough Council is committed to providing a website that is accessible and usable by people of all abilities.

Personal information we collect and use

Information collected by us:

In the course of approving and supervising foster carers we collect the following personal information when you provide it to us:

personal information (such as name, address, contact details, date of birth, gender, language)
special category characteristics (such as ethnicity, disability, religion and medical information)
family network and relationship information
employment information
financial information
information relating to assessments and approvals for suitability to foster children

Information collected by other sources:

We also obtain personal information from the following other sources:

the local authority in whose area you live
other Solihull Metropolitan Borough Council departments
Disclosure and Barring Service (DBS)
past and present employers
social media
references (personal and employment)
previous partners
health teams
schools

How we use your personal information

We use your personal information to:

process foster carer applications
assess suitability to become a foster carer
monitor the progress and stability of placements, to safeguard and support children
provide ongoing support, advice and training to foster carers
prevent or detect crime or fraud
assess and evaluate our services
inform future service planning and the commissioning of services
ensure that foster carers receive the correct payments

How long your personal data will be kept

We keep your information securely in line with the retention periods shown below, after which time it is archived or securely destroyed, unless we are required by legal reasons to retain records for longer than the stated retention period.

Foster carers approved by Solihull Metropolitan Borough Council - including any person with whom a child is placed (under Regulation 34 or 38 of the Fostering Services Regulations 2002) and records of foster carer applicants who are not approved.

Finance and procurement, financial services, payments: all records relating to the payment of foster carers.

Reasons we can collect and use your personal information

The legal basis for using your personal information is Legal Obligation (UK GDPR Article 6.1.c). We collect and use your personal information to comply with our legal obligations under The Fostering Services (England) Regulations 2011.

If we need to collect special category (sensitive) personal information, we rely upon reasons of substantial public interest (equality of opportunity or treatment) for the provision of social care; for social security or social protection law; and for the establishment, exercise or defence of legal claims whenever Courts are acting in their judicial capacity.

Who we share your personal information with:

Solihull Metropolitan Borough Council
Ofsted (in the event of a local authority inspection of children’s services)
other local authorities (if you apply to foster/adopt with them in another local authority in the future)
other fostering agencies - Regulation 26(1A) gives the fostering service undertaking the current assessment
the power to request access to records about the applicant held by the fostering service or adoption agency which granted the approval (providing that the applicant consents)
training providers
We will share personal information with law enforcement or other authorities if required by applicable law.

What you can do with your information

The law gives you a number of rights to control what personal information is used by us and how it is used by us. You can ask for access to the information we hold on you. We would normally expect to share what we record about you with you whenever we assess your needs or provide you with services.

However, you also have the right to ask for the information we hold about you and the services you receive from us. When we receive a request from you in writing, we must give you access to the information we hold about you.

However, there may be information we hold that we can’t allow you to see, examples of this may include:

confidential information about other people
data a professional thinks will cause serious harm to your or someone else’s physical or mental wellbeing
if we think that giving you the information may stop us from preventing or detecting a crime

This applies to personal information that is in both paper and electronic records. If you ask us and give your permission, we’ll also let others see your record (except if one of the points above applies).

Under GDPR, you have rights you can exercise which allow you to:

know what we are doing with your information and why we are doing it
ask to see what information we hold about you (subject access request)
ask us to correct any mistakes in the information we hold about you
object to direct marketing
make a complaint to the Information Commissioner's Office
withdraw consent at any time (if applicable)

Depending on our reason for using your information you may also be entitled to:

ask us to delete information we hold about you
have your information transferred electronically to yourself or to another organisation
object to decisions being made that significantly affect you
object to how we are using your information
stop us using your information in certain ways

We will always seek to comply with your request, however we may be required to hold or use your information to comply with legal duties. Please note, your request may delay or prevent us delivering a service to you.

For further information about your rights, including the circumstances in which they apply, see the guidance from the UK Information Commissioner's Office (ICO) on individuals’ rights under GDPR.

If you wish to request access to personal information, please submit a request, and tell us which service you’re using, or used, so we can deal with your request.

How you share your information with us

When you fill out forms on our website to download resources, make contact with us or to book appointments, you will be required to provide some information that allows the Company to deal with your request appropriately.

By clicking the ‘submit’ or ‘book’ buttons at the end of these forms, you are providing your express consent for the Company to process, share, store and use your data to facilitate your request/s and provide you with any other communications or information the Company believes to be relevant or appropriate with regards to fostering, across email, phone, SMS and postal channels.

You can ask to change information you think is inaccurate
You should let us know if you disagree with something written on your file. We may not always be able to change or remove that information, but we’ll correct factual inaccuracies and may include your comments in the record to show that you disagree with it.
You can ask to delete information (Right to Erasure)
In some circumstances you can ask for your personal information to be deleted, for example:
Where your personal information is no longer needed for the reason why it was collected in the first place
Where you have removed your consent for us to use your information (where there is no other legal reason for us to use it)
Where there is no legal reason for the use of your information
Where deleting the information is a legal requirement
Where your personal information has been legitimately shared with others, we’ll do what we can to make sure those using your personal information comply with your request for deletion.

Please note that we can’t delete your information where:

we’re required to have it by law
it is used for freedom of expression
it is for public health purposes
it is for scientific or historical research, or statistical purposes where it would make information unusable
it is necessary for legal claims

You can ask to limit what we use your personal data for:

You have the right to ask us to restrict for what we use your personal information where:
you have identified inaccurate information, and have told us of it
we have no legal reason to use that information, but you want us to restrict what we use it for rather than erase/delete the information altogether
When information is restricted it can’t be used other than to securely store the data and with your consent to handle legal claims and protect others, or where it’s for important public interests of the UK.
Where restriction of use has been granted, we’ll inform you before we carry on using your personal information.
You have the right to ask us to stop using your personal information. However, if this request is approved, this may cause delays or prevent us delivering that service.
You can object to the processing of your Personal Data
You have the right to object to the processing of your Personal Data if such processing is not reasonably required for a legitimate business purpose as described in this notice or our compliance with law.
You can ask to have your information moved to another provider (data portability)
You have the right to ask for your personal information to be given back to you or another service provider of your choice in a commonly used format. This is called ‘data portability.’
However, this only applies if we’re using your personal information with consent (not if we’re required to by law) and if decisions were made by a computer and not a human being. It’s likely that data portability won’t apply to most of the services you receive from the Company as the majority of information we process is required by law/legislation.
You can ask to have a decision reviewed if it has been made solely on automated processing.
You can ask to have any computer made decisions explained to you, and details of how we may have ‘risk profiled’ you.
You have the right to question decisions made about you by a computer, unless it’s required for any contract you have entered into, required by law, or you’ve consented to it.
You also have the right to object if you are being ‘profiled’. Profiling is where decisions are made about you based on certain things in your personal information, e.g. your health conditions.
If and when the Company or the Client uses your personal information to profile you, in order to deliver the most appropriate service to you, you will be informed.
However, it is likely that automated processing/profiling won’t apply to most of the services you receive from the Company as the majority of our processes have some form of human intervention.

How do we protect your information?

We’ll do what we can to make sure we hold records about you (on paper and electronically) in a secure way. We’ll only make them available to those who have a right to see them.

Examples of our security include:

‘Encryption,’ meaning that information is hidden so that it cannot be read without special knowledge (such as a password). This is done with a secret code or what’s called a ‘cypher’. The hidden information is said to then be ‘encrypted’
‘Pseudonymisation,’ meaning that we’ll use a different name so we can hide parts of your personal information from view. This means that someone outside of the Company could work on your information for us without ever knowing it was yours
Controlling access to systems and networks allows us to stop people who are not allowed to view your personal information from getting access to it
Training for our staff allows us to make them aware of how to handle information and how and when to report when something goes wrong
Regular testing of our technology and ways of working including keeping up to date on the latest security updates (commonly called ‘patches’)

Where in the world is your information?

The majority of personal information is stored on systems in the European Union (EU) and as such is subject to EU GDPR. Although there are some occasions where your information may leave the EU in order to get to another organisation, or, if it’s stored in a system outside of the EU.

We have additional protections on your information if it leaves the UK ranging from secure ways of transferring data to ensuring we have a robust contract in place with that third party.

We’ll take all practical steps to make sure your personal information is not sent to a country that is not seen as ‘safe’ either by the UK or EU Governments.

In the unlikely event we would need to send your information to an ‘unsafe’ location, we will always seek advice from the UK’s Information Commissioner first.

Where can I get advice?

If you have any concerns about how your personal information is handled please contact our Data Protection Officer via our online enquiry form or by writing to us at the address below:

Brightsparks Agency Ltd

55 Manor Drive North

York

YO26 5RY

Website terms and disclaimer

We take care to ensure the accuracy of the information on our website, but we cannot accept responsibility for any loss, damage or inconvenience which may occur from use of the information.

The Company is not responsible for the content of websites other than its own.

This site uses cookies in order to provide a better service and experience to customers. No personal data is stored without your consent in cookies and cookies are not used in order to provide advertising. Where services are delivered on the internet, it often involves placing small amounts of information on your device, for example, computer or mobile phone. These include small files are known as cookies. They cannot be used to identify you personally.

This site uses Google Analytics code to gather statistical and trend information so we can better understand how customers use the website. Google Analytics sets cookies to help us accurately estimate the number of visitors to the website and volumes of usage. This to ensure that the service is available when you want it and fast.

Learn more about Google Analytics: https://analytics.google.com/

Learn more about cookies by visiting https://www.cookielaw.org/

Access

Access to the service may sometimes be unavailable due to maintenance. It can also be affected by your Internet Service Provider, your dial-up connection and your PC. If you experience connection difficulties you are advised to retry accessing the service.

Advert Retargeting

The Company collects data about your activities that does not personally or directly identify you when you visit our website, the website of entities for which we serve advertisements (our “Advertisers”), or the websites and online services where we display advertisements (“Publishers”).

This information may include the content you view, the date and time that you view this content, the products you purchase, or your location information associated with your IP address.

We use the information we collect to serve you more relevant advertisements (referred to as “Retargeting”). We collect information about where you saw the ads we serve you and what ads you clicked on.

What cookies/tracking technologies do we use?

A cookie is a small text file that’s placed on your computer or mobile device when you visit our website.

We use a few different types of cookies. Some are persistent cookies (cookies that remain on your hard drive for an extended period of time) and some are session ID cookies (cookies that expire when you close your browser).

We also use other tracking technologies like web beacons (sometimes called tracking beacons or clear GIFs) and local storage.

These are tiny graphics files that contain a unique identifier that enable us to recognise when someone has visited our website or opened an email that we have sent them.

A popup will appear when you visit our website for the first time. Here, you can choose which types of cookies you wish to accept or reject.

Why do we use cookies/tracking technologies?

Cookies and tracking technologies are important – they help us operate our websites and services; enhance and customise your experience across our websites and services; perform analytics and deliver advertising and marketing that’s relevant to you.

There are also cookies set by third parties across our websites and services.

Third party cookies enable third party features or functionality to be provided on or through our websites and services, such as advertising, interactive content and analytics. They also enable us to use advertising networks to manage our advertising on other websites.

Finally, we also enable our users to employ cookies and similar tracking technologies in connection with their use of our Services in order to allow us and our users to track their contacts.

Cookies used on this website

Below is a list of cookies that we use on our websites and services. The types of cookies we use are always changing. Check back regularly to make sure you stay up to date. If you think we’ve missed a cookie, please let us know.

Google Ads tracking cookies (used for remarketing)
Wix social media widget integration (this lets you share our blog posts easily via Facebook, Twitter and Google)
Facebook tracking cookies (used for advertising and remarketing)
Encrypted Facebook ID and Browser ID (used for advertising)
Google Analytics cookies (used to improve our website and our user experience)
LinkedIn: These cookies are used for the following purposes respectively: Store language preferences, Browser ID cookie, Secure browser ID cookie, Ad analytics and used for routing
Twitter: social media integration
Performance tracking: These cookies are used for analysing and improving website performance
Zoho: These cookies are used for analytic purposes and social media ad analytics

User email campaigns

We automatically place single pixel gifs, also known as web beacons, in every email sent by our users. These are tiny graphic files that contain unique identifiers that enable us and our users to recognise when their subscribers have opened an email or clicked certain links.

These technologies record each subscriber's email address, IP address, date, and time associated with each open and click for a campaign.

We use this data to create reports for our users about how an email campaign performed and what actions subscribers took.

User sites

If a user elects to use certain Services, the use of those may permit or require additional cookies or tracking technologies to be employed.

If a user connects his or her website to their account, we may install a piece of code called a JavaScript tracking snippet (“Snippet”) on that user’s website. This snippet allows cookies, pixels, and other technologies to be set on that user’s site to help them access features offered by us through the Services.

The specific cookies, pixels, or other technologies that will be set on a user’s Site depend on the features that user has chosen as part of the Services. You should review the relevant user’s privacy notice and cookie disclosures for further information about the specific types of cookies and other tracking technologies used on the Site. These optional add-ons and features include:

Google Ads remarketing

We use Google Ads remarketing cookies and pixels to serve you advertisements and provide us with reporting and analytics.

To manage your Google cookies, please use the following links:

https://adssettings.google.com/authenticated

https://optout.networkadvertising.org/?c=1

Facebook Ads

Our Facebook feature lets our users create and manage ads on the Google Ads Network. When a user chooses to use this feature, we install a Facebook tracking pixel on that user’s Site through the Snippet. These bits of tech allow the placement of advertising campaigns on Facebook and help us provide reporting to our users about the performance of their ad campaigns.

You can manage your cookie preferences using the instructions at the bottom of this page. Facebook does not provide an opt-out link for its cookies.

For more information about Facebook cookies, please click here. To refuse these cookies, please follow the instructions below under the heading “How can I control cookies?”

How can you control cookies?

You can accept or reject cookies by amending your web browser controls. If you decide to reject our cookies, our websites and services may not work like they’re supposed to, and in some cases, may not work at all.

Most advertising networks also offer you the option to opt out of targeted advertising.

For more information, please visit http://www.aboutads.info/choices/ or http://www.youronlinechoices.com.

You can also manage your cookie settings by following your browser’s instructions.

Contacts

GDPR also gives you the right to lodge a complaint with a supervisory authority.

The supervisory authority in the UK is the Information Commissioner who may be contacted on 03031 231113 or at https://ico.org.uk/

This statement was last reviewed on 23rd September 2022