Healthy lives for young people

Privacy Policy

Our aim is to be clear and transparent in how we collect, use and protect your personal data.

This page contains information about privacy and data protection when using our website, receiving communications or applying for jobs. For information about privacy and confidentiality when using Brook services, please view our page on privacy and confidentiality.

Brook Young People (hereinafter referred to as Brook) is committed to protecting the personal data that we collect and process.

Who we are

Brook provides free and confidential sexual health information, contraception, pregnancy testing, advice and counselling, testing and treatment for sexually transmitted infections and education programmes, reaching nearly 235,000 young people nationwide every year.

Brook believes that young people should have access to great sexual health services and wellbeing support.

Privacy policy

We collect and use personal data to ensure that we can manage our relationships with our supporters and partners, and to better understand how we can meet and exceed our stakeholders’ expectations. This allows us to provide relevant information, services, news and helps us fundraise more efficiently and effectively.

By providing us with personal information, you consent to the collection and use of this information in accordance with this privacy policy. We will process your data on the basis of legitimate interest, which means we will only use your data to contact you about information, products, resources or services you have requested from us, or related messages, products, resources or services we deem of genuine interest to you. If you receive messages or information you would no longer wish to receive there will be an option to opt out/unsubscribe at any time. In accordance with the General Data Protection Regulation we will not keep your personal data for longer than is necessary.

We will update this policy from time to time without notice to you, so please check it regularly.

If you have any questions about any of our privacy policies, please contact our Data Protection Officer by telephone on 0151 207 4000 (ext. 218) or by post to Brook, 81 London Road, Liverpool L3 8JA.

Your rights regarding your personal data

Brook adheres at all times to data protection legislation, currently DPA (Data Protection Act) 2018 and UK GDPR (General Data Protection Regulation), which provide the following rights for individuals:

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erase
  • The right to restrict processing
  • The right to data portability
  • The right to object
  • Rights in relation to automated decision making and profiling.

You can read more about your data rights on the Information Commissioner’s website.  

This statement outlines our policies for ensuring these rights are met and maintained. If you have any concerns or questions relating to your rights regarding personal data, please contact us on

We collect information in the following ways

Information you give us

Brook obtains personal information when, for example, you complete an online form to sign up to our newsletter, apply to become a volunteer, take part in an event, download resources, make a donation, book education, training or consultancy services, or register to Brook Learn.

Information from third parties

We may also receive information about you from independent third parties, such as fundraising sites like JustGiving or Eventbrite. We will only receive information from third parties if you have given your consent for your information to be passed on to us. You should check their privacy policy when you provide your information to understand how they will process your information. Once we have obtained this information from the third party it will be covered by our privacy policy as well as by the originating third party.

Information we get from your use of our website and digital platforms

We collect information about all visits made to Brook websites. This information will not identify you. It includes when you view or interact with any of our content or watch a video on YouTube.

Information in the public domain

We may obtain some information from publicly available sources such as Companies House, newspaper articles or public posts on social media such as Facebook and LinkedIn. If we do this we will contact you within one month to provide you with privacy information and to inform you why we have processed your data.

What might we do with your information?

If you support us, for example make a donation, volunteer, register to fundraise, sign up for an event we will mainly use your information to:

  • Provide you with the services, products or information that you asked for, as well as information about other services, products or information we think might interest you where you have consented to being contacted
  • Administer your donation or support your fundraising, including processing Gift Aid
  • Invite you to events
  • Keep a record of your relationship with us and record the contact we have with you
  • Ensure we know how you prefer to be contacted

Tools may be used to improve the effectiveness of Brook’s communications with you, including tracking whether you open the emails we send you and which links you click within a message.

We will also use your anonymised data and feedback to produce reports and monitor usage of our websites and content. 

Profiling and analysing information of our supporters

  • In order to tailor what type and level of support we ask you for, we may analyse personal information we collect about you including how you have engaged with us previously, demographic information, measures of affluence, philanthropic interests and networks.
  • We may also use information in the public domain, for example listed Directorships or typical earnings in a given area.

You can opt out of your data being used for profiling and wealth screening techniques by contacting the Data Protection Officer.

How we update your information

We continuously review records of supporters and volunteers to ensure your data is as accurate as possible and always appreciate it if you let us know if your contact details change.

Who might we share your information with?

We are committed to protecting your data and therefore it will never be disclosed to external organisations other than to those acting as agents and data processors carrying out work on our behalf, or when obliged to do so by law. Where we enter into a relationship with an external party, any such arrangements will be subject to a formal agreement between Brook and that organisation to protect the security of your data. They only act under our instructions and we maintain full responsibility for your data.

We may include links to third party websites, plug-ins and applications. We do not control these third party websites and are not responsible for their privacy statements. When you use these third party services we encourage you to read the privacy notice of every website you visit.

Such third parties may include:

If you attend one of our training courses, we may be asked to share your name with the organisation that asked us to deliver the course. This is only so they know who attended or not.

How to access, correct or delete your information

You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email the Data Protection Officer or write to us at Data Protection Officer, Brook, 81 London Road, Liverpool L3 8JA.

We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information that you think is inaccurate.

If you do not want to receive any further information about Brook and would like us to remove your name from our mailing list, please contact us to let us know. Please address all your requests, by email or mail, to our Data Protection Officer. To help us locate any personal information about you (or in case we need to get in touch with you to obtain further information to help us locate your records) please include your full name, email and postal address and telephone number with your request.

How we keep your data safe

We aim to ensure that there are appropriate, physical, technical and managerial controls in place to protect any personal information you may provide to us and our network is protected and monitored. Within our offices all of our employees receive training on handling data securely.

Where we use external companies to collect or process data on our behalf we carry out comprehensive checks on them before we work with them and ensure that contracts are in place that set out our expectations and requirements. Despite all of our precautions no data transmission over the internet can be guaranteed to be 100% secure. So, whilst we will always strive to protect your personal information, we cannot guarantee the security of any information which you disclose to us and so wish to draw your attention that you do so at your own risk.

How long we store your data for

We will hold your personal information on our systems for as long as is necessary for the relevant activity. If you request that we stop sending you marketing materials we will keep a record of your contact details and appropriate information to enable us to comply with your request not to be contacted by us, we won’t keep any information that we don’t need.

Contact us

If you have any queries about this policy or any complaints with regard to the administration of the policy please contact our Data Protection Officer.

The personal information we collect from you online is stored by us on databases protected through access controls, firewall technology and other appropriate security measures. However, such security measures cannot prevent all loss, misuse or alteration of personal information and we are not responsible for any damage or liability relating to such incidents.


If you feel we have not dealt with your complaint sufficiently you have the right to contact the Information Commissioner’s Office, who are the supervisory authority in the UK:

Cookies policy

This website uses cookies.

Cookies are small text files which are downloaded to your computer, tablet or mobile phone when you visit a website or application. The website or application may retrieve these cookies from your web browser (e.g. Internet Explorer, Mozilla Firefox or Google Chrome) each time you visit, so they can recognise you, remember your preferences and provide you with a more secure online experience.

Generally, cookies are very useful and are a common method used by almost every website you visit because they help to make your online experience as smooth as possible. For security reasons, many websites will not function at all without the use of cookies (or other similar technologies, such as “web beacons” or “tags”).

If you prefer, you can restrict, block or delete cookies by changing your browser settings but that may mean the website won’t work properly

For more information about cookies and their impact on you and your browsing visit

The cookies we use

Essential cookies

These functional cookies, created by Brook domains, are necessary for the site to work as it should.

View a list of essential cookies
Location Name Type Expiry Purpose algoliasearch-client-js Functional Persistent Optimises the website’s search-bar function. The cookie ensures accurate and fast search results. exp_csrf_token Functional 1 day Ensures visitor browsing-security by preventing cross-site request forgery. This cookie is essential for the s ecurity of the website and visitor. PHPSESSID Functional Session Preserves user session state across page requests. MoodleSession Functional Session This cookie must  be allowed for Moodle to work.  It is only used when you are logged in to Moodle or your browser is open.  It remembers your username between pages and provides a consistency. _brook-booking-platform_session Functional Session Retains user data for duration of session to complete booking process.

Non-essential cookies

These cookies, created by Brook domains, ensure you have a good experience on the site and help us understand how we can make improvements and provide you with relevant information.

View a list of non-essential cookies
Location Name Type Expiry Purpose _hjClosedSurveyInvites Functional Persistent Ensure that the same Hotjar survey invite does not re-appear if it has already been shown. _hjDonePolls Functional Persistent Ensure that the same Hotjar poll does not re-appear if it has already been filled in _hjMinimizedPolls Functional Persistent Ensure that the Hotjar widget stays minimised when the visitor navigates through your site. _hjIncludedInSample Marketing Session Lets Hotjar know whether that visitor is included in the sample which is used to generate funnels. _hjShownFeedbackMessage Functional Persistent Ensures the Hotjar Incoming Feedback tool will load as minimised immediately if a user navigates to another page where it is set to show. _hjid Functional 1 year Set when a user first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID. _ga Analytical 2 years Used to distinguish users. _gid Analytical 24 hours Used to distinguish users. _gat Analytical 1 minute Used to throttle request rate. AMP_TOKEN Analytical 30 seconds – 1 year Contains a token that can be used to retrieve a Client ID from AMP Client ID service. Other possible values indicate opt-out, inflight request or an error retrieving a Client ID from AMP Client ID service. _gac_<property-id> Analytical 90 days Contains campaign related information for the user. _hjTLDTest Functional Session Checks if cookies can be loaded on the site by Hotjar, and is removed shortly afterward. exp_last_activity Analytical 1 year Contains information on what date the user last visited the website. Used to generate statistical data. exp_last_visit Analytical 1 year Contains information on what date the user last visited the website. Used to generate statistical data. exp_tracker Analytical Session Contains information on what date the user last visited the website. Used to generate statistical data. __atuvc Marketing 13 months Updates the counter of a website’s social sharing features. __atuvs Marketing 1 day Ensures that the updated counter is displayed to the user if a page is shared with the social sharing service, AddThis. _at.cww Marketing Persistent Used by the social sharing platform AddThis at-lojson-cache-# Marketing Persistent Used by the social sharing platform AddThis at-rand Marketing Persistent Used by the social sharing platform AddThis _hjid Functional Persistent Set when a user first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID. loglevel Analytical Persistent Collects data on visitor interaction with the website’s video-content – This data is used to make the websit e’s video-content more relevant towards the visitor.

Third party cookies

Additional non-essential cookies for analytical and marketing purposes, created by other domains.

View a list of third-party cookies
Location Name Type Expiry Purpose collect Analytical Session Used to send data to Google Analytics about the visitor’s device and behavior. Tracks the visitor across devices and marketing channels. r/collect Marketing Session This cookie is used to send data to Google Analytics about the visitor’s device and behavior. It tracks the visitor across devices and marketing channels. loc Marketing 13 months Geolocation – used to help providers determine how users who share information with each other are geographically located. uvc Marketing 14 months  Detects how often the social sharing service, AddThis, encounters the same user. xtc Marketing 15 months Registers the user’s sharing of content via social media.

About Google Analytics

Google Analytics is used widely by websites to collect information about how website visitors use a site, including type of device used and pages accessed. We use Google Analytics cookies to collect information about how users use the website and to improve the website. Google Analytics collects information in an anonymous form and will not allow us to identify you or collect any personal information about you. Google Analytics does not track your internet activity after leaving the website.

About Hotjar

Hotjar is a tool for collecting user feedback on and tracking click behaviour across the site. We use Hotjar to collect information about specific tools and sections of the website to inform improvements. Hotjar collects information in an anonymous form and will not allow us to identify you or collect any personal information about you.

Managing cookies

Most internet browsers allow you to erase cookies from your computer hard drive, block all cookies (or just third-party cookies) or warn you before a cookie is stored on your device.

Please note: if you choose to block all cookies, our site may not function as intended and you may not be able to use or access many of the services we provide. If you have blocked all cookies and wish to make full use of the features and services we offer, you will need to enable your cookies. You can do this in your browser.

Rather than blocking all cookies, you can choose to only block third-party cookies which will still allow our website to function as intended. Another option is Do Not Track, a technology and policy proposal that enables users to opt out of tracking by websites they do not visit, including analytics services, advertising networks, and social platforms. It is also possible to opt out of being tracked by Google Analytics.


Find a Service near you