top of page

PRIVACY POLICY

British and Commonwealth Society of Rio de Janeiro (BCS Rio) Last updated: 27/04/2026

The British and Commonwealth Society of Rio de Janeiro (“BCS Rio”, “we”, “us”, or “our”) is committed to protecting your privacy in accordance with the Lei Geral de Proteção de Dados Pessoais (LGPD — Law No. 13.709/2018) and other applicable laws. This Privacy Policy explains how we collect, use, share, store, and protect personal data when you visit our website (bcsrio.org.br), participate in our activities, register for events, make donations, or otherwise interact with us.

1. Data Controller

BCS Rio, located at Rua Real Grandeza, 99, Botafogo, Rio de Janeiro, RJ, Brazil, is the data controller responsible for decisions regarding the processing of your personal data.

For privacy matters, contact us at bcsrio@bcsrio.org.br or via our website contact form. BCS Rio is currently evaluating the appointment of a formal Data Protection Officer (Encarregado de Proteção de Dados).

2. Personal Data We Collect

We collect personal data in four main ways:

 

2.1 Data you provide directly

This includes information you submit when becoming a member, registering for events, making donations, or contacting us:

  • Name, email address, and phone number

  • Postal address

  • Date of birth and CPF (where applicable)

  • Limited payment confirmation details (see Section 4)

  • Any information you voluntarily provide in communications with us

 

2.2 Data collected automatically

When you visit our website, we may collect:

  • IP address and device information

  • Browser type and operating system

  • Cookies and similar technologies (see Section 11)

  • Website usage and analytics data

 

2.3 Data received from third parties

We may receive limited information from:

  • Payment providers (e.g., Wix Payments, PayPal, PagSeguro, Pix)

  • Event platforms or registration tools

  • Email or newsletter service providers

These third parties may act as operators or independent controllers, depending on how they process your data.

 

2.4 Sensitive personal data

BCS Rio may occasionally process sensitive data—for example, information related to welfare support or assistance—only when:

  • There is a specific LGPD legal basis

  • Processing is strictly necessary for our legitimate, non-profit institutional activities

  • Additional confidentiality, access restrictions, and safeguards are applied

We do not collect sensitive data for marketing or analytics.

3. Purposes and Legal Bases for Processing

​We process personal data only for specific, legitimate purposes and under the appropriate LGPD legal bases. Below is a clear mapping:

Purpose
Examples of Processing Activities
Legal Basis
Membership administration
Managing member records, communications
Contract performance; legitimate interest
Event registration and participation
Confirmations, logistics, attendee lists
Contract performance; legitimate interest
Donations and financial administration
Confirming payments, issuing receipts, maintaining records
Legal obligation; legitimate interest
Newsletters and communications
Sending updates, community news
Consent (with opt-out)
Website functionality and analytics
Cookies, traffic measurement, site improvement
Legitimate interest; consent for non-essential cookies
Welfare support
Providing assistance to individuals
Specific legal basis for sensitive data; legitimate institutional activities
Photography and image use
Event documentation, institutional reporting
Legitimate interest for incidental images; consent for identifiable promotional use

For minors, we require written consent from a parent or guardian before processing personal data or publishing identifiable images, in accordance with the Child and Adolescent Statute (Law No. 8.069/1990).

4. Online Payments and Donations

From a privacy perspective:

  • BCS Rio does not store full credit card numbers, security codes, or payment authentication credentials.

  • All financial transactions are processed securely by third-party payment providers (e.g., Wix Payments, PayPal, PagSeguro, Pix).

  • BCS Rio receives only limited transaction information necessary to confirm payments, maintain financial records, and comply with legal obligations.

This section does not affect the organisation’s charitable status.

5. Sharing of Personal Data

We may share personal data with third parties when necessary for our activities. These may include:

  • Payment providers

  • Email and newsletter platforms

  • Event venues or co-hosts (when attendee information is required)

  • Cloud storage or IT service providers

Depending on their role, these entities may act as operators or independent controllers.

Where required, we adopt appropriate contractual and organisational safeguards, but not all third parties will necessarily operate under formal data processing agreements.

We do not sell or rent personal data.

6. International Data Transfers

Personal data may be transferred to or stored in other countries, for example when using cloud services or international platforms.

We take steps to ensure compliance with LGPD requirements for international transfers, which may include:

  • Adequacy decisions

  • Standard contractual clauses

  • Additional safeguards depending on the jurisdiction

7. Image Rights

BCS Rio may take photographs at events for documentation and institutional purposes.

  • Incidental images (e.g., crowd scenes) may be used based on legitimate interest.

  • Identifiable images used for marketing, advertising, social media campaigns, or promotional materials require specific consent, except where another legal basis applies.

  • For minors, written parental or guardian consent is always required.

You may request removal of your image where legally permissible.

8. Third-Party Sponsors and Partners

We may display sponsor logos or acknowledge cultural support. BCS Rio does not share personal data with sponsors.

If you voluntarily provide data directly to a sponsor, partner, or co-host, that third party is responsible for its own privacy practices. The same applies to third-party websites linked from our site.

9. Data Retention and Deletion

We retain personal data only for as long as necessary for the purposes described in this policy or as required by law.

Examples:

  • Donation and financial records: minimum of 5 years (tax obligations)

  • Membership and event records: retained while the relationship is active

  • Cookies: according to browser settings and cookie type

Data deletion may be manual or automated depending on the system. Where deletion is not possible due to legal obligations, data will be anonymised or access-restricted.

10. Your Rights Under the LGPD

Under Article 18 of the LGPD, you have the right to:

  • Confirmation of whether we process your data

  • Access to your personal data

  • Correction of incomplete, inaccurate, or outdated data

  • Anonymisation, blocking, or deletion of unnecessary, excessive, or unlawfully processed data

  • Information about data sharing and processing purposes

  • Portability of your data (where applicable)

  • Deletion of data processed with consent (subject to legal retention requirements)

  • Withdrawal of consent

  • Information about the consequences of refusing consent

  • Review of automated decisions, if applicable

Requests may require identity verification and will be answered within the legally applicable timeframe (generally 15 days).

You may also lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).

11. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. These may include:

  • Strictly necessary cookies (site functionality)

  • Functionality cookies

  • Analytics cookies (e.g., Wix Analytics, Google Analytics)

  • Third-party cookies (e.g., embedded content, newsletter tracking, social media pixels)

Where required, we will provide a cookie banner or preference mechanism consistent with ANPD guidance.

You can manage cookies through your browser settings.

12. Updates to This Policy

BCS Rio may update this Privacy Policy from time to time. The updated version will be published on our website with the effective date. Where required by law, we will provide additional notice or request renewed consent.

13. Contact

Email: bcsrio@bcsrio.org.br Address: Rua Real Grandeza, 99, Botafogo, Rio de Janeiro, RJ, Brazil Website contact form: bcsrio.org.br

bottom of page