Privacy policy

Last updated: 6 October 2026

This notice covers Biliki Education CIC's website and the Designing My Roadmap programme.

This page explains what personal information Biliki collects, why we collect it, how we use it, and what rights you have over it. It applies to anyone who gives us information, whether you are registering your interest through our website, applying to the programme, taking part in the programme, or a parent or guardian completing a consent form.

For information about how Biliki manages personal data internally, please see our Data Protection Policy.

Biliki Education CIC is a community organisation building opportunity-access programmes for talented young people from underrepresented backgrounds and, as we grow, backing social enterprises and ventures doing similar work.

For the purposes of data protection law, Biliki Education CIC is the data controller responsible for the personal information described in this notice.

If you have questions about how we use personal information, or want to exercise your data protection rights, you can contact Biliki using the contact details provided on our website ( contact@biliki.org).

We will only collect information that we need for these purposes, or where we have another lawful reason to do so.

Depending on the circumstances, we may process personal information where:

• you have given us your consent, for example when registering your interest or giving permission for photography or specific data sharing;
• processing is necessary for our legitimate interests, where those interests are not overridden by your rights and interests;
• processing is necessary to protect someone's vital interests, for example in an emergency; or
• we have another lawful basis under UK data protection law, including where processing is necessary for legal or safeguarding purposes.

Where we rely on consent, you can withdraw your consent at any time. This will not affect anything we have already done lawfully using your consent.

Where we process information about health, safeguarding or other sensitive matters, additional rules apply to that information and we will only process it where an appropriate legal condition applies.

We only share personal information where there is a clear reason and appropriate legal basis for doing so.

This may include sharing relevant information with:

• schools and education partners, where this is necessary to deliver the programme safely and support participants;
• organisations supporting participants after the programme, where you or a parent/guardian have given specific consent to that sharing;
• funders and partners, normally using aggregated or anonymised information for reporting and evaluation. We do not routinely share identifiable information about young people with funders;
• professional advisers, service providers or technology providers, where they need access to information to provide services to Biliki and are required to handle that information appropriately; and
• statutory or emergency services, where this is necessary to protect someone from harm or where we are legally required to do so.

We do not sell personal information.

We keep personal information only for as long as we need it for the purpose for which it was collected, unless we have a legal or safeguarding reason to keep it for longer.

Our Data Protection Policy sets out our retention arrangements in more detail.

If you have registered your interest but do not go on to apply to a programme, you can contact us to ask us to delete your information, subject to any legal or safeguarding requirements that may apply.

Under UK data protection law, you may have the right to:

• ask what personal information we hold about you or your child;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information in certain circumstances;
• ask us to restrict how we use your information in certain circumstances;
• object to certain types of processing;
• withdraw consent where we are relying on consent to process your information; and
• ask for a copy of your information in a portable format in certain circumstances.

These rights are subject to certain exceptions, particularly where we need to retain information for legal, safeguarding or other legitimate purposes.

To exercise your rights or ask a question about how we use personal information, please contact Biliki using the contact details provided on our website ( contact@biliki.org).

You also have the right to complain to the Information Commissioner's Office (ICO) if you are concerned about how we have handled your personal information.

Much of the information we hold relates to young people aged 13 to 16.

Where a young person provides information directly, for example through a student application, we will take appropriate steps to ensure that the processing is lawful and that appropriate parent or guardian consent is obtained where required before participation in the programme is confirmed.

We take particular care with information relating to children and young people and only collect and use information that is necessary for the purposes described in this notice.

Where we wish to use photographs, videos or other identifiable media of participants for publicity, communications or other purposes beyond delivering the programme, we will seek appropriate consent.

You can withdraw consent for future use at any time where consent is the legal basis for using the material.

Our website may use cookies and similar technologies to make the website work, understand how it is being used and improve the experience for visitors.

Where required, we will ask for your consent before using non-essential cookies or similar technologies.

Further information about the cookies used on our website can be provided through our cookie notice.