4.1. The general topics of calls;
4.2. The time and length of calls;
4.3. Call volumes
4.4. The gender of callers

5.1. Terrorism. The Prevention of Terrorism Act 2000 places a legal obligation on Bath Nightline to disclose information related to a terrorist threat. Bath Nightline will pass on all relevant information to the Anti-Terrorism Hotline or to the police if there is an immediate risk to life. Campus Security will also be notified of the terrorist threat as soon as possible.
5.2. Crime including fraud and money laundering. The Fraud Act 1997, the Proceeds of Crime Act 2002, and the Money Laundering Regulations 2003 all require Bath Nightline to report any relevant information to the police and Campus Security.
5.3. Court orders. When a court order is issued, Bath Nightline will pass on all relevant information to the authorities.
5.4. Abuse of children and vulnerable adults. If the Bath Nightline volunteer feels a child is being neglected or is in imminent danger, Bath Nightline will pass on all relevant information as detailed in The SU Bath’s Child Protection Policy.
5.5. Danger to others. If the Bath Nightline volunteer believes there are other people in imminent danger, Bath Nightline will pass on all relevant information to the police and Campus Security.
5.6. Danger to self, including suicide. If a caller has taken action to end their life; if the caller is unconscious; or if the volunteer feels that they do not understand the risks of their actions, the volunteer will immediately call for help. If the student is on campus, then Campus Security must be alerted so that they are able to direct the Emergency Services to the appropriate area of campus.
5.7.  Abusive calls towards Bath Nightline, information may be shared with the University of Bath Security Service and the police.

7.1. Call information will not be discussed outside of Bath Nightline, apart from in the circumstances stated in Section 4.0 and 5.0 of this policy.
7.2. In some circumstances, it may be necessary for call information to be discussed confidentially with external organisations including the University of Bath Counselling & Mental Health Service, and the Samaritans. This will be for the purpose of supporting Bath Nightline volunteers in accordance with the Bath Nightline Supervision and Support Policy.

8.1. Telephone calls are received by one Bath Nightline volunteer. There is no facility for additional Bath Nightline volunteers to hear the caller.

8.1.1. There is no call monitoring facility available, or in use, at Bath Nightline.

8.2. Emails. All emails received to the Bath Nightline listening email account are automatically anonymised. The Bath Nightline volunteers on shift will work together to produce email responses.
8.3. Instant Messages. No account or IP information will be recorded by Bath Nightline, apart from in the circumstances listed in Section 5.0 of this policy. The Bath Nightline volunteers on shift will work together to produce IM responses.

‘Personal data’ is information that is personally identifiable, i.e. you can use the data to find out who it is about. This could be a name, date of birth or location data.

‘Special category data’ is more sensitive information, for example, health or genetic information.

‘Processing’ is the action that Bath Nightline or a trusted third party takes when collecting, updating, storing, or sharing an individual’s personal data.
‘We’ or ‘Nightline’ refers to Bath Nightline.

We aim to minimise as much as possible the amount of personal data we process. We may process personal data where the law requires us to do so, in order to safeguard vulnerable individuals, to protect our volunteers’ wellbeing and to continuously improve and develop the services we provide.
All of our practices comply with UK GDPR. We have lawful bases for processing your personal data and special category data. The main lawful bases we rely upon are:
● We have a legal obligation
● Protecting vital interests
● Our legitimate interests as an organisation

At Nightline, we only collect the data we need and we only share it on a need-to-know basis.

We do not share personal data externally with the exception of the circumstances outlined in this policy. In this situation, we will always make you aware of how your personal data might be affected and will always check that the organisation’s systems comply with privacy laws and have robust privacy and security practices.

Most of our data is stored on Google Workspace (i.e. Gmail, Google Drive etc). It is secured and supported by Google and has been security assessed by independent organisations (including the National Cyber Security Centre: https://www.ncsc.gov.uk/guidance/g-suite-security-review).

We store some personal data on Three Rings. Three Rings’ data is stored on a server leased exclusively to Three Rings CIC in a UK-based datacentre registered as a data processor with the Information Commissioner’s Office, with 24/7 security, remotely-monitored CCTV, and access control systems throughout. Connections to the server whether by service users or Three Rings CIC staff take place exclusively over high-grade encrypted connections.

Some personal data may also be stored on Microsoft Teams. Microsoft complies with the EU-U.S., UK Extension to the EU-U.S., and Swiss-U.S. Data Privacy Frameworks. It is secured and supported by Google and has been security assessed by independent organisations (including the National Cyber Security Centre).

With every system we use, we ensure that it complies with privacy laws and has good privacy and security practices.

As a general rule, Nightline does not store personal data of service users in call records. We keep call logs, but these are limited to primarily statistical information and no identifying information is recorded.

On some occasions, in order to detect and prevent abuse to Nightline services, we do collect data about calls we believe to be non-genuine, in order to prevent such calls taking place again in the future. This information includes details of the caller and the topics discussed on the call. This information may be retained for up to 5 years.

Some personal data (IP addresses, email addresses, etc.) and messages are stored in the databases of our anonymous instant messaging and email software, which is provided to Bath Nightline by our umbrella organisation, the Nightline Association.

Volunteers at Bath Nightline cannot access any personal data, and the Nightline Association does not access the databases (unless requested by us as outlined below), except in exceptional circumstances where system administrators must undertake system maintenance.

In certain circumstances, Nightline may share personal data with a third party.

During the process of recruiting new volunteers, we collect some information from everyone who registers their interest in volunteering. The data collected includes the following:
• Name
• Email address
• Phone number
• Address
• Degree
• Gender identity and pronouns
Once the recruiting procedure is over, we retain the information of unsuccessful applicants for 1 year. Details of applicants’ gender identity and degree course may be shared with the University of Bath and Bath Students’ Union in line with our agreement to share some basic demographic information with these stakeholders. No other information is shared with anyone outside of Nightline before, during or after the recruitment drive.
For our volunteers, we store this data (along with other relevant information such as the number of shifts you complete and ongoing training sessions you attend) for as long as you are a volunteer and for 2 years after you leave the Nightline.
We collect this information in order to administer the recruitment process and effectively run the service.

When you visit the Bath Nightline website, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the website, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information”.

“Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer’s hard drive.
Bath Nightline uses “cookies” to collect information. You can opt-out of cookies but you are required to do this proactively by changing the setting in your browser – unfortunately, we cannot control this on your behalf. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
Anonymised data from visitors to our website will be collected, including your interaction with our website and cookies to track with pages you visit. This helps us to analyse how our website is being used and how we can improve.
Data Retention Periods
We only keep your information for as long as is necessary for the relevant purpose. We use a number of criteria for determining the retention period, including obligations under law, our legitimate interests, and consideration of the original purpose we collected it for.