All personal data that we obtain about you and/or any other person whose details you provide will be recorded, used, and protected by us in accordance with current data protection law and this Privacy Policy. We will primarily use the personal data for the following purposes:
- To provide the products and services you request (including taking payments) and to communicate with you in the event that any products or services requested are unavailable, or if there is a query or problem with your request, to process your application for a job or volunteer role with us
- charity fundraising. To administer any donations (including taking payments) you agree to make, including complying with Gift Aid requirements and to communicate with you in the event of a query
- personnel matters. To administer your employment or voluntary work where you become an employee or volunteer
- fraud prevention. To detect and reduce fraud and credit risk
- market research. To carry out market research so that we can improve the products and services we offer
- demographic analysis and preferencing. To create an individual profile for you (including analysing demographic and geographic information) so that we can enhance your experience and relationship with us, understand and respect your preferences and to provide information and details of relevant offers and opportunities where you have agreed to receive them. We may undertake in-house research and engage third party organisations such as fundraising agencies to help us identify people who may be able to support us with a larger gift or in other ways, using publicly available records. We may also collect information on your interests, for example board memberships, hobbies, or articles about you in the media. We use this information to tailor our communication with you and invite potential supporters to meetings, groups and events which may be of interest to you.
- charity regulation. To comply with our obligations as a charity
- website monitoring. To use IP addresses and monitor website use to identify locations, block disruptive use, record website traffic or personalise the way information is presented to you
Consent and lawful processing of personal data
The legal basis for the collection and use of your personal data is that you have given your consent and/or that it is in our legitimate interests to contact you. We need to do so in order to support Hospice needs in the area; your rights and freedoms are not prejudiced by this. Please see the table above for further information.
Disclosing your personal data
We do not sell personal data.
In order to provide our products and services, we may, occasionally, appoint other organisations to carry out some of the processing activities on our behalf. These may include, for example, technology hosts, event administration, printing companies and mailing houses. In these circumstances, we will ensure that your personal data is properly protected and that it is only used in accordance with this Privacy Policy and our instructions.
We use third party electronic payment providers such as World Pay to administer some transactions. They have their own privacy policies and we encourage you to read them.
On very rare occasion, we may be required to disclose your details to the police, regulatory bodies or legal advisors or to comply with a court order or a legal obligation. In these circumstances we would be careful to only provide information that we are required to provide.
SPECIAL CATEGORIES OF DATA
By the nature of what we do, we may need to process ‘special categories’ of data for clinical purposes. A special category of data would include details about your race or ethnicity, sex life, sexual orientation, and information about your health and genetic data.
St Gemma’s is a local, independent charity and we are not part of the NHS, but we do work very closely with all NHS services in Leeds. Clinical information is part of the NHS records system. This allows us to share information securely with your GP and other care professionals.
If you are a patient or service user, we may contact you with important information regarding your care or support available to you, in the way that you have requested.
If you are the next of kin of a patient, we may contact you in the event of the death of a patient with further information on our services, for example, to offer bereavement support.
If you have agreed to take part in a clinical research study, the information about your health and care may be provided to researchers running other research studies in this organisation and in other organisations. These organisations may be universities, NHS organisations or companies involved in health and care research in this country or abroad. Your information will only be used by organisations and researchers to conduct research in accordance with the UK Policy Framework for Health and Social Care Research.
In accordance with NHS guidance, the Hospice has an appointed Caldicott Guardian; a senior member of staff responsible for protecting patient confidentiality and enabling appropriate sharing. The sharing of sensitive personal information is strictly controlled by law. We will consult you before information about you is shared to ensure we act with your consent. If you are unable to consent for any reason, we will only share information where it is in your best interests to do so.
If you are unable to consent to the processing of your personal data for any reason, for example if you are physically or legally incapable of giving your consent we will only share your information on the basis that it is necessary in order to protect your vital interests, and it is also necessary in our legitimate interests in providing our proper care to you.
We may also process special categories of data about you if we need to assess your health needs such as to administer medicine to you or for the purposes of medical diagnosis. We would process your data in this way on the basis that it is necessary for the purposes of preventative or occupational medicine, or for medical diagnosis, as well as it being in our legitimate interests in providing our proper care to you.