What is personal data?
By personal data we mean any information that might allow you to be identified, such as your name, address, date of birth, credit card details, I.P. address, photo or video image or voice recording. For our patients, some of this data will be sensitive and relate to their health and wellbeing, ethnicity and religious views.
Who are we?
We are St Elizabeth Hospice (Charity No. 289154), a charity that supports people with incurable illness in the East Suffolk area. Our registered office address is:
565 Foxhall Road, Ipswich, Suffolk, IP3 8LX
How do we collect personal data from you?
We may collect personal information about you when you take part in one of our fundraising events or challenges, make a donation, play our lottery or raffles, buy items in our shops, apply to work or volunteer with us or use our website. If you are referred to one of our clinical services we will collect data from you and may also receive it from other healthcare providers. Our current lawful basis for collecting personal information is contained within Schedules 2 and 3 to the Data Protection Act (1998) and from May 25th 2018 this will come under the new General Data Protection Regulation.
What type of information is collected about you?
Fundraising, visiting our shops, and playing our lottery
The personal information we collect about you for the purposes of our fundraising, lottery and retail activities might include your name, address, email, phone number, date of birth, I.P. address, photo or video image and financial information such as credit card details. You may appear in still images or video footage using Closed Circuit Television (CCTV) that is used on some hospice sites for security purposes.
Volunteering with us
If you volunteer with us we will collect your name and contact details. We may also take still images of you or video footage using Closed Circuit Television (CCTV) on some hospice sites.
Working for us
If you apply for or take a job with us, we will store your contact information, bank details, and keep records of your employment history. You may appear in still images or video footage using Closed Circuit Television (CCTV) that is used on some hospice sites for security purposes.
If you are a patient
If you use our clinical services we will need to collect information such as your name, age, address and other protected characteristics. In order to provide complete care we may also collect some information about family members and carers. If you stay on or visit our premises, such as our Inpatient Unit, we may collect your image on CCTV. It may also be necessary to take still images of you for medical purposes. If you call our OneCall Service your call will be recorded for training and quality purposes. We also receive data about our patients and their families and carers from other healthcare providers.
Using our website
If you use our website, we will store data about your internet browser, I.P. address, the timings of your visits, and a record of which pages you looked at.
Use of ‘cookies’
Like many other websites, the St Elizabeth Hospice websites use ‘cookies’. Cookies are small files stored on your computer that allow websites to recognise you when you visit. They store data about your browsing history but will not identify you as an individual. This helps us to improve our website and deliver a better more personalised service.
You can switch off cookies in your browser preferences but doing so may result in a loss of functionality when using our website. To find out more about cookies on this website, please see our Cookies policy page. This page also includes instructions on how to disable cookies if you don’t want them to be used.
By using our website and services you agree to be bound by the terms of this statement.
We take a proactive approach to user privacy and ensure the necessary steps are taken to protect the privacy of our website users throughout their visiting experience. This website complies with all UK legislation and requirements for user privacy. The policy will be reviewed and updated in line with any subsequent legislation.
How we use your information
We may use your information for any of the following depending on our relationship with you.
For our fundraising, retail and lottery services we may collect data in order to provide you with products and services (sometimes as part of a contract), process a donation you have made, to send you newsletters and other communications about our work or to allow you to take part in events.
We collect personal data about job applicants and employees for administrative purposes and in order to comply with employment and safeguarding legislation, such as referrals to the Disclosure and Barring Service. We collect personal data from our volunteers for administrative purposes and to comply with safeguarding legislation, such as referrals to the Disclosure and Barring Service.
When we collect data from patients and their families and carers, we do so in order to provide care to them and protect their wellbeing. We also collect and store it for the purposes of audit, quality control, and incident reporting.
We process information for certain legitimate business purposes which include some or all of the following:
- Where the processing enables us to embrace, modify, personalise or otherwise improve our services/communications for the benefit of our customers.
- To identify and prevent fraud.
- To enhance the security of our network and information systems.
- To better understand how people interact with our website.
- To provide postal communications which we think will be of interest to you.
- To determine the effectiveness of campaigns and events
Whenever we process data for these purposes we will ensure that we always keep your Personal Data rights in high regard and take account of these rights. You have the right to object to processing and also access to your information if you wish by emailing firstname.lastname@example.org.
Who has access to your information?
We will never sell or swap your details with third parties. We may share data you provide with trusted third parties, subcontractors, our regulators, and with law enforcement authorities. We may share patient data with other healthcare providers with the patient’s consent. We may sometimes also be legally required to share it with local authorities and our regulator, the Care Quality Commission.
Your consent is important
For direct marketing communications we collect data only with your explicit consent, which you may withdraw at any time. We will enable you to record your preferences using tick boxes at various points when we communicate with you.
On correspondence requesting consent from you we will ask what types of communication you would like. Please see below further detail on what you would expect to receive for each type of communication:
Fundraising and Events
- Requests for financial support through mailings such as in memory appeals.
- Updates on new and existing fundraising initiatives.
- Information on a selection of hospice organised events i.e. Midnight Walk, Bubblerush etc.
- Information on places in challenge events i.e. London Marathon, bespoke walks and bike rides etc.
Hospice Lottery and Raffles
- Information regarding Your Hospice Lottery.
- Raffle tickets for the hospice raffle.
- Volunteering information including current vacancies.
- Information about various hospice services both existing and new developments.
- Newsletter mailings i.e. time magazine and any interim updates from the hospice.
- Information about various retail activities
Accessing and updating your information
We care about the accuracy of the information we hold about you. If you believe any information about you is incorrect or out of date, please contact us.
Fundraising and Retail : 01473 723600 or email – email@example.com
Lottery: 01473 707008 or email – firstname.lastname@example.org
Volunteering: 01473 707016 or email – email@example.com
For patients, please contact our OneCall team on 0800 5670111
At St Elizabeth Hospice we take your security and privacy seriously. When we collect your personal information we use a variety of technical processes to prevent unauthorised access including firewalls, digital surveillance, and encryption.
Any sensitive information you send to us (such as credit card details) will be encrypted. Non-sensitive details (your email address etc.) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk.
If you’re 16 or under
In some circumstances we may need to know if you are aged 16 or under and may refuse certain services, products or events unless we have your parent/guardian’s permission.
Your right to lodge a complaint with a supervisory authority
If you believe that we breached your privacy in any way, we urge you in the first instance to contact our Data Protection Officer. If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office at the address below:
Information Commissioner’s Office
Tel: 0303 123 1113 (local rate)
01625 545 745 (national rate)
Changes to this policy
This policy was last updated April 2018