Privacy and Data Protection Statement

Pendleside Hospice is committed to protecting your privacy. This statement explains how we collect and use the personal information you provide to us whether online or via phone, mobile, email, letter or other correspondence.

By using our website, any of our services, or providing us with any personal information we will assume you are agreeing to your information being used and disclosed in the ways described in this policy.

Data Protection Act

In carrying out our day-to-day activities we process and store personal information relating to our service users and supporters and we are therefore required to adhere to the requirements of the General Data Protection Regulations (GDPR). We take our responsibilities under this Act very seriously and we ensure the personal information we obtain is held, used, transferred and otherwise processed in accordance with that Act and all other applicable data protection laws and regulations including, but not limited to, the Privacy and Electronic Communication Regulations.

See the section below on information about your rights.

What personal information do we collect?

Personal information is information that can be used to identify you. It can include your name, date of birth, email address, postal address, telephone number, mobile telephone number, fax number, bank account details, credit/debit card details and whether you are a UK tax payer so that we can claim Gift Aid (please rest assured we do not have access to information about your actual tax payments, just whether you are a tax payer). We collect personal information about you when you access our services, ask about our activities, register with us, apply for a job with us, make a donation to us, volunteer, register for an event, engage with our social media, play our lottery, order products and services (such as publications and email newsletters), or otherwise give us personal information.

If you do nothing other than read pages or download information from our website, we may gather information about this use, such as which pages are most visited and which events or activities are of most interest. This information can be used to help us improve our website and services and ensure we provide you with the best service. Wherever possible, the information we use for this purpose will be aggregated or anonymised i.e. it will not identify you as an individual visitor to our website. More information can be found in the section below entitled “Our Website”.

We do not usually collect “sensitive personal information” about you unless there is a clear reason for doing so, such as participation in an event where we need this information to ensure we provide appropriate facilities for you. We may collect health information if you tell us about your experiences of the Hospice (for example, if you act as a case study for us); however, we will make it clear to you when collecting this information as to what we are collecting, why and how we will use it.

If you are a patient then the leaflet ‘Protection and Use of Personal Information’ will apply as well as this statement.

Credit/Debit card payment information

Following the completion of your transaction, we do not store your credit or debit card details. All card details and validation codes are securely destroyed once the payment or donation has been processed. Only those staff authorised to process payments will be able to see your card details. If we receive an e-mail containing any credit or debit card details, it will be immediately deleted, no payment will be taken and you will be notified about this.

To process ‘one off’ payments made through our website we use a third party called Sage Pay. Sage Pay may use, retain and disclose your personal information and credit card details for this purpose and as set out in their privacy policy, including transferring your data outside of the European Economic Area (EEA). Where such transfer occurs, Sage Pay ensures your data is adequately protected under UK data protection law. Click on the link below to be taken to the relevant Sage web pages:

https://www.sagepay.co.uk/policies/privacy-policy

To process payments made over the phone or via direct mail we use a third party called Worldpay (UK) Limited. Worldpay (UK) Limited may use, retain and disclose your personal information as set out in their privacy policy, including transferring your data outside of the European Economic Area (EEA). Where such transfer occurs, Worldpay (UK) Limited ensure your data is adequately protected under UK data protection law. Click on the link below to be taken to the relevant Worldpay web pages: http://www.worldpay.com/uk/privacy-policy

Why do we collect your information and how do we use it?

We may collect your personal information for a number of reasons, such as:

to provide you with the services, products or information you have requested;
to process any donation(s) we may receive from you;
to ask you to help us raise money or donate money to our charity;
to provide you with information about our work or our activities;
to send you the items you have ordered through our shop;
to invite you to participate in surveys or research;
for administration purposes e.g. we may contact you about a donation you have made or event you have expressed an interest in or registered for;
for internal record keeping, such as the management of feedback or complaints;
to analyse and improve the services we offer;
to provide you with details of any prizes you win in our lottery or raffles;
to check on your preferences from time to time to ensure they are up to date
where it is required or authorised by law; and
where we are required to monitor financial activity and report suspected fraud to the appropriate authorities.

We may contact you for marketing purposes by mail, e-mail, telephone, mobile telephone, text or social messaging; in some cases, this will require getting your permission. We may also send you service communications via e-mail, text or social posting, for example where you place an order for goods or services on our website.

To comply with our obligations as a charity, we must take reasonable and appropriate steps to know who our donors are, particularly where significant sums are being donated. This means that we may conduct research, including accessing information which is already publicly available, on prospective donors, partners or volunteers to ensure it would be right for us to accept support whether that is from an individual or organisation. This will help to give assurance that the donation is not from an inappropriate source and to safeguard our reputation. This does not mean that we will question every donation, nor that we will research lots of personal and other details about every donor. Any information we do collect for this purpose will only consist of what is necessary for us to meet these requirements and will be processed in line with your rights. See section 13 below for information about your rights.

It is your choice on the type of communications and information you receive about our charity and the ways in which you can get involved. You can change your mind at any time by contacting us at Pendleside Hospice, Colne Road, Burnley, Lancashire, BB10 2LW. Email: [email protected] or calling 01282 440100.

We will not use your information for marketing purposes if you have asked us not to. However, we will retain your details on a suppression list to help ensure we do not continue to contact you.

Your information may be used to ensure that Pendleside Hospice complies with the Fundraising Regulator’s Code of Fundraising Practice, which stipulates that we must take steps to assess and manage risks to our work and reputation with regard to certain levels of donation. More details can be found at: www.fundraisingregulator.org.uk.

We have processes for maintaining our supporter and income generation data to ensure it is up to date; this can help us target our resources more effectively through gaining an insight into the background of our supporters and helping us to build relationships that are appropriate to their interests and capacity to give.

Information sharing and disclosure

We will not sell or swap your information with any third party.

We may share your information with our data processors. These are trusted partner organisations that work with us in connection with our charitable purposes; and other entities that act as fundraisers for us, sell our products or provide us with information and marketing (subject to your communication preferences and our internal policies and procedures). All our trusted partners are required to comply with data protection laws and our high standards and are only allowed to process your information in strict compliance with our instructions. We will always make sure appropriate contracts and controls are in place and we regularly monitor all our partners to ensure their compliance.

We may disclose your personal information to third parties if we are required to do so through a legal obligation (for example to the police or a government body); to enable us to enforce or apply our terms and conditions or rights under an agreement; or to protect us, for example, in the case of suspected fraud or defamation.

We do not share your information for any other purposes.

Certain third party organisations collect data on our behalf as well as for their own use. We may receive your personal details from third party organisations for our marketing purposes where you have consented for this information to be shared.

The accuracy of your information

We aim to ensure that all information we hold about you is accurate and, where necessary, kept up to date. If any of the information we hold about you is inaccurate and either you advise us or we become otherwise aware, we will ensure it is amended and updated as soon as possible.

Under 16s

If you are aged 16 or under and would like to participate in an event, make a donation or get involved with us, please make sure that you have your parent/guardian’s permission before giving us your personal information. When we collect information about a child or young person, we will make it clear as to the reasons for collecting this information and how it will be used.

Vulnerable circumstances policy

We recognise the importance of protecting our vulnerable supporters and follow the guidance issued by the Institute of Fundraising on treating donors fairly. We believe this helps to support our staff and fundraisers who come into contact with supporters in providing high-quality customer care, ensuring anyone donating to Pendleside Hospice is in a position to make a free and informed decision. Access the Institute of Fundraising’s website - for more guidance.

Storing your information

Although most of the information we store and process stays within the UK, some information may be transferred to countries outside the European Economic Area. This may occur if, for example, one of our trusted partners’ servers are located in a country outside the EU. These countries may not have similar data protection laws to the UK however, we will take steps with the aim of ensuring your privacy continues to be protected as outlined in this privacy policy.

We will keep your information for as long as required to enable us to operate our services but we will not keep your information for any longer than is necessary. We will take into consideration our legal obligations and tax and accounting rules when determining how long we should retain your information. When we no longer need to retain your information we will ensure it is securely disposed of, at the appropriate time, in accordance with our Records Management & Data Assurance policy.

Our website

We take appropriate technical measures to protect your personal information including making a regular backup of our system and data.

We have measures in place to make sure any personal information we collect is secure. Even though we take appropriate steps to protect your security, you should remember that data transmission over the internet cannot always be guaranteed as 100% secure.

Our website contains links to other websites belonging to third parties and we sometimes choose to participate in social networking sites including but not limited to Twitter and Facebook. We may also include content from sites such as these on our website, however, would advise that we do not have any control over the privacy practices of these other sites. You should make sure when you leave our site that you have read and understood that site’s privacy policy in addition to our own.

Cookies

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

We only use one type of cookie on our site but it does not collect any personal information about you; we have detailed below the Cookie set and what it does. Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit http://www.allaboutcookies.org.

The cookie we use on this site and what we use it for is described below. Currently we operate an ‘implied consent’ policy which means that we assume you are happy with this usage. If you are not happy, then you should either not use this site, or you should delete Pendleside cookies having visited the site, or you should browse the site using your browser’s anonymous usage setting (called “Incognito” in Chrome, “InPrivate” for Internet Explorer, "Private Browsing" in Firefox and Safari etc.).

The only cookies we use are cookieNotice, pxRatio and basketID, which is essential for parts of the site to operate. You may delete and block all cookies from this site, but parts of the site may then not work.

More information on session cookies and what they are used for at: http://www.allaboutcookies.org/cookies/session-cookies-used-for.html

Changes to the policy

This policy replaces all previous versions and is correct as of March 2018. We will regularly review and update this Privacy and Data Protection Statement and will update, modify, add or remove sections at our discretion. Any changes will be notified to you either via e-mail or through an announcement on our website and your continued use of our website, any of our services and/or the continued provision of personal information after we have posted the changes to these terms will be taken to mean you are in agreement with those changes.

Your rights

You have the right to:

request a copy of the information we hold about you;
update or amend the information we hold about you if it is wrong;
change your communication preferences at any time;
ask us to remove your personal information from our records;
object to the processing of your information for marketing purposes; or
raise a concern or complaint about the way in which your information is being used.

If you wish to find out more about these rights or obtain a copy of the information we hold about you, please contact us at:

The Chief Executive

Pendleside Hospice
Colne Road
Reedley
Burnley
Lancashire
BB10 2LW

Call: 01282 440100 or email [email protected]

Privacy queries

If you have any questions or queries about this Privacy and Data Protection Statement, please contact our Data Protection Officer using the above address and contact details.

For Service User/Patient queries please contact us using the information below:

The Caldicott Guardian

Pendleside Hospice
Colne Road
Reedley
Burnley
Lancashire
BB10 2LW

Call: 01282 440100 or [email protected]

If your query is not resolved and you are dissatisfied with the outcome, or our procedures, you can contact the Information Commissioner's Office (ICO), for further guidance. https://ico.org.uk

Your medical and personal information

Pendleside Hospice takes seriously the need for confidentiality and safeguarding of personal information and the vitally important aspect of trust in a professional caring relationship. We also recognise the importance of sharing medical information about people in our care in order to prevent harm caused by not sharing information appropriately with other health and social care professionals. The information you give us may be recorded on both computer and paper records - and with your permission, we share that information with the following - according to each person's individual situation, for the purposes of their direct care:

General Practitioners(GPs)
Community Nursing and Integrated Care Teams
Macmillan Nurses
Colleagues at NHS Hospital Trusts
Lancashire County Council
Mental Health Services
Hospice Volunteers(information given to volunteers is on a strict 'need to know basis' - to ensure your safety and theirs)

All members of staff employed by these bodies are bound by legislation and by the common law duty of confidentiality which means that information that you provide to us must be held in confidence and not shared with anyone else unless:

They are legally obliged to disclose the information to another organisation or person
You provide consent to share the information with anyone else
Protocols are in place permitting partners to share information about you to support any intervention or service you provide

You should tell us if you would prefer us not to share your information.

Your medical information may also be used to support clinical audit, education or other work aimed to monitor the quality of care provided. However, all personal identifiers are removed to ensure confidentially and anonymity. We also keep the contact details of bereaved family members so that we can send a card when someone has died - and so we can invite these to memorial or other events in the future. Tell us if you would like to opt out of this further support and contact.

We are happy to give you copies of all written communications to GPs or others. Please tell us if you would like this. Your personal data will be held in secure conditions for eight years. Under the General Data Protection Regulations you have the right to request a copy of your information. Speak to a member of staff if you would like to do this.

Pendleside Hospice is committed to data protection and we have safeguards in place to ensure your information is properly looked after in line with current legislation, NHS codes of practice and professional codes of conduct.

If you have any concerns regarding the use of your medical or personal information or for any further information, please speak to a member of the clinical team.