Privacy policy and use of Cookies
Last updated July 2023.
Please read this policy carefully to understand how we collect, use and store your personal data.
Introduction
St Catherine’s Hospice (Lancashire) Ltd is a charitable company registered in England and Wales with registered company number 01602467 and registered charity number 512186.
We take your privacy very seriously and are committed to protecting your personal information.
This privacy statement explains how we, St Catherine’s (Lancashire) Ltd, and our affiliated trading company St Catherine’s Trading, our lottery company St Catherine’s Promotions and The Mill (St Catherine’s Social Enterprise) may collect and use the information you give us. Herein referred to as St Catherine’s.
If you have any questions regarding our privacy statement, please write to:
The Quality Standards Officer
Or for patient privacy concerns download our information sheet ‘What we do with information about you’ or please contact the Caldicott Guardian.
The contact details are St Catherine’s Hospice, Lostock Lane, Lostock Hall, Preston
PR5 5XU or call on: 01772 629171.
This statement includes:
- How we collect information
- Where we collect information from
- What personal information we collect
- When we process Special Category Data
- How we will use your personal information
- Children’s data
- How we keep your data safe and who has access to it
- Who we share your personal data with
- How we keep your information up-to-date
- How long we keep your information for
- Our Lawful Basis for processing your personal data
- What ways we use to contact supporters
- Personalisation and Profiling
- Your right to your information
- Complaints
- The Fundraising Preference Service
- Other websites
- Changes to this policy
-
How we collect information
We may collect information about you whenever you interact with us, for example when you:
- Enquire about our events or services, visit our website or donate to us
- Sign up to receive updates on a campaign or our events
- Sending key administrative communications to keep supporters informed and up to date
- Post content to our website/social media sites (including Facebook)
- Volunteer for us
- Attend a meeting with us and provide us with information about you
- Take part in one of our events (see below) or fundraise on our behalf
- Contact us through the following channels: online, email, phone, SMS, social media or post
- Safeguarding
- Performing supporter analysis, profiling and wealth screening to maximise charitable income and ensure we understand the demography of our supporters and contact them in appropriate ways
- Carrying out market research, such as sending out surveys and conducting focus groups
We may also receive information about you from third parties or other healthcare providers – but only if you’ve given them permission to share your information.
We may take photographs and/or audio-visual footage during an event and these may be published. Our legal basis for doing this without signed consent is known as legitimate interests (see point 9 below). We will however always give you the choice to opt out of having your photograph taken and published. Notices explaining our position are displayed throughout a venue and a compare, where applicable, will communicate those instructions.
-
Where we collect information from
St Catherine’s Hospice may collect information in the following ways:
When information is directly given to us
You may provide your details to us when you request specific information or when make a donation or campaign for us or participate in one of our events. We may work with a professional fundraising agency which will collect this information on our behalf, but we are still responsible for your data.
When information is given to us indirectly
Your information may be shared with us when you use other fundraising sites, and provide your consent to be contacted by St Catherine’s. For example, if you are fundraising for us via Just Giving or Virgin Money. These organisations will have their own privacy policies so please do ensure you understand this when providing your data.
When you have given other organisations permission to share it
You may have provided your details to another organisation that works with St Catherine’s. For example, in order to sign up to the lottery or to purchase tickets for an event. However, when working with other organisations, we work to ensure it’s completely clear to you that your information will be shared with St Catherine’s.
Social media
You might give us permission to access information from messaging services like Facebook and Twitter, to collect or receive information from this website to provide measurement services and target ads. This will depend on your settings or the privacy policies for the particular social media site. You can opt out of the collection and use of information for ad targeting through WebChoices or through YourOnlineChoices.
When you are using our website we collect information
Upon visiting our website, information about your visit is recorded and stored. See above to read about our use of cookies for more details.
-
What categories of personal information we collect
The type and quantity of information we collect and how we use it depends on why you are providing it.
If you support us, for example by making a donation, volunteering, registering to fundraise, signing up for an event or campaigning for us, we may collect where relevant:
- Your name
- Your contact details (full address, email address and phone number)
- Your date of birth
- Your bank or credit card details (only if you are paying for an event, buying from our shops or making a donation)
- Your photograph(s)/audio-visual content featuring you
-
When we process Special Category Data
Certain categories of personal information are regarded by the law as more sensitive than others.
This is known as ‘special category’ or ‘sensitive personal data’ and covers things like information about your health, ethnic origin, religious beliefs, political opinions or any genetic or biometric data that is used to identify you.
We do not usually collect Special Category Data about our supporters unless there is a clear reason for doing so, such as participation in a marathon or similar fundraising event or where we need this information to ensure that we provide appropriate facilities or medical support to enable you to safely participate. We may also process Special Category Data if you make the information public or if you tell us about these details in the course of our relationship with you.
We will always make it clear what Special Category Data we are processing and why when we ask for this data.
-
How we will use your personal information
We will use your personal information in a number of ways, including for the following:
- To provide you with the services or any information you have requested
- To update you about any changes to our services
- To administer your donation, including Gift Aid processing
- To maintain our organisational records and ensure we have your most up-to-date marketing preferences
- To help us improve our services, campaigns or information-offering
- To analyse and improve the operation of our website
- To invite you to participate in voluntary surveys or research
- To contact you where you have been identified as a contact person for an organisation, such as a school (if we obtain your contact details in this way, we will only use them to contact you in the ways in which you have agreed to be contacted)
- To use for monitoring and contact tracing purposes during a pandemic, as required
- For more information download our information sheet ‘What we do with information about you’.
If you have previously opted-in to receiving communications from us but would now like to opt-out, please write to St Catherine’s Hospice, Lostock Lane, Lostock Hall, Preston, PR55XU or call us on 01772 629171. If you would like to update us on how you receive information from us, please click here to let us know your preferences.
-
Children’s data
While we do not actively collect information from children (under-16s), we appreciate that our supporters are of all ages. Where appropriate, we will always ask for consent from a parent or guardian to collect information about children. All St Catherine’s events will have clear rules on whether or not children can take part and the collection of data will be managed in accordance with each individual event, with appropriate safeguards in place.
-
How we keep your data safe and who has access to it?
We place great importance on the security of your personal information and will always try to take appropriate precautions to protect it.
We ensure that there are appropriate technical controls in place to protect your personal details. For example, we use encryption technology on our websites and carry out regular security reviews on our network.
We always ensure only authorised personnel have access to your information i.e. St Catherine’s staff, volunteers or contractors and that they are appropriately trained to manage your data.
Despite all of our precautions however, no data transmission over the internet can be guaranteed to be 100% secure. So, while we strive to protect your personal information, we cannot guarantee the security of any information you disclose to us online, and you must understand that you do so at your own risk. However, any payment card details (such as credit or debit cards) we receive through our website are passed securely to our payment processing providers who meet the required Payment Card Industry Data Security Standard.
-
Who we share your personal data with
The personal information we collect about you will mainly be used by our staff (and volunteers) at St Catherine’s so that they can support you.
We may share patient data with other healthcare providers with the patient’s consent.
We may sometimes also be legally required to share it with local authorities and our regulator, the Care Quality Commission.
We may occasionally use the services of a supplier based outside the European Economic Area (EEA), which in turn might lead to your personal information being transferred, processed and stored outside the EEA.
We will never sell or share your personal information with organisations so that they can contact you for any marketing activities. Nor do we sell any information about your web browsing activity.
St Catherine’s may, however, share your information with our trusted partners and suppliers who work with us or on our behalf to deliver our services, but processing of this information is always carried out under our instruction. We make sure that they store the data securely, delete it when they no longer need it and never use it for any other purposes. Some examples of where we may share your information are with our fulfilment partners who help to create and send information to you to reduce our costs and with our partners who help us to process donations and claim Gift Aid.
We enter into contracts with these service providers that require them to comply with Data Protection Laws (such as UK GDPR and Data Protection Act 2018) and ensure that they have appropriate controls in place to secure your information.
-
How we keep your information up-to-date
Where possible, we try to keep your records up to date; for example, using the Post Office’s National Change of Address database. However, we really appreciate it if you let us know if your contact details change.
-
How long we keep your information for
We will hold your personal information on our systems for as long as is necessary for the relevant activity, for example we will keep a record of any donations you have made for at least six years.
After such a period, within our database, we anonymise records so we can reference behavioural patterns in our data analytics, but the information is no longer personal to you.
We may however keep certain data for a longer period, such as data in connection to Legacy Gifts or Safeguarding. Legacy income is vital to sustaining St Catherine’s work. We may keep data you provide to us indefinitely, both to administer legacy gifts and to communicate effectively with the families of people leaving us legacies. This also enables us to identify and analyse the source of legacy income we receive.
If you ask us to stop sending you marketing materials, we will keep a record of your contact details and appropriate information to enable us to comply with your request not to be contacted by us.
Where you contribute material to us, e.g. through user generated content or in response to a particular campaign, we will generally only keep your content for as long as is reasonably required for the purpose(s) for which it was submitted, unless otherwise stated at the point of collection.
-
Our Lawful Basis for processing your personal data
Data privacy law requires us to have one or more lawful grounds to process your personal information. The following grounds are relevant to our use of your information:
- Although in many cases we will seek consent to process your personal data, in some instances we may process your information without consent when we are legally allowed to do so. This will only be where it is in our legitimate interests to do so and where we are confident that such processing is not likely to prejudice your legitimate interests or rights and freedoms. Where we are processing your personal data on the basis of consent that you have given us, you are entitled to withdraw that consent at any time such that we can no longer rely on it as a basis for continuing to process your personal information.
- To protect your vital interests. For example to ensure you get urgent medical assistance if needed when taking part in a fundraising event.
- Where we have a contractual relationship with you. Though the majority of our relationships are voluntary, if we enter into a contract with you (such as when you purchase something from one of our shops) we will process information to administer that contract.
- Legal obligations. We will sometimes pass on personal information to comply with legal obligations such as providing tax and gift aid information to HMRC.
- “Legitimate Interests”. Where it is appropriate we rely on the processing being in our legitimate interests, provided we are confident that such processing is not likely to override your own legitimate interests or rights and freedoms. For example, sending you marketing and fundraising post, provided this is done in an unobtrusive manner.
-
What ways we use to contact supporters:
- Email/text marketing: If you provide your email address and/or mobile phone number we may contact you for marketing purposes by email or text message. By subscribing to St Catherine’s emails or opting in to email communication from St Catherine’s you grant us the right to use the email for email marketing.
- Post: If you have provided us with your postal address we may send you our twice yearly newsletter about our work unless you have told us that you would prefer not to receive such information, or we receive a notification from the Fundraising Preference Service (see section 16) that you have requested marketing communications to stop.
- Telephone: If you have provided us with your number it will only be used to contact you in response to an event or an appointment or other administrative purpose. St Catherine’s does not make Direct Marketing calls.
You retain control of how we use your data -it is always your decision as to whether you want to receive information about how we raise funds and the ways you can get involved. In some circumstances we may legally be required to retain your personal information for audit purposes however, this will be discussed with you depending on your requirements.
If you do not want us to use your personal information in these ways please call us on 01772 629171 or email adminmail@stcatherines.co.uk.
-
Personalisation and profiling
We want to improve how we communicate with you and the information we provide through our website, services, products and information. To do this we sometimes use profiling and screening methods so that we can better understand our supporters, your preferences and needs in order to provide a better experience for you.
We may carry out targeted fundraising activities using profiling techniques based on the information that we hold about you. We may also work with third party organisations who provide additional insight, this may include providing wealth screening information or general information about you that is publicly available.
This information can be appended to the information that you have provided which allows us to use our resources more effectively, by better understanding the background of our supporters and making appropriate requests based on what may interest them and their capacity to give.
For more information on how we work with third parties, see section 1.
-
Your right to your information
-
The right to access your personal information
You have the right to request a copy of the information we hold about you. If you want to access your information we will provide a copy of your personal information within 30 days of receiving the written request. A fee is not payable however an administrative charge may apply if the amount of effort exceeds that deemed reasonable.
The right to edit and update your personal information
The accuracy of your personal information is important to us. You can edit your personal information including your address and contact details at any time.
The right to request to have your personal information deleted
You have the right to request the deletion of your personal information which we will review on a case by case basis.
The right to restrict processing of your personal information
You have the right to ‘block’ or suppress processing of your personal data. However, we will continue to store your data but not further process it. We do this by retaining just enough of your personal information so we can ensure that the restriction is respected in the future.
The right to object
You have the right to object to your personal information being processed for marketing (including profiling) and for research purposes i.e. you have the right to opt out. Each time we send you a marketing communication we will inform you of how you can do this.
Should you wish to exercise these rights please address requests to: St. Catherine’s Hospice, Lostock Lane, Lostock Hall, Preston, PR5 5XU, email adminmail@stcatherines.co.uk or call 01772 629171.
Any changes you have requested may take 28 days before they take effect.
If we process your personal information for the exercise or defence of legal claims or we can demonstrate compelling grounds that override your rights and freedoms we may not be able to fulfil your request. However we will contact you to discuss further.
For more information on these rights please read the relevant guidance issued by the ICO.
-
Complaints Policy
If you would like to raise a concern or make a complaint about how we process your personal data, or about any of the services provided by St. Catherine’s, we encourage you to speak to or write to the manager of the team concerned. For more information, download a copy of our Comments, Compliments and Complaints leaflet, and you can see our Complaints Policy here.
-
The Fundraising Preference Service
The Fundraising Preference Service (FPS) is a website-based service that can help members of the public control the communications they receive from charities.
By entering your details on the Fundraising Preference Service website, or by calling the helpline on 0300 3033 517,you can choose to stop email, telephone calls, addressed post and/or text messages directed to you personally from a selected charity or charities.
Please note that we may retain your marketing preferences for a lifetime if you have registered with the Fundraising Preference Service in order to prevent marketing from all UK charities. This is so that we can ensure we never send marketing material to you per your request
-
Other websites
This Privacy Statement only relates to information that we obtain from you. If you visit a website operated by a third party through a link included on our website your information may be used differently by the operator of the linked website. You are advised to read their Privacy Statement.
-
Changes to this Privacy Statement
This statement may change from time to time. If we make any significant changes to this policy, we will publicise these changes clearly on our website.
Please do revisit this statement each time you consider giving your personal information to St Catherine’s.
All hospice policies are available to read on request.