Privacy Policy and Data Use

At the Rosemere Cancer Foundation we are committed to protecting and respecting your privacy.

This Policy explains when and why we collect personal information about our supporters, how we use it, the conditions under which we may disclose it to others and how we keep it secure.  It is reviewed regularly and may be changed from time to time so please check occasionally to ensure you are happy with those changes.  By using our website you are agreeing to be bound by this Policy.

If you have any questions about our Privacy Policy you can email info@rosemere.org.uk, call us on 01772 522913 or write to us at Rosemere Cancer Foundation, Rosemere Cancer Centre, Royal Preston Hospital, Sharoe Green Lane, Preston PR2 9HT.


Who are we?
The Rosemere Cancer Foundation is a registered charity (1131583) which supports world class cancer treatment in Lancashire and South Cumbria.  We are based in the region’s specialist Cancer Centre and are part of the endowment funds of Lancashire Teaching Hospitals NHS Foundation Trust.  Lancashire Teaching Hospitals NHS Foundation Trust is a registered Data Controller, ICO registration Z6929649.


How do we collect information about you?
We collect information about you when you visit our website, attend one of our fundraising events, purchase our merchandise, make a donation, take part in our lottery, sign up to our newsletters or request to become a Friend of Rosemere or join our 500 Club.  We never purchase or swap data lists with other organizations and the Rosemere Cancer Foundation does not have access to patient lists or the medical files of individuals.


What type of information do we collect?
We collect both personal and non personal information.  Personal information may include your name, address, phone number, email address and where appropriate your date of birth and bank account details.  Non personal information may include your IP address, pages accessed via our website or files downloaded and information about your hobbies and interests.  This information does not identify individuals or their contact details.  Our legal basis for processing your information under GDPR is consent of the data subject.


How do we use your information?

We use the information you provide to:

  • Acknowledge your donation and thank you for your support
  • Process financial transactions such as donations, sales, and event entries
  • Fulfill your requests for information
  • Process your application for membership of the Friends of Rosemere or 500 Club
  • Fulfill orders for merchandise and deliver products
  • Manage volunteer activities
  • With your permission, to provide you with information about our fundraising activities and how we spend the monies raised for the benefit of patients
  • Carry out research into the interests and habits of our supporters to improve our fundraising strategy and help us provide our supporters with a better service and experience
  • Prevent or detect fraud and abuse of our website
  • Enable trusted, contracted third parties such as data base providers and mailing houses to undertake specialist tasks on our behalf


How long do we keep your information?
Your information will be retained for audit purposes for 6 years, after which it will be securely archived.  We archive your information so that donations made at a later date can be linked to your previous giving history and to allow us to undertake anonymized research into giving trends to better inform our fundraising strategies.  However, at no time will we contact you unless we have your express consent to do so. 


Who has access to your information?
We will not rent or sell your information or share it with third parties for marketing purposes.  We will only share your information with selected third parties if we are legally required to do so by law or we are working with carefully selected and trusted third parties contracted to undertake work on our behalf.  These may include mailing houses, financial institutions and IT firms who are sending postal mail, emails and text messages on our behalf, processing card payments or maintaining our database.  We will only pass on personal data to such partners if they have signed a contract which requires them to abide by General Data Protection Regulations.


How do we store and protect your information?
The Rosemere Cancer Foundation takes your privacy very seriously and once we receive your personal information we make our best effort to ensure its security on our systems.

We hold information on secure computers with servers located in the UK which operate within the NHS security systems of Lancashire Teaching Hospitals NHS Foundation Trust.  We use secure server software to encrypt the financial and personal information you input on line before it is sent to us.  All information stored on paper files such as event entry forms are held in secure locations within Royal Preston Hospital.  Our staff are required to protect your information under the NHS Confidentiality Code of Conduct and they will inform you of how your information may be used and allow you to decide if and how we may use that information.
 

Your rights
Under General Data Protection Regulations you have rights over your data and the way in which we use it.  You have a right in certain circumstances to have inaccurate personal data amended, blocked, erased or destroyed.  You have the right to prevent your data being used for marketing purposes and you have the right to access a copy of the data we hold about you.  To exercise these rights please contact the Chief Officer, Rosemere Cancer Foundation, Rosemere Cancer Centre, Royal Preston Hospital, Sharoe Green Lane, Preston PR2 9HT or email info@rosemere.org.uk.

For more information on your rights under General Data Protection Regulations please go to the website of the Information Commissioner’s Office at www.ico.uk.


We keep this policy under regular review.  This policy was last updated in April 2018.