St Richard’s Hospice offers free, expert care and support for adults with an illness that cannot be cured, which includes cancer and neurological, respiratory, cardiac and renal conditions. We also support patients’ loved ones and carers.
St Richard’s Hospice (Worcestershire) is a charity, registered in England and Wales (Charity Number 515668) and a Private Limited Company by guarantee, registered in England and Wales (company number 01850502), whose registered office is at Wildwood Drive.
If you have any questions regarding our Privacy Policy, please write to:
The Data Protection Officer
St Richard’s Hospice
Wildwood Drive, Worcester
WR5 2QT
Email:
How we use your data
In simple terms, your personal data is used to help us effectively deliver our charitable services or to help us raise funds for those charitable services. For information about how we use patient data please see Patients and individuals supported by St Richard’s.
We have summarised below the different reasons why we do this (these are often referred to as ‘purposes’). How we use your data for these purposes will depend on the nature of our relationship with you.
The legal grounds that are most relevant to St Richard’s Hospice use of your personal information are:
- Where you have provided specific Consent.
- Where we have a Legitimate Interest to do so that has been balanced and does not adversely affect your rights.
- Where we have a Contract in place that cannot be fulfilled without processing your information.
- Where we have a Legal Obligation to use or disclose information about you; or
- We believe it is in the Public Interest to, and this interest is supported by law.
Reasons why we process your data
Volunteering | To enable us to recruit volunteers. To support and train volunteers and ensure their safety. To enable us to communicate with volunteers and how they might support in other ways. |
Marketing and fundraising | To efficiently raise the voluntary income required to enable us to provide hospice care for people in Worcestershire. To send you marketing including updates about the hospice, volunteering and various ways you can support us including fundraising, events and playing our Lottery. To contact you about your regular donations. To process your donation and send you a thank you. To manage events and fundraising activities. To ensure as many supporters as possible maximise the value of their donations through Gift Aid and to recover Gift Aid where appropriate. |
Sponsorship | To process your donation and send you confirmation. For the recovery of Gift Aid (where you have completed a Gift Aid declaration). |
Raffles and lotteries | If you play our Lottery which is run in partnership with Worcestershire Hospices Lottery. When you sign up to Worcestershire Hospices Lottery, you will be given the choice to share your data with the hospice you support. Your name, address and marketing preferences are shared with us securely monthly and stored on our database. Your data will be treated in line with all other supporters as detailed in this notice. If you cease your contact with Worcestershire Hospices Lottery, your data will be shared once again so we can keep our database up to date. Please click here for more information. |
Legacies | To discuss a legacy or to manage and administer your legacy pledge. |
Events | To process registration fees and administer events, and to communicate with you about the event and, if applicable, the fundraising you agreed to take part in. To collect and store images and videography with the purposes to promote future fundraising events. To obtain relevant information on health or medical conditions, to support the safe participation of event participants and volunteers. |
Media and PR | Contacting you about press enquiries and case studies to help promote our work. |
Analysis, targeting and segmentation | To better understand our supporters, customers and volunteers, to tailor messages and marketing, to find new supporters, and to ensure that we are providing the best possible service. To use public sources to add to our analysis. To better understand how our online services, like our website, are being used so we can improve our services. More information is available in the Cookies section. |
Retail trading and online purchases | To fulfil orders for goods and services. |
Enquiries and complaints | To enable us to record, consider and reply to enquiries and complaints from members of the public or service users. |
Research | To conduct satisfaction surveys and other research to help design and improve our products, services and communications. To carry out research in relation to our supporters and services, including desk research to help identify potential high value supporters. |
Photography and videography | To archive and store images and videos for historical interest, to promote income generation activities, hospice services, and volunteer or career opportunities. |
Health and safety of staff, volunteers, service users, and visitors across our sites | To ensure your health and safety when visiting our sites, including keeping first aid records, a record of arrivals and departures, and the use of CCTV across all sites. |
How does the hospice protect data?
The hospice takes the security of your data seriously.
It has internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees in the proper performance of their duties.
Your information will be held securely within the relevant department and will only be accessed by those who have a legitimate reason for obtaining the information.
Detailed information relevant to you
Patients and individuals supported by St Richard’s
Supporters
We rely on the generosity of our supporters to continue to be able to provide our free services.
If you support us by, for example, making a donation, registering to fundraise, signing up for an event, buying something from our shops, or making an online order, we will collect:
- Your name
- Your contact details
- Your date of birth
- Your bank or credit card details.
Where it is appropriate we will also ask for:
- Information relating to your health (for example if you are taking part in a high-risk event)
- Why you have decided to donate to us. We will never make this question mandatory, and only want to know the answer if you are comfortable telling us
- Your Gift Aid details
- Your contact preferences.
We will use your data to:
- Provide you with the services, products or information you asked for about our charity, campaigns and projects or events or those we believe are of legitimate interest based on your previous involvement with the charity.
- Administer your donation or support your fundraising, including processing Gift Aid
- Keep a record of your relationship with us
- Ensure we know how you prefer to be contacted
- Understand how we can improve our services, products or information.
We promote our activities though a range of methods and channels, including online and social media platforms. We use personal information to thank you for supporting us and to provide you with further communications about our activities according to your preferences and interests.
Building profiles of supporters and targeting communications
We use profiling and screening techniques to ensure communications are relevant and timely, and to provide an improved experience for our supporters. Profiling also allows us to target our resources effectively. We do this because it allows us to understand the background of the people who support us and helps us to make appropriate requests to supporters. Importantly, it enables us to raise more funds, sooner, and more cost-effectively, than we otherwise would.
When building a profile we will analyze geographic, demographic and other information relating to you so we can better understand your interests and preferences in order to contact you with the most relevant communications. In doing this, we will use additional information from third party sources when it is available. Such information is compiled using publicly available data about you, for example addresses, listed Directorships or typical earnings in a given area.
Direct Marketing
We will contact you to let you know about our services and developments and to ask for donations or other support. We make it easy for you to tell us how you want us to communicate, in a way that suits you. Our forms have clear marketing preference questions and we include information on how to opt out when we send you marketing.
We do not sell or share personal details to third parties for the purposes of marketing.
Our Fundraising Promise
The Fundraising Preference Service (FPS) is a website-based service that can help members of the public control the communications they receive from charities. By entering your details on the Fundraising Preference Service website, or by calling the helpline on 0300 3033 517, you can choose to stop email, telephone calls, addressed post and/or text messages directed to you personally from a selected charity or charities.
Job applicants
As part of the recruitment process, the hospice collects and processes personal data relating to job applicants. This allows us to manage the recruitment process and assess candidates’ suitability for employment. In some cases, we need to process the data to ensure compliance with legal obligations. For example, it is a legal requirement to check a successful applicant’s eligibility to work in the United Kingdom before employment starts.
During the application process
All of the information you provide on the application form will only be used for the purpose of progressing your application and assessing your suitability for the role you have applied for.
At interview stage
If you are shortlisted for interview, we will ask you for additional information to check your eligibility to work in the United Kingdom, your qualifications and registration with the relevant professional body (if applicable). We will also ask you for information about your health to establish if we need to make reasonable adjustments to the recruitment process.
If we make you an offer of employment
If you accept an offer of employment, we will contact your referees, using the details provided by you in your application.
Prior to entering into a contract with you, we will also ask you for the following:
- completion of a health questionnaire – to ensure that appropriate immunisations are in place
- completion of a Disclosure and Barring Service check at the level appropriate to your role (if applicable) – to obtain criminal records checks
- bank details – to process salary payments
- emergency contact details – so we know who to contact should you have an emergency at work
- details of your driving licence and insurance (if applicable) to ensure that you are legally entitled to drive for business use
We will process special categories of data, such as information about your ethnic origin, sexual orientation, health or religion or belief, this is for equal opportunities monitoring purposes only.
Who has access to data?
Your information will be shared internally with line managers and the People Services team for the purpose of recruitment and selection. We will not share your data with third parties, unless your application for employment is successful and we make you an offer of employment. The organisation will then share your data with former employers to obtain references for you, employment background check providers to obtain necessary background checks and the Disclosure and Barring Service to obtain necessary criminal records checks.
How long does the hospice keep data?
If your application for employment is unsuccessful, the organisation will hold your data on file for 6 months after the end of the recruitment process, in line with the Chartered Institute of Personnel and Development (CIPD) recommendations. After 6 months, your data will be deleted.
If your application for employment is successful, personal data gathered during the recruitment process will be transferred to your personnel file and retained during your employment. 6 years after you leave our employment your personnel files will be destroyed and we will keep a summary sheet detailing dates of your employment only.
What if you do not provide personal data? There is no statutory requirement for you to provide data to us but if you do not provide sufficient data for us to access your suitability for employment and then to conduct an employment relationship with you, then we will be unable to process your application.
Volunteers
As part of the volunteer application process, the hospice collects and processes personal data. This allows us to manage the recruitment process and assess applicants’ suitability for the role applied for.
During the application process
All of the information you provide on the application form will only be used for the purpose of progressing your application and assessing your suitability for the role you have applied for.
On acceptance of a volunteering opportunity?
If you accept a volunteering opportunity, we will contact your referees, using the details provided by you in your application.
Prior to commencement of volunteering we may also ask you to complete a Disclosure and Barring Service check at the level appropriate to your role (if applicable) – to obtain criminal records checks.
We will also ask for emergency contact details – so we know who to contact should you have an emergency during the course of volunteering.
If you are driving during the course of volunteering, we will ask for details of your driving licence and insurance to ensure that you are legally entitled to drive and for this purpose.
If you are undertaking certain categories of volunteering (for example, complementary therapies or counselling) we will ask for details of your qualifications and registration with the appropriate professional body.
Who has access to data?
The information provided by you will be used for the purposes of administering your volunteering placement. It may be shared with line managers/volunteer co-ordinators for the purpose of contacting you to arrange volunteering activities.
How long does the hospice keep data?
If your application for volunteering is unsuccessful, the organisation will hold your data on file for 6 months after the end of the recruitment process. After 6 months, your data will be deleted or destroyed.
If your application for volunteering is successful, personal data gathered during the recruitment process will be retained for the duration of your volunteer placement and 6 years thereafter electronically.
What if you do not provide personal data?
There is no statutory requirement for you to provide data to us but if you do not provide sufficient data for us to access your suitability to volunteer for the hospice, then it will not be possible to process your application.
Learning hub and room bookings
Course attendees:
The details of course attendees who are not employees of St Richard’s will be added to a secure database. Only minimum information to allow communication about the course, invoicing and certification will be kept (i.e. name, title, address, email, course attended, invoices sent, record of payment and receipts). A record of the person’s attendance at the training will be kept for 6 years, after which it will be removed from the record.
Work Experience/Students:
Those students attending the hospice for the purpose of work experience will complete a form which will include contact details and the contact number of a next of kin, this information will be kept for the duration of the student’s placement. The information about next of kin will be destroyed after the placement has completed and not added to the electronic files. Information that the student attended will be kept on a secure database for a period of 6 years.
Room Bookings:
Booking forms for rooms are saved, complete with contact details and store these electronically in secure files on our internal network drives. These contact details are included on weekly booking programme which is shared with other members of the hospice. We also keep records of bookings and contact details on our electronic calendar system and keep records of invoices issued on the internal drive, in electronic format. We destroy these records once payments have been secured and our accounts have been audited.
Mailing list: We will maintain a mailing list on the secure hospice database. People will only be added to the Learning mailing list if they opt in to receiving information about Courses and Conferences when they make contact with us. Course attendees will be asked if they want future information before being added to the mailing list. We will send all attendees communication specifically regarding the course applied for (joining instructions, evaluation surveys, certificates of attendance, course materials etc.).
Employees
Employees please contact the People Services Team.
Looking after your data
St Richard’s Hospice will not exchange or sell your personal information to another organisation for their own marketing purposes.
We will share your data with our contracted suppliers, and external service providers, such as our:
- Email service providers
- Fulfilment houses
- Marketing and fundraising agencies
- Our Lottery partners, Worcestershire Hospices Lottery
We do not allow other third parties to have access to your personal data unless we are required to share your data with them by law or we are ordered to do so by a Court.
St Richard’s Hospice operations are based in the UK and we endeavour to store all our data in the UK or within the European Economic Area (EEA).
Some organisations which provide services to us may transfer personal data outside the EEA for processing purposes. We will take steps to ensure your data is protected. This includes, ensuring that appropriate safeguards in relation to international transfers of data are included in contracts, and conducting Data Protection Impact Assessments on the processing activity.
How long do we keep your data?
We will retain personal information for different periods of time depending on your relationship with St Richard’s Hospice and in line with our Information Governance Policy retention schedule, relevant laws and best practice recommendations.
For example, if you donate to us, we will keep your financial information for at least seven years after your last interaction with us. When we no longer need to retain your information, we will ensure it is securely deleted. If you would like more information on our Retention Schedules, please contact us.
Your data protection rights
When St Richard’s Hospice is using your personal information on the basis of your consent, you have the right to withdraw that consent at any time.
Right to be informed | You have the right to be told how your personal information will be used. This notice, and shorter summary statements used on our communications, are intended to be a clear and transparent description of how your data may be used. |
Right of access | You can ask what information we hold on you and request a copy of that information. |
Right to erasure | You have the right to be forgotten (i.e., to have your personal data deleted). In some instances, a legal basis will override the right to erasure. |
Right of rectification | If you believe our records are inaccurate you have the right to ask for those records concerning you to be updated. |
Right to restrict processing | In certain situations, you have the right to ask for processing of your personal data to be restricted because there is some disagreement about its accuracy or legitimate usage. |
Right to data portability | You can ask us to send a copy of your information to another organisation where processing is based on your consent. You can make a request and this data can be exported from our systems in a machine-readable format where this is technically possible. |
Right to object | You have a right to stop the processing of your personal data for direct marketing purposes, as well as the right to object to other processing activities. |
Right to object to automated decisions | You have the right to object to your personal data being used in a computerised model or algorithm to make decisions that have a legal or similarly significant effect on you. |
We are obliged to comply with these rights within one month unless there are some complex issues. We will tell you if the extended timescale applies to your request.
Generally, there are no charges for exercising (requesting) these rights. The exception is when you ask for further copies of your personal data that we have already provided to you. We will tell you if this applies. You can contact us if you want to exercise any of these rights.
Updates to the privacy notice
We will review this policy on an annual basis, or when legislation changes. Please do take time to read the notice from time to time.
What to do if you are not happy
In the first instance, please talk to us directly so we can help resolve any problem or query. You can reach our team on:
Phone: 01905 763963
Post: St Richard’s Hospice Foundation, Wildwood Drive, Worcester, WR5 2QT
You also have the right to contact the Information Commissioners Office (ICO) if you have any concerns about the way your information is being processed using their help line 0303 123 1113 or at www.ico.org.uk