This policy was updated on the 12th August 2024
Our contact details
- Name: Angela Bussey (Hon. Secretary)
- Address: St. Monica’s Hospital, Long Street, Easingwold, York, YO61 3JD
- Email: [email protected]
The type of personal information we collect
We currently collect and process the following information:
- Name, address, telephone number, email address and doctor’s surgery of people who apply to be friends of the hospital.
- Name, email address, telephone number of those who apply for a grant.
- Accessibility requirements regarding documentation or support with communications.
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for the following reasons:
- To inform you about our activities and to invite you to the Annual General Meeting.
- To allow us to contact you about any grant application.
We do not share this information with anyone.
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
- Your consent. You can remove your consent at any time. You can do this by emailing us at [email protected]
- We have a contractual obligation
- We have a legal obligation
Please note we have a legal duty to comply with the Equality Act (2010). This means that when we process your data to meet your accessibility requirements our lawful basis is legal obligation under article 6(1)(c) of UK GDPR. Our processing of special category data, such as any health information you give us will be based on consent, article 9(2)(a).
How we store your personal information
Your information is securely stored. We keep your information until you are no longer a member. We will then dispose of your information by secure electronic methods.
Do we use any data processors?
Your data will be held externally on cloud-based services or on the systems of partners who process information on our behalf.
For grant applications only, we use Jotform to collect information on our behalf. Any data collected by Jotform is stored on UK servers. You can read their Privacy Policy at: jotform.com/privacy/
We are committed to storing data securely wherever it is held, and ensuring it is only accessible to authorised personnel. Where data is stored on partner systems we expect them to adopt security practices aligned with our own.
Your data protection rights
Under data protection law, you have rights including:
Your right of access
You have the right to ask us for copies of your personal information.
Your right to rectification
You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure
You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing
You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing
You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability
You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
Exercising your rights
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please email us at [email protected] if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint by emailing us at [email protected]
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
ICO helpline number: 0303 123 1113
ICO website: www.ico.org.uk