Privacy Policy
Francis House Family Trust is the registered charity responsible for Francis House Children’s Hospice. Our Registered Charity number is 328659. By ‘We’ or ‘Us’, we mean Francis House Family Trust. By “You” we mean the customer or individual who has accessed our service. Francis House Family Trust is also a Company registered by guarantee in England and Wales and the Registered Address is 390 Parrswood Road, Didsbury, Manchester, M20 5NA
1. WHAT IS THE PURPOSE OF THIS PRIVACY NOTICE?
This Privacy Policy sets out how ‘We’, use and protect any information that ‘You’, the user, provides to ‘Us’, throughout this website, our service, and/or our fundraising activities.
Where we ask you to provide certain information by which ‘you’ can be identified (i.e. Personal Data) after providing this information, then this information shall only be used in accordance with this Privacy Policy.
It is important that you read this Privacy Policy together with any Privacy Notice or Fair Processing Notice we may provide on specific occasions when we are collecting or processing personal data about you, as to ensure you are fully aware of how and why we are using your data.
2.WHO IS THE DATA CONTROLLER?
We are the controller and are responsible for your personal data.
If you have any questions relating to this privacy notice, including any requests to exercise your legal rights (as explained in section 14), please use the below contact information.
3.HOW CAN YOU CONTACT US?
Full name of Legal Entity: Francis House Family Trust
Postal Address: 390 Parrswood Road, Didsbury, Manchester, M20 5NA
Telephone Number: 0161 434 4118
Email: rachael.taylor@francishouse.org.uk
4.YOUR RIGHT TO COMPLAIN TO THE SUPERVISORY AUTHORITY
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues ( www.ico.org.uk ) We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
5.CHANGES TO THIS PRIVACY POLICY
Historic versions of this Privacy Policy may be accessed upon request using the above contact information. Any changes to this Privacy Policy will be made here and updated accordingly.
6.WHAT INFORMATION DO WE COLLECT FROM YOU?
How is Personal Data/Information defined?
Personal Data is defined as “any information relating to an identified or identifiable natural person” This does not include data where the identity has been anonymised.
We may collect, use, store and transfer different kinds of personal information about you. These are detailed as possible:
- Identity Data: First name, last name, maiden name, marital status, date of birth and gender
- Contact Data: Current address, previous addresses and post codes, email address and telephone number
- Transaction Data: Includes, donations made through our website, details of products and services you have engaged us for.
- Technical Data: Internet Protocol (IP) address, browser type and version, timer zone setting and location, browser plug-in types and versions, operating systems and platform and other technology on devices you use to access the website
- Usage Data: Information about how you use our website, products and services.
- Marketing and Communications Data: This includes your preferences in receiving marketing from us and any third parties, as well as your communication preferences.
We may also collect special category data from the users of our service, or from individuals conducting fundraising activities, including:
- Health Data: including genetic and biological data.
We do not collect or process any other special category data.
7. HOW IS YOUR PERSONAL INFORMATION COLLECTED?
We have different methods of collecting data from and about you, including via:
- Direct Interactions:
You may provide us with your Identity, contact and financial data by completing online forms or by corresponding directly with us via telephone. This includes personal data you provide when you:
- Engage our services;
- Provide us with feedback; or
- Request marketing to be sent to you
- Automated Technologies or interactions
As you interact with our website, we may automatically collect Technical Data about your equipment, browsing patterns and actions. This will be collated after acceptance of ‘cookie’ and other similar technologies. Please refer to our Cookies Policy for further information.
- Third Parties or publicly available sources
We may receive personal data about you from various third parties such as doctors surgeries or other medical professionals and local bodies.
8. HOW DO WE USE YOUR PERSONAL INFORMATION?
We will only process your personal information/data should the law allow it. Most commonly, we will use your personal data under the following circumstances. These are also known as the ‘Legal Basis for Processing’, they are as follows:
- Where it is necessary for our legitimate interests, taking into consideration your interests and fundamental rights, as to ensure we do not override such interests.
- Where we need to comply with legal or regulatory obligations.
Ordinarily, we do not rely on consent as a legal basis for processing data other than in relation to sending marketing communications to you via email or text message. You have the right to withdraw consent at any time by contacting us using the above contact information in Section 3 of this Privacy Policy.
9. PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA
We have set out below, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so.
Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please Contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.
Purpose/Activity | Type of data | Lawful basis for processing including basis of legitimate interest |
---|---|---|
To register you as you enter the building: | (a) Identity (b) Contact | Legitimate Interests – to ensure that we know when you enter and leave the building for safeguarding purposes. |
To provide you with updates on your child or the young person you are caring for: | (a) Identity (b) Contact (c) Health Data | Legitimate Interests – to keep you updated on the welfare of your child. Necessary for the provision of Health & Social Care. |
To contact you to allow you to face-time your child or the young person you are caring for, or other video communications. | (a) Identity (b) Contact | Legitimate Interests – to allow you to communicate directly with your child or the young person you are caring for, via video communications. |
To administer medicine to your child or the young person you are caring for: | (a) Identity (b) Health Data | Legitimate Interests – to ensure that your child or the young person you are caring for is receiving adequate health & social care. Necessary for the provision of Health & Social Care. |
To involve social services if required: | (a) Identity (b) Health Data | Legitimate Interests – to ensure that your child or the young person you are caring for, is receiving adequate health & social care. Necessary for the provision of Health & Social Care. |
To discuss your child’s or the young person you are caring for circumstances with medical professionals if required. | (a) Identity (b) Health Data | Legitimate Interests – to ensure that your child or the young person you are caring for is receiving adequate health & social care. Necessary for the provision of Health & Social Care. |
To process your donation: | (a) Identity (b) Contact (c) Payment details | Legitimate Interests |
Notifying you about changes to our terms or privacy policy | (a) Identity (b) Contact (c) Profile (d) Marketing and Communications | Necessary for our legitimate interests (to keep our records updated and to study how third parties use our products/services) |
To provide you with our e-news newsletter by email | (a) Identity (b) Contact (c) Marketing and Communications | Consent |
To provide you with our newsletter through the post | (a) Identity (b) Contact (c) Marketing and Communications | Necessary for our legitimate interests to raise funds to support the continuing work of Francis House Family Trust and to raise the profile of the charity with the public. |
To administer and protect our charity and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) | (a) Identity (b) Contact (c) Technical | Necessary for our legitimate interests (for running our charity, provision of administration and IT services, network security, to prevent fraud and in the context of a charity reorganisation or group restructuring exercise) Necessary to comply with a legal obligation |
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you | (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical | Necessary for our legitimate interests (to study how third parties use our products/services, to develop them, to grow our charity and to inform our marketing strategy) |
To store your data for as long as necessary to provide our health & social care services | (a) Identity (b) Contact | Legitimate Interests – to ensure that we have your personal details to make contact with you if required. |
To store your data, after your child has finished the health & social care programme. | (a) Identity (b) Contact | Legitimate Interests – to ensure we have details of familial relationships if we require them. |
To provide palliative care to service users | (a) Health data | Necessary for our legitimate interests; and necessary for the provision of Health & Social Care. |
Cookies
A cookie is a small file of letters and numbers that is downloaded on to your computer when you visit a website. Cookies are used by many websites and can do a number of things such as remembering your preferences, recording what you have put in your shopping basket, and counting the volume of people accessing the website.
Upon entering our website, we will request you either accept or reject the use of cookies. Cookies assist us in providing a better service and website. The use of cookies allows the website to recognise your device and store information concerning your preferences or past actions.
You may create custom alerts when websites use or store cookies on your browser. If you wish to refuse cookies altogether, this can be done within your browser settings. For more information on browser controls please refer to our Cookies Policy.
10. DISCLOSURE OF YOUR PERSONAL DATA
We may have to share your personal data with the parties set out below for the purposes set out in the table in paragraph 4 above. These companies will not use your information to contact you. Selected third parties will be subject to obligations to process your personal information in compliance with the same safeguards that we deploy.
We may need to disclose your information to any one of the following:
- Third parties service providers, for example: Telecommunications, IT systems etc acting as processors based in the United Kingdom who we engage to deliver our services (e.g. host our dialler system, electronic storing of your personal data). These third-parties will not have access to special category data.
- Accountants, Solicitors, Compliance Consultants and other like-services acting as processors based in the United Kingdom who require the reporting of processing activities in certain legal and compliance circumstances. These third-parties will not have access to any special category data.
- Third parties who may need to review the health record of your child, for example third-party doctors, nurses and other healthcare professionals. These parties will have access to special category data.
Please note we will never knowingly allow third-party service providers to use your personal data for their own purposes and only permit them to process your data for specified purposes and in accordance with our strict instruction, of which is contractually cemented.
‘We’ shall not sell, distribute or lease your information to third parties.
11. INTERNATIONAL TRANSFERS
We do not transfer your personal data outside the European Economic Area (EEA).
12. DATA SECURITY
We are committed to ensuring your information is safe and secure. In order to prevent unauthorised access or disclosure, we have developed, implemented and maintained suitable physical, electronic and managerial procedures to safeguard and secure the information collected online. We wish for our third parties to be completely confident in using our services, therefore we regularly review our processes and procedures to protect your personal information from unauthorised access, use, accidental loss, destruction or disclosure.
13. DATA RETENTION
How long will we hold your personal data?
We will only retain your personal data for as long as is necessary to fulfil our obligations under the provision of our service as well as any purposes necessary to satisfy any legal, accounting or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk, of harm of unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, including applicable legal requirements.
In some circumstances you can ask us to delete your data under the ‘Right to Request Erasure’ (please see Section 14 for further information. However, an erasure request may be partially declined. In the event a complaint has been made, coupled with an erasure request, we will maintain records relating to the complaint, including basic information such as name, and telephone name. In the event that you do not wish to be contacted by us, we are required to maintain a log of this request, withholding applicable data to ensure we no longer contact you further.
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
14. YOUR LEGAL RIGHTS
In accordance with the UK GDPR, you, in your capacity as a consumer and citizen are entitled to a range of specific DATA SUBJECT RIGHTS that you may exercise under particular conditions, with a few exceptions.
Your Right to ACCESS | The right of access, commonly referred to as subject access, gives individuals the right to obtain a copy of their personal data as well as other supplementary information. It helps you to understand how and why we are using your data, and to check we are using it lawfully. |
Your right to RECTIFICATION | You have the right to have inaccurate personal data rectified. You may also be able to have incomplete personal data completed – although this will depend on the purposes for the processing. This may involve providing a supplementary statement to the incomplete data. |
Your right to ERASURE | Under certain circumstances you have the have the right to have personal data erased. Also known as ‘The right to be forgotten’. The right is not absolute. |
Your right to RESTRICT PROCESSING | Under certain circumstances you have the right to request the restriction or suppression of your personal data, and as like the right to erasure, it is not absolute. Restriction of processing means we are permitted to store your personal data, we are unable to use it. |
Your right to DATA PORTABILITY | You have the right to obtain and reuse your personal data for your own purposes across different services. This eases the copying or transferring of personal data easily from one IT environment to another, safely and security, without affecting the usability of the data. |
Your right to OBJECT | Under certain circumstances you have the right to object to the processing of your personal data, however you do have the absolute right to object to direct marketing. |
Your right to be INFORMED | You have the right to be informed about the collection and use of your personal data. Your right to be informed forms part of this policy, and provides the purposes for processing your data, our retention periods and who it will be shared with. |
15. SUBJECT ACCESS REQUESTS (SARs)
You have the right of access to your personal information. Also known as a Subject Access Request (SAR). This means you are entitled to obtain the following information about yourself:
- Confirmation that we are processing their personal data;
- A copy of their personal data; and
- Other supplementary information;
A third party may make a request on your behalf. This will often involve a solicitor acting on your behalf. We will require evidence from the third party as to evidence this entitlement. This may take the form of a written authority or be a more general power of attorney.
How do we provide you with the data you have requested?
If you make a request electronically (via electronic means), we will provide the information in a commonly used electronic format unless you have specified otherwise. Please note, we may extend the time to respond by a further two months if the request is complex or you have made multiple requests. As you have the right to be informed, we will always ensure you are notified within one month of receiving the request, accompanied by an explanation.
How Long do we have to comply with a request?
We must act on your subject access request without undue delay and at the latest within one month of receipt. This is calculated as beginning from the day of receipt of the request until the corresponding calendar date the following month. We may request your identity to satisfy the request, however this will be proportionate to the request itself and if we have doubts of the authenticity of identification.
Will it cost you anything?
For the vast majority of requests, we cannot charge you a fee. Where the request is manifestly unfounded or excessive we may charge a reasonable fee to cover the administrative costs of complying with the request. This also applies in the event that you request further additional copies of data following your initial request. This will again be charged as an administrative cost.