About us

For Data Protection Requirements the data controller is Bluebell Wood Children’s Hospice, Cramfit Road North Anston, Sheffield, South Yorkshire, S25 4AJ. This is also our registered office.

Our registered charity number is 1076958. We are registered with the Information Commissioners Officer and our Registration Number is Z3289382.

Our commitment to you

We are committed to protecting and respecting your privacy, and we take your privacy very seriously.

To enable us to undertake our charitable objectives we collect and use personal information about individuals. We recognise the trust placed in us by individuals whose information we use. This policy (together with any other documents referred to in it) sets out the basis on how any personal data we collect from you, or that you provide to us, or that we obtain about you will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

This notice applies to the public including service users, supporters, contractors and other customers.

We have a separate privacy notice for our employees, volunteers and job applicants.

Scope

This privacy notice provides details about:

• Your data protection rights as an individual
• The information we collect and use
• Why we share information about you
• How long we keep information about you
• Complaints

Your data protection rights

You have certain rights in relation to your personal information, although those rights will not apply in all cases or to all the information that we hold about you. For example, we may need to continue to hold and process information to establish, exercise or defend our legal rights.

You have the right to be informed about how we use the data you provide. We will try to be as transparent as possible in our interactions with you. Any time you give us personal information you have a right to be informed about why we need it and how we will use it. You can find most of the information you need in this Privacy Notice.

You have a right of access to any of your personal data that we hold about you. You can contact us at any time to gain information about what data we hold about you and why we hold it.

If you make a formal request, we will respond to acknowledge your request and will first require you to prove your identity. We may also ask you for information about any specific information you are seeking to help us make sure we meet your request fully and speed up the process.

If you agree, we will try to deal with your request informally, for example by providing you with the specific information you need over the telephone.

We will provide you with the information that you are entitled to as soon as possible and without unreasonable delay and at the latest within one month of your identity being verified by us.

In exceptional cases we may extend the period of compliance by a further two months if the request (s) are complex or numerous. If this is the case, we will inform you within one month of the receipt of the request and explain why the extension is necessary.

In most circumstances there will be no charge for this right of access.

You have the right to have any personal data we hold corrected at any time if you believe it to be inaccurate e.g. the spelling of your name or your contact information.

You also have the right to ask for our processing of your personal data to be restricted. For example, if you are contesting the accuracy of data we are using about you. In such case we will restrict our processing while we verify the accuracy of the data that we hold.

You can also ask for certain information about you to be deleted. For example, if you are moving out of the area.

In certain cases, we will be unable to delete your information if there are statutory grounds to retain it (i.e. HMRC or other legal requirements).

You have the right to data portability where processing is automated, although we don't currently carry out any such processing. If we do in future, you can make a request and this data can be exported from our systems for you.

You have the right to ask us not to process your personal data for marketing or profiling purposes. We will inform you at the time of collecting your data if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes.

You can exercise your right to prevent such processing by contacting our Data Protection Officer, by calling 01909 517 360 or alternatively by writing to us at the following address:

Bluebell Wood Children’s Hospice

Cramfit Road

North Anston

Sheffield

South Yorkshire

S25 4AJ.

Lawful basis for processing

We must have a lawful basis for processing your information; this will vary on the circumstances of why we process and how we use your information, but typical examples include:

• the activities are within our legitimate interests as a charity that provides hospice care,
• the processing is necessary for compliance with a legal obligation to which we are subject e.g. we must provide certain contact information and other details about our services to HMRC and the Charities Commission,
• the processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law,
• the processing is necessary for a contract we have with the individual, or because they have asked us or you to take specific steps before entering into a contract,
• you have given consent for us to process the information e.g. in relation to certain support and fundraising events or in relation to certain marketing activities,
• to protect vital interests e.g. the processing is necessary to protect someone’s life.

If we process any special categories of information i.e. information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, processing of genetic or biometric data for the purpose of uniquely identifying individuals, health data, or data concerning your sex life or sexual orientation, we must have a further lawful basis for the processing.

This may include:

• you give us your explicit consent to do so
• the processing is necessary to protect your vital interests or someone else's vital interests, e.g. where the data subject is physically or legally incapable of giving consent
• the processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity
• the processing is necessary for: reasons of substantial public interest, for the purposes of preventive or occupational medicine, for the assessment of the working capacity of an employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services based on legislation or pursuant to contract with a health professional and subject to the conditions and safeguards.

What information do we collect?

It is important to us that we inform you about the information we collect and why we collect it.  The information we collect and the reason for collecting it are different for different groups of individuals.

Information can be classed as ‘Regular’ such as your name and address or ‘Sensitive’ such as details about your health.  The list below provides an overview of the types of information we collect and why.

We process information as follows:

For Fundraising and to promote the interests of the charity

The generosity of individuals and organisations is essential to funding the vital work we undertake.

We conduct a range of fundraising and marketing activities in relation to:

-       our cause, campaigns and projects

-       events and challenges

-       volunteering

-       online shop and selling

We promote our activities though a range of methods and channels, including online and social media platforms.  We use personal information to thank you for supporting us and to provide you with further communications about our activities consistent with your preferences and interests.

We also ask if you are able to Gift Aid your donations and we will keep information specifically for this reason, as required by HMRC.

You can update your preferences at any point by contacting us via the details above.

Regular activities

Trade and Generate Income

Our retail sales have a key role in raising income to support our work as a charity.  We will collect and hold personal information to support:

-       Enabling online orders

Digital Identities and Cookies

Where appropriate we use technology to support and assist us in undertaking our work.  We collect information that enables us to manage and secure technology and provide insight about its use as follows:

-       Cookies that analyse visitors to our website and social media pages

-       Cookies that provide social media adverts tailored to you

-       Device information about users of our Wi-Fi and other systems

-       Social media advertising programmes e.g. Facebook Custom Audience

-       We only use cookies that are required for the ordinary functionality of the website. You can, however, delete your cookies using built-in browser tools.

CCTV systems

Bluebell Wood Children’s Hospice operates a Closed-Circuit Television (CCTV) surveillance system ("the system") throughout our premises and in some shops, with images being monitored and recorded. The system is owned, operated and managed by Bluebell Wood Children’s Hospice. It is used for maintaining public safety, the security of property and premises and for the detection, prevention and investigating of crime. Where appropriate, in exceptional cases, it may also be used to monitor staff when carrying out work duties. Disclosure of recorded material will only be made to third parties in accordance with the purposes of the system and in compliance with Data Protection legislation.

We do not collect more information than we need to fulfil our stated purposes and will not retain if for longer than is necessary. Data will be stored in a range of different places, for example in our management systems and in other IT systems (including the email system). Access to view recorded images is restricted to key individuals.

 

Administration and Governance

As a charitable organisation we also hold, and process data as required by regulatory bodies such as the Charities Commission.  This can include personal information relating to:

-       Enquiries or complaints about us.

-       Processing financial transactions, maintaining our accounts, audit and prevention of fraud.

-       Administering Gift Aid claims.

-       Anonymised details for measuring equality and diversity of our workforce

 

Sensitive Information

We do process sensitive information about individuals in a limited manner as follows:

-       To ensure your health and wellbeing in the workplace or at an event.

-       As part of monitoring equality and diversity in accordance with existing legislation.

Why we may share information about you

We understand that sharing information is a sensitive topic. We will never sell your information and are committed to being transparent with you about where we legally share information, the reason why and who with.

Your information may be shared internally, if access to the data is necessary for legitimate purposes. 

This sharing may include:

• Personal and financial information for the purposes of payroll and pension management with designated suppliers
• Personal information with professional bodies and regulators in accordance with our statutory obligations.
• Anonymised statistical information about training and equality monitoring is shared with public authorities who commission our services
• Personal and financial details about donations for Gift Aid claims, audits and anti-fraud legislation are shared with HMRC and our auditors
• Personal details are shared with designated mailing houses for the purposes of sending printed communications
• Personal details are shared with designated mailing cleanse companies to make sure we are not mailing to deceased individuals or those who have moved addresses
• Email addresses with providers of social media and email marketing platforms where you have agreed to receive information from us via these channels
• Information about the use of IT systems is shared with technical suppliers for the purposes of support and system administration.

Limited information about your digital identity is used to provide statistical information about the use of our IT systems including website and social media pages.

Health Records

Health records contain a type of data called confidential patient information.  Confidential patient information is when 2 types of information from your health records are joined together.  The 2 types of information are:

·         Something that can identify you

·         Something about your health care or treatment

For example: your name joined with what medicine you take

This data is used to help with research and planning.  You can opt-out of your confidential patient information being used for these purposes.  You can also make a choice for someone else like your children under the age of 13.   To find out more visit: https://www.nhs.uk/your-nhs-data-matters/.  If you are happy for your confidential patient information being used for research and planning you do not need to do anything.  Any choice you make will not impact on your individual care.

Identifiable information (name and address) on its own is used to contact you and this is not classed as confidential patient information. 

Our organisation is compliant with the national data opt-out policy.

How long we keep information about you

We only keep information for as long as necessary in accordance with legislation or relevant regulations.  Once we no longer need to keep your information we remove it from our systems or securely dispose of it and we do this at the end of each financial year. 

Notification of changes

This statement may change from time to time, for example, if the law around information changes or for operational purposes.  We advise you to visit this page regularly to keep up to date with any changes.

Complaints:

Bluebell Wood Children’s Hospice tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.

This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive details of all aspects of Bluebell Wood Children’s Hospice’s collection and use of personal information. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to our Data Protection Officer. 

If you believe that Bluebell Wood Children’s Hospice has not complied with your data protection rights, you can complain to the Information Commissioner’s Office, their address is Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF or by calling 0303 123 1113.

Contacting us:

If you have any queries about the process or how we handle your information, please contact our Data Protection Officer in the first instance or call 01909 517 360.

 

* Data Protection Requirements means the Data Protection Act 2018, the General Data Protection Regulations, the Regulation of Investigatory Powers Act 2000, the Telecommunications (Lawful Business Practice)(Interception of Communications) Regulations 2000 (SI 2000/2699), the Electronic Communications Data Protection Directive 2002/58/EC, the Privacy and Electronic Communications (EC Directive) Regulations 2003, the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011 and all other applicable laws and regulations relating to processing of personal data and privacy in any applicable jurisdiction as amended and replaced, including where applicable the guidance and codes of practice issued by the UK Information Commissioner or such other relevant data protection authority.