St Barnabas Hospice is committed to protecting your privacy, upholding your right to confidentiality and keeping any personal information that you share with us safe and secure.
It is important to note that St Barnabas Hospice never has and never will sell, swap or share your personal information with any organisation or third party for their own marketing purposes.
We work with other agencies to help achieve our charitable objectives and for the effective provision of health and social care services. You are entitled to know who we work with and why and it is the aim of this policy to offer transparency as to our use of your information. At all times your information will be protected and used by St Barnabas Hospice only for our own purposes. This policy will refer to those purposes and the strict safeguards and controls that we impose to protect your confidentiality and right to privacy.
Please read this policy carefully to understand how we collect, use and store your personal data.
Who we are
St Barnabas Hospice is a Lincolnshire based registered charity (Registered Charity Number: 1053814) committed to providing compassionate end of life care to those living with a life-limiting or terminal illness, and their families and carers.
St Barnabas Hospice is located at 36 Nettleham Road, Lincoln, LN2 1RE and can be contacted on 01522 511 566. The Hospice also has a range of charity shops across the Lincolnshire area, which are managed by the Retail Headquarters at Cardinal Close, Lincoln.
We pride ourselves on being open and transparent with our patients, their families, our supporters, staff and anyone else who comes into contact with the Hospice, about how their personal data is stored and used. This includes the processes we adopt when we ask for donations to support our organisation.
We are only part-funded by the NHS through contracts with Clinical Commissioning Groups (CCGs) and Lead Care Providers and we rely heavily on the ability to fundraise to find the £11million needed each year to keep our services free of charge.
As a registered charity, our Hospice relies on the people living in its local community for support – both financially and in kind. By gathering information about our community we can fundraise more efficiently and get the right information to the right people based on what they want to see. Ultimately, this means our Hospice is able to continue to provide excellent care to those who are living with a life-limiting or terminal illness and to support their families and carers.
The UK Data Protection legislation requires every organisation that processes personal information to be registered with the Information Commissioner’s Office. Our registration number is Z1067542 and you can find us on the Information Commissioner’s register of data controllers and searching for us by using our number.
Unless stated otherwise, St Barnabas Hospice is the data controller in respect of all personal data collected by us on this website or otherwise. This means that we are responsible for ensuring that we do so in full compliance with The Data Protection Act 2018, the General Data Protection Regulations 2016 (GDPR), all other related privacy laws and any codes of practice issued by the Fundraising Regulator or the Information Commissioner.
We are also required to be compliant with NHS and Caldicott Guardian requirements for confidentiality and information security standards.
How do you use my information?
We will only use your information for the purpose(s) described in this policy as well as for administrative and statistical purposes. We will use your information to provide you with the information, products or services that you have requested or are referred to St Barnabas Hospice for care and support tailored to your medical or wellbeing needs, to support your family and friends, further our charitable aims and comply with the law.
Why we collect personal data
We collect information for various reasons:
- We collect and hold information about patients and service users to enable us to give you the correct care and treatment and to contact you and your loved ones. The information is held on computer, paper record or both.
- We collect and hold information about staff and volunteers to communicate and carry out administration, as necessary for your role.
- We collect and hold information from donors, retail customers and supporters in order to make better decisions about how we raise and spend funds.
- We automatically collect technical data from visitors to our website to ensure that content from our website is presented in the most effective manner for you and for your computer.
The Personal Data we collect and its sources
Service Users – What information do we collect about you?
Individuals who are under the care of St Barnabas Hospice and in receipt of one or more of our services are service users. The term includes those referred to us but currently not in receipt of care, those who have been in receipt of one or more of our services and their details retained for the time-being and individuals enquiring into any of our services.
Types of information
The types of information that we might collect or hold on you includes name(s), addresses, date of birth, contact details including email and telephone, your next of kin and family information, your doctor’s contact details. We will also collect information of a sensitive nature relating to your medical history, current medical requirements and information of a sensitive nature including race, religion and ethnicity.
Sources of your information
Your information may be sourced directly from you, a loved one, family member or other legal guardian. Information about you concerning your health or that is required to provide you with health and social care services may also be sourced directly or indirectly from your doctor, health professional or from the NHS.
Consequences of not being able to process your information
St Barnabas Hospice will rely on several lawful grounds for processing your information contained within the GDPR and will also seek your consent where required by law to do so. If we do not have the ability to process your information this may seriously impact the provision of health and social care services and how we address your care needs.
Purposes of processing
Information is collected and processed for the purpose and intention of providing one or more of our clinical or support services, the effective provision of personalised care and to comply with clinical reporting requirements.
We may collect personal-sensitive information relating to race, faith, sex, religion, family life, health and care received for statistical and reporting purposes (in this case your information will be anonymised and it will not be possible to identify you).
Information about service users is held securely on our internal IT systems and we use SystmOne, which is a Lincolnshire wide patient records system, as your primary care record. This information may be shared with NHS and other care agencies as well as with Clinical Commissioning Groups and Lead Care Providers (who are contracted for care purposes) for the holistic provision of care or for statistical reporting requirements.
Any sharing of information is in compliance with data protection and the GDPR. Where it is possible to minimise the amount of information shared or anonymise records so as not to identify an individual, these precautions will be applied to protect your personal information.
A Lincolnshire wide data sharing agreement is in place to protect your rights to privacy and confidentiality. In general, only information necessary for the provision of direct care and in the best interest of the service users, will be shared with other care providers.
Service users may also be supporters and information is therefore sometimes shared internally with our Fundraising teams. However, the data is limited to contact details and no healthcare or other sensitive information (defined as special category within the GDPR) is shared.
Retention of information
Information on service users will be retained in accordance with the national guidance for health and social care records starting from the date that the provision of care has ended and in compliance with other regulatory requirements.
Information will not be kept outside of this period unless there is another lawful reason for doing so.
Service users may also be a supporter and St Barnabas Hospice has a legitimate interest in understanding when to stop communications that are no longer required.
Palliative Care Co-ordination Centre
The Palliative Care Co-ordination Centre (PCCC) is the St Barnabas Hospice Single Point of Access and is available to Health Professionals, patients and their families and carers who need advice and support regarding end-of-life care.
In addition to its role of providing support for the provision of direct care, the PCCC processors service user information to make referrals for packages of care for those in receipt of health funding.
The PCCC is therefore processing personal and special category data on behalf of the Lincolnshire Clinical Commissioning Groups (CCG’s) (under contract) and is in this respect acting as a Data Processor.
Supporters – What information do we collect about you?
A supporter is defined as any individual (including but not limited to organisations, sole traders, limited companies, schools and colleges, teams, groups, social and fitness clubs) who have made or offered to make a financial or non-financial donation of any sort to St Barnabas Hospice. They may also be individuals who have expressed an interest in supporting our work, have requested information from our Fundraising team, completed an event, sponsorship, lottery, raffle or event application form.
Information about supporters is held securely on our internal database called DonorFlex. This system holds all the relevant information about you that relates to donation amounts, event participation, Lottery and other details about your interaction with the Hospice.
Types of information
The types of information that we may collect or hold on you for fundraising and marketing purposes include name, address, contact details including email and telephone, family links and relationship nature, donation amounts, regular gifts by direct debit or standing order, event participation, own place events, community and corporate support, Lottery membership, employment or other community and Hospice links, communication preferences and a range of profiles created to understand supporters better or assist with analysis and understanding. We also hold a log of the communications that we have had or sent to you for your communication preferences.
Sources of information
We may obtain personal data face-to-face, electronically, on paper (such as any form you complete) or verbally (such as during any telephone conversations we have with you). The information may come to us:
- Directly from you such as when you make a donation, when you sign up to an event or activity, when you join our Lottery, when you sign up as a Gift Aid donor in one of our shops or when you sign up as a volunteer.
- From another organisation for example, where you use fundraising sites such as JustGiving to raise money for St Barnabas Hospice. These organisations may share your personal data with us if you allow them to do so.
- From social media sites or apps. If your settings and preferences allow, we may obtain information (including personal data) from social media services such as Facebook and Twitter.
Information about other people
If you provide personal data to us relating to any person other than yourself (for example when giving a donation or buying Lottery ticket as a gift) you must ensure before you do so that they understand how their personal data will be used and that you are authorised to disclose it to us, and to consent to its use on their behalf.
The personal data we collect
The type and quantity of personal data we collect and how we use it depends on why you are providing it. If you support us, for example, by making a donation, volunteering, registering to fundraise, signing up for an event or buying something from our shop, we will usually collect your name and your contact details. Occasionally we may ask for your date of birth, for example, if there is an age restriction on an event or activity you have chosen to take part in (e.g. lottery players must be over the age of 16).
Where it is appropriate we may also ask for:
- Information relating to your health (for example if you are taking part in a high risk event such as one of our treks or skydives).
- How you heard about the event/activity/Hospice.
- Why you have decided to donate to us. We understand that you may have private reasons and we only want to know the answer if you are comfortable telling us.
- Your bank or credit card details (these are used for the single transaction only and are destroyed after use).
Occasionally we may work with marketing agencies to help refine our communications, making them more cost effective and relevant to whom we send them to.
This may be done by enhancing the information that we hold about you or about where you live. For example information from census data such as council tax bands and age.
Consequences of not being able to process your information
As a registered charity St Barnabas Hospice depends heavily on donations to support and fund its health and social care services. We are only part funded by the NHS and must raise £11 million every year to keep our services free of charge. The ability to fundraise, levels of care available and the future success of the Hospice is dependent upon the ability to communicate for fundraising purposes.
If the Fundraising and Marketing department were not able to process your information for this purpose it would have a detrimental effect on our ability to raise funds in cost effective ways. It will also mean that we cannot send you the information you want to receive or tell you about how your support is helping others under our care.
Purpose of processing
The information that we hold, collect or source on supporters is processed only for the purposes of furthering our charitable cause, to raise the income needed to fund the running of the Hospice and to protect the longer term future of our clinical services. This is achieved by keeping supporters up to date with news and developments at the Hospice, to demonstrate the impact that donations have on the lives of those under the care of St Barnabas Hospice, to highlight the many other ways in which you can choose to support our work, to raise awareness of exciting new events and for the purposes of raising funds through direct cash appeals and other ways to generate income and engagement.
This includes processing information for the purpose of fundraising and marketing communications where consent has been provided or where St Barnabas Hospice is exercising their legitimate interest to contact you.
We are also required by law to process supporters’ information to effectively manage and account for donations, pledges, memberships, event participation, engagement and interactions and to maintain accuracy of records. All processing is pursuant to your rights and our responsibilities within UK Data Protection legislation and the GDPR.
Information will also be processed, where required, to comply with any legal obligation such as by Court Order.
St Barnabas Hospice rely on our legitimate interest to contact you with matters of a non-marketing nature for example managing Gift Aid, management of regular giving payments or Lottery membership, thanking for support, to maintain accuracy and keep the information up-to-date, to answer your questions queries or requests, for financial analysis and trend performance, profiling and segmentation purposes to satisfy our business and strategic objectives.
We will also seek to rely on our legitimate interest to send postal communications of a marketing and fundraising nature. These may include requests for financial support, to join our lottery membership, to support an appeal, to attend an event, to purchase raffle tickets and to keep you informed of current events.
St Barnabas believes it is in the best interests of the Hospice and local people to raise awareness of its charitable nature, to be open and transparent about how the Hospice is funded and to highlight that the services provided by the Hospice require local support to provide these services for local people at the end of life. Generating income from charitable donations is the ‘life blood’ of the organisation and both patient care and the ability to provide services to the community would be put at serious risk without this funding. It is in therefore in our legitimate interests to maintain good contact with donors and to keep them informed as to how they can donate or take part in fundraising events. We have reason to believe donors would reasonably expect to be contacted and the processing of data will have a minimal impact on their privacy.
- We have a valid legitimate interest in doing so and that legitimate interest does not override the rights and interests of the individuals.
- Individuals have a right to object to direct marketing and ‘opt out’ overrides our legitimate interest.
- We are contacting an individual on the basis that we have advised them we would do so, they are given a clear ‘opt out’ process and it is their reasonable expectations that we will do.
Information about our supporters will be shared with agencies that we rely on to carry out our fundraising activities. For example, the name and address details of individuals that we wish to mail information to must be sent to our print and mailing house to fulfil this purpose.
Any information shared to support and further the work of fundraising is carried out under contract, with St Barnabas Hospice remaining in control of your information at all times.
Your credit card information
If you use your credit/debit card to donate to us, purchase something or make a booking online, we pass your credit/debit card details securely to our payment processing partners, Stripe and WorldPay, as part of the payment process. We do this in accordance with the Payment Card Industry Security Standard (PDF download), and don’t store the details on our website.
Retention of information
Information relating to supporters will be retained for no longer than is necessary to meet our legal and regulatory obligations. This will vary depending upon the type of information. For example, Lottery information will be held in accordance with the requirements of the Gambling Commission.
Direct marketing and fundraising communications
St Barnabas Hospice will communicate with supporters under our legitimate interest (see above) for postal and verbal communications only.
We will only contact you by email or text where you have given us consent.
How to update, amend or stop marketing communications
You will only be contacted for fundraising and marketing purposes from us for as long as you are happy to receive them. You have the right at any time to request a change in the marketing communications that you receive or to stop them altogether if they’re no longer required.
You can update your preferences at any time by contacting our Supporter Care team at email@example.com or calling 01522 540 300.
Employees and Volunteers
Employees are individuals who are or were employed by St Barnabas Hospice. This definition includes contractors, agency staff, freelance and bank staff. It will also include individuals who have expressed an interest in working for St Barnabas Hospice but were unsuccessful or chose not to pursue their application.
Volunteers are individuals who have or do volunteer their time to support St Barnabas Hospice.
Types of Information
The information that we collect is made clear on the application form and may include sensitive details following a DBS (Disclosure and Barring Service) check or Occupational Health Screening.
Sources of information
Information is predominately sourced directly from employees/volunteers and prospective candidates from their application form.
Information on employees and volunteers may be generated under consent from the individual that relates to DBS checks and occupational therapy reports. In addition, details may also be obtained for managerial purposes throughout the course of employment or volunteering at the Hospice, and kept on personnel files, (e.g. information from one-to-ones, performance management and appraisals).
Consequences of not being able to process information
There are certain types of information that the organisation must process to comply with employment laws and other regulatory requirements. Processing for these lawful requirements will occur under the organisation’s obligation to comply with such laws.
The consequence of not being able to process information that is not caught by the above paragraph may affect the ability to manage employment opportunities and the provision of organisational benefits.
Purpose of processing
Any information collected or requested will only be used for the purpose of recruiting, management and dismissal of employees or volunteers. Some examples of processing activities relating to staff are salaries, pensions, insurance, payroll giving, expenses, training, discipline, promotion, illness and return to work.
St Barnabas will process personal data directly for employment purposes under the lawful ground relating to contracts and employment. However, the organisation will rely on its legitimate interest to process personal information about employees and volunteers for purposes that is not directly related to their employment. This includes noting long service awards, redeployment or restructuring purposes.
Information relating to employment of staff will only be shared with organisations that support the management of employees. For example, organisations that assists with payment of staff salaries, pensions, insurance and tax purposes.
Some information will be shared with Occupational Health for the purposes of determining ability to work and undertake specific tasks.
At all times, data minimisation will apply and only the necessary information will be shared to address the purposes required.
Retention of information
Information will be retained on staff in accordance with national guidelines for Human Resource information, currently six years from the end of employment. Details relating to prospective employees that were not taken on will be retained for a period of six months before being securely destroyed.
If you are using our website
In order to understand how users access this website and our services, we may collect your Internet Protocol addresses (also known as IP addresses). Your IP address is a unique address that computer devices (such as PCs, tablets and smartphones) use to identify themselves and in order to communicate with other devices in the network.
Cookies are small pieces of data which are stored on your computer by your web browser. They are used to improve your online experience by almost every website including ours. This is why we feel it is important that you understand how cookies work, what they are for and when they are being used.
Cookies are small text files stored on your computer, smartphone, tablet or other device used to access the internet. Cookies are useful as they allow a website to recognise the device you are using.
We do use ‘analytics’ cookies to help us make our website better for those who visit it regularly. They help us to work out what visitors like and don’t like and how we can improve things for you.
When we include links to and feeds from other websites, please consider they will have their own privacy and cookie policies that will govern their use of any information you submit. We recommend you read their policies as St Barnabas Hospice is not responsible or liable for their privacy practices.
You can manage your cookie preferences for our website or any other websites by using your browser settings. Your browser’s ‘help’ function will show you how to do this. However, please remember that cookies are often used to enable and improve certain functions on our website. If you choose to switch certain cookies off, it could affect how our website works.
For more information about cookies, visit www.aboutcookies.org
Links to other websites
Please note this website may contain links to other websites that are not controlled by us. These links are provided for your convenience. We are only responsible for our privacy practices and our security. We recommend that you check the privacy and security policies and procedures of each and every other website that you visit and each organisation that holds your personal data.
Use of your data outside Europe
Privacy laws and practice are constantly developing and we aim to meet high standards. Our policies and procedures are, therefore, under continual review. We may, from time to time, update our security and Privacy Policies. If we want to make any significant changes in how we will use your personal data we will contact you directly and, if required, seek your consent.
We will ensure our website has our most up to date policy and suggest that you check this page periodically to review our latest version.
This policy was last updated on 21st May 2018
We take the security of personal data seriously. We employ security technology, including firewalls and encryption to safeguard personal data and have procedures in place to ensure that our paper and computer systems and databases are protected against unauthorised disclosure, use, loss and damage.
Personal data in our databases is only accessible by appropriately trained staff and volunteers who need to access it as an essential part of their role. All access is tracked through individual login credentials.
We only use third party service providers where we are satisfied that the security they provide for your personal data is at least as stringent as we use ourselves.
Your personal information can only be processed in line with data protection principles and requirements contained within UK Data Protection Legislation and the GDPR. These rights are:
- Right to access information about you, at no charge and it must normally be supplied within 30 days.
- Right to erasure (the right to be forgotten) where there is no compelling reason to keep it.
- Right to rectification of inaccurate or incomplete information.
- Right to data portability and to move your data from one environment to another.
- Right to object to processing for direct marketing purposes.
- Right to object to automated decision making and profiling.
- Right to restrict processing of personal information.
The above rights are not all absolute and there are circumstances where St Barnabas may not be able to comply with your request. However, if this is the case you will be informed within 30 days of your request.
Should you wish to exercise any of your rights, please contact the Hospice.
You also have the right to complain to the Information Commissioner about any of our processing activities. The Information Commissioner is the regulator that governs and controls the use of personal information and enforces your right to privacy and confidentiality.
To complain to the Information Commissioner’s Office. You can find information on how to do this at www.ico.org.uk
How to contact us
You can contact St Barnabas Hospice by writing to us at:
St Barnabas Hospice,
36 Nettleham Road,
Headquarters – 01522 511 566
Service Enquiries – 0845 055 0708
Fundraising – 01522 510 300
Marketing – 01522 559 504
Lottery – 01522 546 500
Shops – 01522 559 500
Or via the website
Should you have any questions regarding the processing of your information you can contact our Data Protection Officer at:
St Barnabas Hospice Day Therapy Centre,