St Luke’s Hospice Privacy Policy

St Luke’s Hospice takes privacy and the protection of personal and sensitive information seriously. We are committed to protecting your data and complying with the data regulations to their full extent.

Our Privacy Policy explains how we use and protect your personal information, to show that we are adhering to the new General Data Protection Regulations (GDPR) which came into force in May 2018 and includes information relating to your enforceable rights. We also explain your rights and how to contact us.

The Data Protection Act 2018 requires every organisation that processes personal information to be registered with the Information Commissioner’s Office (ICO). Our registration number is Z5082264 and you can find us on the Information Commissioner’s register by clicking here and searching for us by using our registration number.

St Luke’s Hospice is a registered charity (Registered Charity Number 515595) committed to providing specialist palliative care and support to local people and their families affected by life-limiting illness.

St Luke’s Hospice is located at Grosvenor House, Queensway, Winsford, Cheshire CW7 1BH and can be contacted on 01606 551246.

The Hospice also has a range of charity shops across our area run by our Trading Company (registered company number 3024652) Grosvenor House, Queensway, Winsford, Cheshire CW7 1BH, telephone 01606 551246.

Our Lottery and associated products are registered with the Gambling Commission and managed by St Luke’s Hospice Promotions Ltd (registered company number 2862345) Grosvenor House, Queensway, Winsford, Cheshire CW7 1BH and can be contacted on 01606 553553.

All of our services are free of charge. The government provides a modest 15% of our funds, therefore our care is only possible thanks to the continued support and generous donations of our community who provide 85% of the approximate £5 million annual running costs.

Our Caldicott Guardian is our Director of Care.
Our Senior Information Reporting Officer (SIRO) is our CEO.
Our Information Governance Lead is our IT Manager.

Our promise to keep your information safe

  • We will keep your information secure and confidential.
  • You are in control of how we communicate with you – you can opt in or out, or change your preferences at any time.
  • We will not sell your data to a third party.
  • We will not swap your data with a third party.
  • We will train our staff to ensure that they know how to manage your information appropriately and in line with regulations.
  • We will ensure that any external organisations we share data with, in line with the statements set out below, are subject to a data privacy impact assessment and to ensure they follow the same measures set out by GDPR.
  • Any credit or debit card transactions with us are secure and encrypted and comply with the Payment Card Industry Data Security Standard.
  • The locations and systems used to store any personal information will be compliant with GDPR.

Our ability to raise money impacts the care we can provide. The future success of the Hospice is therefore dependent upon our ability to engage with you and communicate for supporter and fundraising purposes.

If the Hospice were not able to process your information for this purpose it would have a detrimental effect on our ability to raise the funds that pay for Hospice services in cost effective ways. It will also mean that we cannot send you the information you want to receive or tell you about how your support is helping and making a difference to those in our care.

We promise to respect the data you share with us and we will always keep it safe.

There are different reasons and purposes for collecting information about individuals, and how we then process that information. The information that we hold, collect or source may be used for different purposes dependent on the type of data and where it was sourced. The purposes and types of data we collect are as follows:

Service Users

Individuals who are under the care of St Luke’s Hospice and in receipt of one or more of our services are Service Users. The term includes those referred to us but currently not in receipt of care, those who have been in receipt of one or more of our services and their details retained for the time-being and individuals enquiring into any of our services.
We collect and hold information about patients and service users to enable us to give you the correct care and treatment and to contact you and your loved ones. The information is held on computer, paper record or both.

St Luke’s Hospice rely on several lawful grounds for processing your information stated within the Data Protection Act 2018 and will also seek your consent where required by law to do so. If we do not have the ability to process your information this may seriously impact the provision of health and social care services and how we address your care needs. All new patients and service users are given a leaflet entitled ‘Patient Confidentiality’ which explains how St Luke’s Hospice ensures your personal information is safe and confidential.

A service user could also be registered as a supporter.

Primary Contacts

A primary contact is an individual identified by a service user as a key person to contact in relation to themselves. A primary contact could also be registered as a supporter or other individual.

We collect and hold information about primary contacts in order to provide information and updates regarding the service users in our care and for the opportunity to further develop relationships with primary contacts.

Supporters

A supporter is defined as any individual (including but not limited to organisations, sole traders, limited companies, schools and colleges, teams, groups, social and fitness clubs) who have made or offered to make a financial or non-financial transaction of any sort to St Luke’s Hospice to help further the charity cause. They may also be individuals who volunteer or who have expressed an interest in supporting our work through volunteering, or have requested information from our fundraising team with a view to supporting the Hospice financially or physically.

We collect and hold information about supporters to engage their support, but also for targeted fundraising, to raise income and provide information on hospice services, news and developments and how they can help.

Employees

Employees are individuals who are or were employed by St Luke’s Hospice. This includes individuals who have expressed an interest in working for St Luke’s Hospice but were unsuccessful or chose not to pursue their application.

Workers

Workers are individuals that work at the Hospice but are not classed as employed; this includes bank staff, contractors, agency staff and individuals working via an honorary contract in partnership with another employer.
We collect and hold information about employees and workers for maintaining employment/work records managed by Human Resources, such as salary, grading, skills, qualifications and availability. We will also retain records on prospective and unsuccessful applicants for a limited time period The information we hold will vary depending on an individual’s role and personal circumstances.

St Luke’s Hospice is what is known as the ‘controller’ of the personal information you provide to us. We will usually collect basic personal data about you such as:

  • Name
  • Postal address
  • Telephone number
  • Email address

We will also collect more sensitive information such as:

Service users

  • Date of birth/age
  • Gender
  • Ethnicity
  • Faith
  • Medical conditions
  • Emergency contact details of a carer/relative/friend
  • Details of clinical interventions
  • Summaries of social work support provided
  • Medical histories
  • Personal stories and testimonials

We may collect personal-sensitive information relating to race, faith, sex, religion, family life, health and care for statistical and reporting purposes (in this case your information will be anonymised and it will not be possible to identify you).

Supporters

The type and quantity of personal data we collect and how we use it depends on why you are providing it. If you support us, for example, by making a donation, volunteering, registering to fundraise, signing up for an event or buying something from our shops or website, we will usually collect your name and your contact details. Occasionally we may ask for your date of birth, for example, if there is an age restriction on an event or activity you have chosen to take part in (e.g. lottery players must be over 16).

Where it is appropriate we may also ask for:

  • Information relating to your health (for example if you are taking part in a high risk event such as one of our treks or skydives).
  • How you heard about the event/activity/Hospice.
  • Why you have decided to donate to us. We understand that you may have private reasons and we only want to know the answer if you are comfortable telling us.

Employees

  • Personal contact details such as name, title, addresses, telephone numbers and personal email addresses.
  • Date of birth/age
  • Gender
  • Marital status
  • Next of kin and emergency contact information
  • Faith
  • Salary, annual leave, pension and benefits
  • Bank account details, payroll records and tax status
  • National Insurance number
  • DBS screening
  • Occupational Health
  • Disabilities
  • Performance information and training
  • Start date
  • Location of employment or workplace
  • Copy of driving licence
  • Copy of passport
  • Qualifications, skills, experience and work history
  • Recruitment information (including copies of right to work documentation, references and other information included in a CV or cover letter or as part of the application process)
  • Proof of personal registration
  • Employment records (including job titles, work history, working hours, training records and professional memberships)
  • Compensation history
  • Disciplinary and grievance
  • Information about your use of our information and communication systems
  • Personal stories and testimonials

We may also collect, store and use the following ‘special categories’ of more sensitive personal information:

  • Information about your race or ethnicity, religious beliefs, sexual orientation and disability
  • Information about criminal convictions
  • Health records/vaccinations
  • Information relating to maternity, paternity, shared parental and adoption leave and pay

Before we do anything with your data, we must ensure we use it correctly. GDPR defines how we are to use your information by enforcing a lawful basis for processing data. There are a number of lawful processes within GDPR, however in most cases we will only use either consent or legitimate interest.

Legitimate Interest

Legitimate interest is the most flexible of GDPR’s lawful bases for processing personal data. Theoretically, it applies whenever we use your data in a way that you would expect.

In general, the condition applies when:

  • Processing your data is not required by law, but there’s a clear benefit for us to do so.
  • There is little risk of this processing infringing on your privacy.
  • You would reasonably expect your data to be used in this way.

We can use legitimate interest to process your data except where such interests are overridden by your fundamental rights and freedoms or where they conflict with GDPR principles.

For instance, we would never use legitimate interest to process any data collected from you in relation to hospice services for the purpose of fundraising. This would be in direct violation of the purpose limitation principle.

St Luke’s Hospice is a local registered charity that believes it is in the best interests of local people to know about hospice services in their area and associated need for support. St Luke’s Hospice believes that this is grounds for legitimate interest and a justified basis for communicating with you. Information you provide will only be used for the Legitimate Interests of St Luke’s Hospice.

Some examples of how we process data using legitimate interest would be:

  • Sending direct marketing material to supporters by post for fundraising purposes.
  • Conducting research to better understand who our supporters are and better target our fundraising activity.
  • To contact you by phone or post, to confirm any of your details and communications preferences.
  • Sending relevant communications to a generic work email address.
  • Staff recruitment and taking applications for volunteers and contacting volunteers about their role.
  • The use of CCTV recording equipment in and around our premises for monitoring and security purposes. CCTV video footage is stored for a maximum of 4 weeks.
  • Promotions on social media, Google, YouTube and other online platforms.
  • We would only use legitimate interest to contact you by post or a registered telephone number.

Consent

We will use consent primarily with our direct marketing and recruitment processes. We will need your consent before we can send you marketing texts or emails, make calls to a number registered with the TPS, or make any automated marketing calls under PECR (Privacy and Electronic Communications Regulations), or for storing your recruitment data for future opportunities. We will also usually need consent should your details need to be passed on to another organisation under the first data protection principle – this being to process lawfully, fairly and in a transparent manner in relation to individuals.

Consent must be knowingly and freely given, clear and specific. We will keep clear records of what you have consented to, and when and how this consent was obtained. You have the right to check or change your consent preferences at any time by contacting us by post to: Information Governance, St Luke’s Hospice, Grosvenor House, Queensway, Winsford, Cheshire, CW7 1BH or by email to enquiries@slhospice.co.uk

Legal

Information will also be processed, where required, to comply with any legal obligation such as by Court Order.

Contracts

Information will be processed in respect to a contract agreement such as an employment or third-party contract.

Records Management

We are required by law to process our supporters’ information to effectively manage and account for any donations, pledges, memberships, event participation, ticket sales or sales of goods, gift aid, lottery and interactions to maintain accuracy of records and thanking you for your support.

We may also work with database marketing agencies to screen records against national deceased and gone-away, telephone preference service registers to help keep our records accurate and up to date.

Any information sourced from database marketing companies will only take place following strict due diligence procedures such as Data Privacy Impact Assessments to ensure the information that we receive is compliant with data protection laws.

Any employment information collected or requested will only be used for the purpose of recruiting, management and dismissal of employees or volunteers. Personal and sensitive information will also be used for statistical reporting but only in anonymised form to protect and respect your right to privacy.

Marketing

Dependant on the lawful basis, we may on occasions work with marketing agencies to help refine:

  • Communications we wish to send out.
  • Supporter preferences that help give you communications that we think will be of interest.
  • To understand market trends to manage our supporter communications, engagement and fundraising practices.

We may also, from time to time, send communications of a marketing or fundraising nature that may include requests for financial support or to join our lottery membership, to support an appeal, attend an event or purchase raffle tickets or sign up to education events and/or courses.

Publicity

We may share your story in various ways, including on our social media channels, our website, during talks and presentations, in e-newsletters, newsletters and leaflets, with existing/potential funders such as Trusts and Foundations, and with the media.

We recommend you consider the feelings of your relatives/loved ones and tell them that you have allowed St Luke’s Hospice to take and use your photograph/interview as it may be used over a period of up to eight years. This may be after a patient has died.

You or your next of kin/relative/representative can contact St Luke’s Hospice at any point and ask us not to use the photograph/interview again. Please remember that once your photo or interview are published and in circulation (for example on the internet, on promotional material or in a newspaper) it may be copied and used by others. If you or your next of kin ask us to withdraw the photos/interview, we will not actively use them again and will ask others to stop doing so, but we cannot guarantee this.

St Luke’s Hospice will:

  • Never share your details without your express permission.
  • Comply with GDPR data protection law.
  • Store your personal information (contact details, photos, interview) in a confidential and secure electronic file separate to your medical records.
  • Be present and oversee all interviews and photo calls if requested.
  • Manage the conduct of the media during interviews, photo calls and other activities, making sure they respect the sensitivity of the situation.
  • Attempt to ensure patient’s/families’ wishes are respected at all times.
  • Allow patients/families to approve relevant content prior to release by St Luke’s Hospice.
  • Let patients/families know where their interview/photo is being used.
  • Remove photographs/interviews from further active usage if a patient/family requests to do so by contacting our Communications Team at communications@slhospice.co.uk or 01606 551246.

Analytics

Your data may also be used for financial analysis and trend performance, profiling and segmentation purposes to satisfy our business and strategic objectives.

This may be done by enhancing the information that we hold about you or about where you live. For example, adding information or flags from census data such as council tax bands, age or household income through to wealth screening.

Profiling information in this way keeps our information up-to-date and means that we are more efficient with our fundraising efforts through cost effective, relevant, appropriate and timely communications.

Information Sharing

Information about Service Users is kept securely on our Patient Administration System. It is recognised that there will be cross over between this system and our CRM (contact relationship management) database, with the potential for a service user or their family/loved ones or other primary contacts to also be supporters in their own right.

We may from time to time communicate with service users primary contacts, by phone or post to confirm their details given and seek their consent and preferences to add them to our CRM database with the potential for supporting the hospice and furthering our care services.

St Luke’s Hospice may share your clinical information with other NHS Healthcare Service providers and Health Care Agencies for the holistic provision of care or for statistical reporting requirements. Your information will only be shared under strict guidelines to protect your privacy and right to confidentiality and to restrict the purpose(s) for which your information is used.

Any clinical data that we share with the Clinical Commissioning Groups and Lead Care Providers who we contract with for funding purposes would be anonymised and it will not be possible to identify you.

Any sharing of information is in compliance with data protection and privacy laws and where possible, we will minimise the amount of information shared or anonymise records so as not to identify an individual. These precautions and others such as data encryption and information labelling will be applied to protect your personal information.

Information about active employees and supporters, held on paper files or HR, CRM and EPOS (electronic point of sale) databases will only be shared externally with agencies that we rely on to carry out our communication activities. For example, name and address details of individuals that we wish to post information to must be sent to our print and mailing house to fulfil this purpose.

Some information will be shared with Occupational Health for the purposes of determining ability to work and undertake specific tasks, or with the Disclosure and Barring Service if applicable.

Information will also be shared internally with other departments such as volunteering.

Agencies that we work with will support us through email delivery platforms, data analysis and insight, direct marketing, external lottery management, and a range of online fundraising platforms.

Any information shared to support the furtherance of the work of the hospice is carried out under contract and with data sharing agreements or non-disclosures in place, with St Luke’s Hospice remaining in control of your information at all times.

Any external agencies that we may share your data with, would be subject to strict due diligence processes and approved completion of data privacy impact assessments.

For clarity purposes, information is never shared with any other organisation for their own purposes.

In some cases, we may need to share information about employees/workers without prior consent if there is a legal requirement to do so. For example, where they have been involved in a serious safeguarding breach that we feel presents a public risk to others, we may share their information with other agencies such as the Police, the Nursing and Midwifery Council or the Disclosure and Barring Service.

Profiling and wealth screening

At St Luke’s we are extremely grateful for donations of any size. More than 80% of our income comes from our wonderful community of supporters; from bake sales, to participation in fundraising events, gifts to our appeals, or in memory of loved ones, gifts from companies or Trusts and Foundations, customers at our retail shops, lottery members and gifts in Wills. All of this support enables us to keep going and to keep providing the support we deliver for families in our area.

Some people are in the fortunate position of being able to make large gifts and are kind enough to consider doing so. It is important for us to be able to identify which of our supporters might be able to help in this way and to develop a personal relationship with them in a way which suits the supporter.

As a fundraising organisation, we undertake in-house research and from time to time engage specialist agencies to gather information about you from publicly available sources, for example Companies House, the Electoral Register, company websites, ‘rich lists’, social networks such as LinkedIn, political and property registers and news archives.

We may also carry out wealth screening to fast track the research using our trusted third party partners.  You will always have the right to opt out of this processing. We may also carry out research using publicly available information to identify individuals who may have an affinity to our cause but with whom we are not already in touch. We also use publicly available sources to carry out due diligence on donors in line with the charity’s Gift Acceptance Policy and to meet money laundering regulations.

This research helps us to understand more about you as an individual so we can focus conversations we have with you about fundraising and volunteering in the most effective way, and ensure that we provide you with an experience as a donor or potential donor which is appropriate for you.

We believe that supporting the hospice is rewarding for donors and that it is important that we make people aware of opportunities to help fund the work of the hospice. Acknowledging the benefit to both supporters and the hospice of such philanthropic relationships, we are proud to ask for larger sums in the right way, and at the right time, from those who we identify and who then indicate that they may wish to help us with big gifts.

We pride ourselves on protecting your data and therefore advise that your data will not be shared with any third parties. In order to protect our supporters, no public acknowledgement will be disclosed if any large gifts are given (e.g. publish people’s names etc. unless consent has been given to us to do so).

If you would rather we did not use your personal data in any wealth profiling exercise we may undertake in the future, please contact our Director of Income Generation on 01606 551246.

Various criteria is taken into account when determining the appropriate retention period for personal data that include the following:

  • The purposes for which personal data is handled and how long we need to keep the information to achieve these purposes.
  • For how long personal data might be needed to support any possible future legal obligations.
  • Any relevant legal, accounting, reporting or regulatory requirements which stipulate how long certain information must be kept.

We will also use NHS Records Management Code of Practice 2023 to determine the minimum retention in conjunction with the above points.

Any data held in relation to employees/workers is retained for a period of time after individuals have left the Hospice. The period of retention varies depending on the type of data held and the reason for retention and whether a statutory retention period applies. Data will only be retained where there is a legitimate reason to do so and is destroyed securely once it is no longer needed.

St Luke’s Hospice takes information governance and information security seriously. We have robust technical and organisational systems and measures in place to manage and protect your personal information. These measures include data encryption, up to date security measures to ensure confidentiality and to guard against unauthorised access, unlawful processing, accidental loss, damage or destruction. Staff are only allowed access to information on a need-to-know basis and access is strictly controlled. Staff access permissions are removed when access is no longer required.

Around the organisation other measures include secure door access, CCTV and data protection policies; a Confidentiality Code of Conduct; and procedures that address our lawful obligation to protect your fundamental rights.
Where possible, all of our data is held within the UK, however in some circumstances some of our suppliers may hold information outside the United Kingdom, including within the European Economic Area (EEA). This includes countries which do not have the same data protection laws as the UK. On these occasions, we would ensure that they only hold information in alignment with UK data protection law and relevant expectations, confirming that appropriate safeguards are in place.

Here you’ll find information on how we treat data that we collect from visitors to our website, when someone submits a contact form or when someone subscribes to our newsletter.

When someone visits our website we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns.

We collect information about your computer and about your visits to and use of this website (including your IP address, geographical location, browser type, referral source, length of visit, entry and exit points and the number of page views).

We do this to find out things such as the number of visitors to the various parts of the site.

This information is only processed in a way that does not identify anyone.

We do not make and do not allow Google to make, any attempt to find out the identities of those visiting our website.

You can find more information on how cookies are used on this website in the Cookies Policy below.

If we do want to collect personally identifiable information through our website, we will be upfront about this. We will make it clear when we collect personal information and will explain what we intend to do with it.

When You Contact Us Via Our Contact Forms

Our website has forms built using Gravity Forms.

The personal information we collect might include your name, phone number, email address, IP address, and information regarding what pages are accessed and when.

When you use our contact form, the information submitted is emailed to us so that we can correspond with you. Your personal data will be stored in the website’s database. Your data is encrypted with the Gravity Forms Encrypted Fields plugin before it is saved to the database.

We store your data on our website database so that if an email doesn’t get through, we can check the website and access the request to ensure that we don’t miss any enquiries or leads.

Security

Our website has HTTPS encryption via a Let’s Encrypt SSL certificate to ensure that any data passed between your browser and the web server (where this website is hosted) is encrypted. When you are on a secure page, a lock icon will appear on the bottom of web browsers such as Microsoft Internet Explorer.

Data Retention

Your data saved in the website database will automatically be deleted 1 year after submission.

This website and its database are automatically backed up every day using a third party service ManageWP. Backups are stored for 90 days in the EU Region.

Change of Ownership

Information about users and visitors, including personal data, may be disclosed and otherwise transferred to an acquirer, successor or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets and only if the recipient of the user or visitor data commits to a privacy notice that has terms substantially consistent with this privacy notice.

Client data may be physically or electronically transferred to an acquirer, or successor or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets, for the sole purpose of continuing the operation of the service, and only if the recipient of the client data commits to a privacy notice that has terms substantially consistent with this privacy notice.

Links to Other Websites

This privacy notice does not cover the links within this site linking to other websites. Those sites are not governed by this privacy notice, and if you have questions about how a site uses your information, you’ll need to check that site’s privacy statement.

Cookies

Cookies are small text files that store information on your hard drive or browser that mean that we can recognise that you have visited our website.

They make it easier for you to maintain your preferences on our website.

A cookie often includes a randomly generated number which is stored on your device. Many cookies are automatically deleted after you finish using the website.

Use of Cookies

This website does not store any information that would, on its own, allow us to identify individual users of this service without their permission.

Any cookies that may be used on this website are used either solely on a ‘per session’ basis or to maintain user preferences. Cookies are not shared with any third parties.

Most browsers allow you to reject all cookies, whilst some browsers allow you to reject just third-party cookies. For example, in Chrome, you can block or allow all cookies by default. On your computer, open Chrome. At the top right, click ‘More Settings’, then under ‘Privacy and security’, click Cookies and other site data and select an option.

Blocking all cookies will, however, have a negative impact upon the usability of many websites, including this one.

Types of cookies that may be used during your visit to the website are listed below:

Cookie NameExpirationWhat It Does
DV1 dayUsed to to provide ad delivery or retargeting
AECSessionUsed to detect spam, fraud, abuse, and to help ensure advertisers are not charged for invalid interactions
_Secure-ENID13 monthsUsed to secure digitally signed and encrypted data from the unique Google ID
SOCS13 monthsUsed to store a user’s state regarding their cookies choices
ASP. NET_SessionIdSessionUsed to store a ‘Session ID’ which is used by Microsoft . NET Framework to deliver the web pages to the visitor
NSC_QH-PMYSessionUsed to ensure traffic and user data is routed to the correct locations where a site is hosted on multiple servers
_gcl_auPersistentUsed to store and track conversions
_ga2 yearsUsed to distinguish unique users by assigning a randomly generated number as a client identifier.
_fbp3 MonthsUsed to store and track visits across websites
privacy_embeds30 DaysUsed to manage third party content

Third-party Embeds

The below section lets you control the privacy settings for third-party embeds on this site. We provide you with the choice to accept these third party embeds or not. The checkboxes below show you all the embeds that you have consented to so far. You can opt out any time by unchecking them and clicking the update button.

If you have any questions please email us at enquiries@slhospice.co.uk

Privacy laws and practice are constantly developing and we aim to meet high standards. Our policies and procedures are, therefore, under continual review. We may, from time to time, update our security and privacy policies. If we want to make any significant changes in how we will use your personal data we will contact you directly and, if required, seek your consent.

We will ensure our website has our most up to date policy and suggest that you check this page periodically to review our latest version.

This policy was last updated on 19/02/2025.

Under UK data protection law, you have rights over personal information that we hold about you. These are typically defined as the following:

The right to be informed

Individuals have the right to be informed about the collection and use of their personal data. We must provide you with information including: purposes for processing personal data, retention periods for that personal data, and who it will be shared with. This is the premise of this privacy policy.

Right to access your personal information

You have a right to request access to the personal data that we hold about you. You also have the right to request a copy of the information we hold about you, and we will provide you with this unless legal exceptions apply.

Right to have your inaccurate personal information corrected

You have the right to have any information that we hold about you that may be inaccurate or incomplete corrected. If you believe this to be the case and would like your data amended, please provide us with details and we will look to correct the information for you.

Right to restrict use of your personal information

You have a right to ask us to restrict the processing of some or all of your personal information. This would be relevant in the following situations:

  • If some information we hold on you is not right.
  • We are not lawfully allowed to use it.
  • You need us to retain your information in order for you to establish, exercise or defend a legal claim.
  • You believe your privacy rights outweigh our legitimate interests to use your information for a particular purpose, and you have objected to us doing so

Right to erasure of your personal information

You may ask us to delete some or all of your personal information and in certain cases, and subject to certain exceptions, you have the right for this to be done. If we are unable to delete your information, we will explain why this is the case.

Right for your personal information to be portable

The right to data portability allows you to obtain and reuse your personal data for your own purposes across different services.

You may ask us to provide your data to you or another service provider in a machine-readable format.

Right to object to the use of your personal information

If we are processing your personal information for direct marketing purposes, and you wish to object, we will stop processing your information for these purposes as soon as reasonably possible.

If you want to exercise any of the above rights, please contact us at Information Governance, St Luke’s Hospice, Grosvenor House, Queensway, Winsford, Cheshire CW7 1BH or by email to enquiries@slhospice.co.uk

We may be required to ask for further information and/or evidence of identity and will endeavour to respond fully to all requests within one month of receipt of your request, however if we are unable to do so we will contact you with reasons for the delay.

Please note that exceptions apply to a number of these rights, and not all rights will be applicable in all circumstances.

For more details we recommend you consult the guidance published by the UK’s Information Commissioner’s Office.

You also have the right to complain to the Information Commissioner about any of our processing activities. The Information Commissioner is the regulator that governs and controls the use of personal information and enforces your right to privacy and confidentiality https://ico.org.uk/

You can contact St Luke’s Hospice by writing to us at: St Luke’s Hospice, Grosvenor House, Queensway, Cheshire CW7 1BH.

Email: enquiries@slhospice.co.uk

General Enquiries 01606 551246
Clinical Enquiries 01606 555489
Supporter and Fundraising Enquiries 01606 555697
Lottery 01606 553553
Shops 01606 551246

Contact our Caldicott Guardian:

A Caldicott Guardian is a senior person responsible for protecting the confidentiality of people’s health and care information and making sure it is used properly.

Our Caldicott Guardian is Sally Chambers, Medical Director. She can be contacted via email at sally.chambers@slhospice.co.uk