General Information
This privacy notice will outline to you how the TakeATestUK service works and how your data is used. This notice is broken up into sections so that you can easily read the different areas of how we use your data. If you have any queries, please use the contact details provided.
Who ‘we’ are & how you can reach us
‘Saving Lives UK’ is the controller for the personal information we process, unless otherwise stated. Saving Lives UK is a registered charity in England and Wales under reference 1144855.
There are many ways you can contact us, including by phone, email and post. More details can be seen here.
Our postal address is:
| Saving Lives |
| Lifford Hall, |
| Lifford Lane, |
| Kings Norton, |
| Birmingham, |
| B30 3JN. |
Telephone: 07838 214191
For general contact please use this page of our website.
Data Protection Officer’s contact details
Our Data Protection Officer is Scott Sammons at Lighthouse IG. You can contact him at scott@lighthouseig.com.
Our reasons and ‘legal basis’ for using your data
We have provided a summary of the reasons and legal basis for how and why we use your personal data under the law.
You have made a request to us for a postal testing kit. We use your personal and special category data with your consent.
Supporting you with your results. We use your personal data to support you with any medical diagnosis or support. We do not use your consent for this as we are providing you with medical diagnosis and care, therefore we process your data under a public task and the provision of health care by our medical professionals.
You have a complaint or enquiry to us about your test. It is in our legitimate interest to process personal data on you to resolve your complaint or enquiry. We will avoid the use of Special Category data where we can unless we are legally obligated to use it to resolve your complaint.
You have made an information request to us for information about your test. We have a legal obligation to respond to such requests therefore all your Personal Data is processed under our obligations under the UK GDPR and Data Protection Act 2018.
Children’s information
We do not provide services directly to children or proactively collect their personal information. You must be over 18 to use the Take a Test service.
How do we get your information?
Most of the personal information we process is provided to us directly by you for one of the reasons above.
We also receive personal information indirectly, in the following scenarios:
- We have received the results of our postal testing kit which you requested and returned.
- We have contacted an organisation about a complaint you have made, and it gives us your personal information in its response (or they contact us).
- We have been contacted by another organisation in respect of a Subject Access Request that you have made.
If it is not disproportionate or prejudicial, we’ll contact you to let you know we are processing your personal information if we receive it from someone or somewhere else.
As part of the work of Saving Lives UK, we process special category data. Please read our Safeguards Policy on how we handle special categories of personal data, especially in sensitive situations.
Who do we share your data with?
We will not share your information with any third parties for the purposes of direct marketing.
We use data processors who are third parties who provide elements of services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do so. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.
In some circumstances we are legally obliged to share information to a third party. For example, under a court order. In any scenario, we’ll satisfy ourselves that we have a lawful basis on which to share the information and document our decision making and satisfy ourselves we have a legal basis on which to share the information.
Does your data leave the UK?
Where possible we aim to keep Personal Data within the United Kingdom. However, where a supplier is based outside of the UK, we have and will ensure that the supplier meets the requirements under the UK GDPR and appropriate safeguards are put in place.
How long do we keep your data for?
Typically, we keep data for around 6 years, however this is not always the case, especially for ongoing services between us. We will publishing our full retention schedule shortly which will outline all the different retentions we have. In the meantime, if you wish to know more, please contact our DPO.
Your data protection rights
Under data protection law, you have rights we need to tell you about. The rights that you have depend on the reason we have for processing your information.
Right of access
You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
Right to rectification
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
Right to erasure
You have the right to ask us to erase your personal information in certain circumstances.
Right to restriction of processing
You have the right to ask us to restrict the processing of your information in certain circumstances.
Right to object to processing
You have the right to object to processing if we can process your information because the process forms part of our contractual obligations or is in our legitimate interests.
Right to data portability
This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering a contract and the processing is automated.
You are not required to pay any charge for exercising your rights. We have one month to respond to you.
Please contact us at scott@lighthouseig.com if you wish to exercise any of your rights under Data Protection law.
Your right to complain
We work to high standards when it comes to processing your personal information. If you have queries or concerns, please contact us at scott@lighthouseig.com and we’ll respond.
If you remain dissatisfied, you can make a complaint about the way we process your personal information to us.
For information about how we process a complainant’s information, please see this section of our privacy notice.
Links to other websites
Where we provide links to websites of other organisations, this privacy notice does not cover how that organisation processes personal information. We encourage you to read the privacy notices on the other websites you visit.
Changes to this privacy notice
We keep our privacy notice under regular review to make sure it is up to date and accurate. This notice was last updated in July 2024.