This privacy notice tells you what to expect us to do with your personal information when you make contact with us or use our services. This notice is layered so, if you wish, you can easily select the reason we process your personal information and see what we do with it.
Controller’s contact details
Saving Lives UK is the controller for the personal information we process, unless otherwise stated.
There are many ways you can contact us, including by phone, email and post. More details can be seen here.
Our postal address is:
Telephone: 07838 214191
For general contact please use this page of our website.
Data Protection Officer’s contact details
Our Data Protection Officer is Scott Sammons. You can contact him at email@example.com.
How do we get information?
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- You have made a request to us for a postal testing kit.
- You have a complaint or enquiry to us.
- You have made an information request to us.
- You wish to attend, or have attended, an event.
- You subscribe to our e-newsletter.
- You have applied for a job or secondment with us.
- You are representing your organisation.
We also receive personal information indirectly, in the following scenarios:
- We have received the results of our postal testing kit which you requested and returned.
- We have contacted an organisation about a complaint you have made and it gives us your personal information in its response.
- We have been contacted by another organisation in respect of a Subject Access Request that you have made.
- A complainant refers to you in their complaint correspondence.
- An employee of ours gives your contact details as an emergency contact or a referee.
If it is not disproportionate or prejudical, we’ll contact you to let you know we are processing your personal information.
As part of the work of Saving Lives UK, we process special category data. Please read our Safeguards Policy – special categories of personal data here.
Your data protection rights
Under data protection law, you have rights we need to tell you about. The rights that you have depend on the reason we have for processing your information.
Right of access
You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
Right to rectification
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
Right to erasure
You have the right to ask us to erase your personal information in certain circumstances.
Right to restriction of processing
You have the right to ask us to restrict the processing of your information in certain circumstances.
Right to object to processing
You have the right to object to processing if we are able to process your information because the process forms part of our contractual obligations, or is in our legitimate interests.
Right to data portability
This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.
You are not required to pay any charge for exercising your rights. We have one month to respond to you.
Please contact us at firstname.lastname@example.org if you wish to make a request.
Sharing your information
We will not share your information with any third parties for the purposes of direct marketing.
We use data processors who are third parties who provide elements of services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.
In some circumstances we are legally obliged to share information. For example under a court order. In any scenario, we’ll satisfy ourselves that we have a lawful basis on which to share the information and document our decision making and satisfy ourselves we have a legal basis on which to share the information.
We may also share your information in the event of the non-payment of any monies owed to ourselves as a Charity by yourself. If the debt remains outstanding after the specified timeframe for payment, no payment plan is in place or an agreed payment plan is not being adhered to, we may initiate formal proceedings to recover the full amount of the unpaid penalty. As a result Saving Lives UK will share personal data with the litigation and recovery specialists it instructs in order for them to identify assets and undertake recovery action through the courts.
Links to other websites
Where we provide links to websites of other organisations, this privacy notice does not cover how that organisation processes personal information. We encourage you to read the privacy notices on the other websites you visit.
Your right to complain
We work to high standards when it comes to processing your personal information. If you have queries or concerns, please contact us at email@example.com and we’ll respond.
If you remain dissatisfied, you can make a complaint about the way we process your personal information to us.
For information about how we process a complainant’s information, please see this section of our privacy notice.
Changes to this privacy notice
We keep our privacy notice under regular review to make sure it is up to date and accurate. Any revision to our Privacy Notice will be published on this page and old versions will be maintained via a link at the foot of this page.
We do not provide services directly to children or proactively collect their personal information.
Do we use any data processors?
We do use external service providers in the UK for the case management system we use to manage our IT systems and services as well as our website and provide our DPO (Data Protection Officer) services.
Do we make any overseas data transfers?
Any transfers are made in line with our data protection obligations.
Purpose and legal basis for processing
Our purpose for processing this information is to provide you with the clinical services for which you have contacted us.
The legal basis we rely on for processing your personal data is article 6(1)(b) of the GDPR, which relates to processing necessary to perform a contract or to take steps at your request, before entering a contract. The legal basis we rely on to process any information you provide as part of your application which is special category data, such as health or ethnic information is article 9(2)(h) of the GDPR, which also relates to our obligations of providing medical diagnosis and the safeguarding of your fundamental rights.
How long is the information kept for?
For information about our retention period in respect of your information please refer to our ‘Retention Period Policy’ or contact our DPO at the email address above.