We are committed to protecting your personal information, as well as being open and honest about how we collect, store and use personal data. We know that your personal information needs to be kept safe, and we never give or sell any personal data to other charities or organisations.
Teenage Cancer Trust is a company registered in England and Wales (3350311) and a charity registered in England and Wales (1062559) and Scotland (SC039757) and The Teenage Trust (Trading) Limited, is a company registered in England and Wales (2691170), whose registered office is at 93 Newman Street, London, W1T 3EZ.
Our website www.iamportal.co.uk is owned and operated by Teenage Cancer Trust
Under the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR') and Data Protection Act 2018 ('the Act'), personal data is defined as 'any information relating to an identified or identifiable natural person ('data subject'), by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person'.
Our basis for processing your personal information
We will only collect and use your personal information where we have a legal basis to do so and will always respect your rights.
Where we use your information, it may be because you have consented to us doing so or because we consider we have a legitimate interest to do so. Where we do rely on a legitimate interest to use your information, we promise never to do it in an intrusive way or to cause distress, and to always respect your rights. Other reasons may include using information because we have a legal obligation to do so or because we have to fulfil contractual obligations.
Examples of why we use your personal information include:
· To keep you updated on updates to the IAM Portal
· We have a legal obligation to use your information
· We also reserve the right to apply our legitimate interest wherever we believe it is appropriate, but we promise that we will never do this in an intrusive way and will always respect your rights and freedoms when doing so. Some examples of when we would rely on our legitimate interests include:
1. To pursue our organisational aims and objectives
2. To ensure we meet our regulatory requirements as a charity
3. To manage our ongoing relationship with NHS Teenage Cancer Young Adult Cancer Services
What personal information do we collect?
The personal information we collect about you will depend on how and why you are engaging with us. It could include (but is not limited to):
· Your name, address, telephone number, e-mail address, date of birth, motivation for supporting the charity and your contact preferences.
· Other information you provide to us from time to time which is relevant and necessary for us to collect and process.
· We may also collect information about your activity online when you visit our website and when we send you an email. Please see the section below on our Cookies Policy for further details.
If you shared with us any sensitive information, including your medical history, the information you have provided will be kept by Teenage Cancer Trust and will be treated with the strictest confidence. It will not be shared with a third party without your consent unless we have a statutory obligation to do so, or there are concerns for your safety which Teenage Cancer Trust has a duty to report to the relevant authority in order for appropriate action to be taken. We will only keep your information where it is relevant to your interaction with us and only for as long as it is necessary.
How we use your personal information
We use your personal information for the following purposes:
· To respond to or fulfil any requests, complaints or queries we receive from you.
· To keep you up to date with news about the IAM Portal
· To pursue our organisational goals, including offering every young person with cancer the support they need, when they need it – before, during and after diagnosis.
· To manage your contact preferences. If you ever want to change the way we keep in touch, just let us know by emailing firstname.lastname@example.org
· To keep records of your relationship with us for example questions you have asked us
· To create anonymous and aggregated reports about our supporters and the young people we support, to ensure our organisation is communicating with and delivering the best possible information and services.
· To inform our digital and social media marketing. For example, we may use your information to enable us to display adverts to you, or to potential supporters who have similar characteristics to you.
· For our internal purposes such as management, research, analytics, organisational reporting, and ways that will improve efficiencies.
· To comply with applicable laws, regulations, court orders, government and law enforcement agencies’ requests, to operate our systems properly and to protect ourselves, the young people we support, our supporters, our employed and funded staff and to solve any customer disputes.
· To help the emergency services if required.
Who we share your personal information with
· The data you enter into the IAM Portal is shared with the NHS Teenage and Young Adult Cancer Team who are supporting you
We never give or sell any personal information to any other charities or organisations. However, there are some circumstances where we would share your data with third parties. For instance:
· If we are legally required to do so, e.g. court order, law enforcement agency pursuing an investigation.
· If we believe it necessary to protect or defend our rights or the personal safety of our personnel or a young person we support.
International transfers of your personal information
The data that we collect from you will be processed at our servers in the UK. It may also be processed by organisations operating in the EEA that Teenage Cancer Trust has instructed.
If personal data is transferred outside the UK or EEA to a country without a designated adequacy rating, Teenage Cancer Trust will request the data subject's consent before processing the data. Consent will not be sought where the processor's Binding Corporate Rules, Standard Contractual Clauses or Adhoc contractual clauses stipulate that the data will be processed in accordance with the GDPR.
How long do we keep your personal information?
We store your personal data in accordance with our data retention policy. This policy is reviewed and updated internally to ensure we do not store your data for longer than is necessary. We also review how and where we store any data to ensure that we meet our obligation to store data securely.
In addition, some of the data we hold may be subject to certain legal and regulatory obligations, which provide a minimum retention period for different types of data. The retention period varies depending on the data we hold.
If you would like to know how long we will hold any specific information, then please contact our Data Protection Officer at email@example.com and they will provide you with further details.
Access and control over your personal information
· You have a right to know what personal information we hold about you. If you'd like a copy of this information, please contact our Data Protection Officer at firstname.lastname@example.org. We will not charge you for processing your request and supplying your information to you and we are legally bound to deliver this information in a format of your choice within ONE month. We may need to ask you to send us evidence of your identity and the one-month response period starts from the date we confirm your identity.
· You have the right to request that we correct inaccurate and/or incomplete personal information we hold about you. If our records are incorrect or incomplete, please let us know by emailing email@example.com or calling our Supporter Care team on 0207 612 0370.
· If you have given us your consent to process your information, you can withdraw or restrict it whenever you wish by emailing firstname.lastname@example.org or calling our Supporter Care team on 0207 612 0370. You will be offered the right to withdraw your consent (opt-out) to every type of communication we send you.
· In certain circumstances, you may request that we erase the personal information we hold about you (‘the right to be forgotten’). This will mean we may not recognise you should you decide to support us in the future. For further information and to understand your options please contact our Data Protection Officer at email@example.com.
How we protect your Personal Information
We maintain the highest standards of data privacy and security to protect your personal details and other information about you because we want you to feel completely confident about engaging with us. We regularly review our processes and procedures to protect your information from unauthorised access and use, accidental loss and/or destruction.
Sometimes we use other organisations (known as ‘data processors’) to process your personal information on our behalf. We don’t allow them to use this information for their own purposes and they have to follow our strict instructions whilst complying with appropriate security measures. We constantly assess their security measures when we bring them on board and we continue to monitor their compliance throughout the time we use their services.
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites. There are a few external companies we work with, who set cookies on our website. These cookies are mainly used for reporting and advertising so we can improve the way we communicate. We use websites like Youtube and Vimeo to embed videos, and they may send you cookies too. We don’t control the setting of these cookies, so check those websites for more information.
Making a complaint
If you have any feedback or would like to make a complaint about how we handle your personal information, please contact us so we can investigate and address your concerns. For how to make a complaint, please see our Complaints Policy. You also have the right to complain about how we collect and use your personal information to the UK data protection regulator, The Information Commissioner’s Office (ICO). For further information please visit https://ico.org.uk/make-a-complaint/ or contact the ICO by telephone on 0303 123 1113 or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF.