Last updated: July 2024
Version: 1.0
Definitions
GDPR - Means the UK General Data Protection Regulation.
DPA - Means the Data Protection Act 2018.
Introduction
a. The privacy and security of your personal information is extremely important to us. We want everyone to feel confident and comfortable that any personal information they share with us will be looked after.
b. This privacy policy explains how and why we use your personal data, to make sure you stay informed and can be confident about giving us your information.
c. Shared Care needs to keep certain information on its course participants in order to carry out its day to day operations, to meet its objectives and to comply with legal obligations.
d. We are committed to protecting individuals’ personal information and privacy and ensuring any personal data is dealt with in line with the GDPR and the DPA. To comply with the law, personal information will be collected and used fairly, stored safely and not disclosed to any other person unlawfully.
e. We’ll never sell your personal data and will only share it with trusted third party organisations we work with when it’s necessary to send you updates or deliver courses to you, and the privacy and security of your data is assured.
f. If you have any questions in relation to this privacy policy or how we use the personal data you share with us, please contact our Data Controllers’ Data Protection Officer at [email protected] or write to us addressed to the Data Protection Officer, Kidney Care UK, 3 The Windmills, St Mary’s Close, Turk Street, Alton, GU34 1EF. You can also telephone us on 01420 541424.
1. Who we are
a. The Sharing Haemodialysis Care website is intended to bring together information and guidance about the varied areas of shared haemodialysis care.
b. The vision of Shared Care is for people who receive treatment at dialysis centres to have the opportunity and support to participate in their treatment and thereby improve their experience and their outcomes.
c. Shared Care is funded by Kidney Care UK who are the UK’s leading kidney patient support charity, a registered charity (charity number 270288 in England and Wales, SC048198 in Scotland) and a company limited by guarantee (company number 1228114).
d. If you are a medical professional, patient or a visitor to our website Kidney Care UK act as the ‘data controller’ of personal data. This means they determine how and why your data are processed. Kidney Care UK are registered as a data controller at the UK Information Commissioner’s Office under number Z7124610.
2. What personal data do we collect?
a. We record a small amount of information about how our site is used to help us develop and improve it, and therefore provide the best possible service to our visitors. This data is not personal and cannot be traced back to any individual visitor.
b. Most of the content on this site is publicly and freely available, and therefore we do not collect any personally identifiable information from our visitors when they access this content.
c. In some areas of the site you will have the option to request further information via a contact form. These forms will require a small amount of personally identifiable information, such as:
Your name
Your work email
Your organisation, role and place of work
d. Where you have consented to this for specific, explicit and legitimate purposes, or for which we feel you would have a legitimate interest
Where this is necessary to fulfill legal obligations that apply to us
Where it is necessary for our legitimate interests relating to running our daily operations, as long as, in each case, these interests are in line with applicable law and your legal rights and freedoms
4. How we use your personal data
a. We use the personal information collected to help us promote and provide our courses and forums
b. Use of photography and media:
As part of this project, we have built up a library of stock photos taken at various participating NHS dialysis units across the UK. We have also produced several videos relating to Shared Care. All persons involved in these photos and video recordings provided their consent for their image to be taken and for these to be used in media supporting the Shared Care project.
We may also take photos at relevant events for use in new articles, or request photos from third party sources where appropriate.
We will always ensure that explicit, informed consent has been given for this use where identifiable persons are included.
At the time your photo was taken you should have been informed fully about how the photo would be used and where it would be shared, and you should have been given the opportunity to give your consent for the photo to be taken.
If you do not believe you were given the opportunity to consent to your photo being used, please contact our Data Protection Officer and we will endeavour to investigate and resolve the issue as soon as possible.
c. News articles and stories:
As part of the Shared Care project, we have been serving as a platform for patients and staff to share their experiences in participating in Shared Care. This takes the form of written stories and news articles which are published on this site, often accompanied by photos
All persons referenced in these articles gave their consent for the article to be published on the site.
If a photo or video on this site contains your image and you either wish to withdraw your consent for its use, or believe you did not provide informed consent for its use, please contact our Data Protection Officer and we will endeavour to investigate and resolve the issue as soon as possible.
d. We are committed to protecting individuals’ personal information and privacy and ensuring any personal data is dealt with in line with the GDPR. To comply with the law, personal information will be collected and used fairly, stored safely and not disclosed to any other person unlawfully.
We will only keep your information for as long as is reasonable and necessary for the relevant activity, which may be to fulfil statutory obligations.
5. Keeping your information safe
a. Your privacy is important to us, so we’ll always keep your details secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.
b. We will never sell or share your personal information with third party organisations so that they can contact you for any marketing activity. We will only share your information with trusted partners who work with us or on our behalf to deliver services to you.
6. Updating your data and marketing preferences
a. We'd love to stay in touch, but we don't want to out-stay our welcome - we want you to remain in control of your personal data.
b. Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
c. You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
d. If at any time you want to update, amend or remove your personal data or marketing preferences, please contact us in one of the following ways:
By email – [email protected]
Via the website at www.kidneycareuk.org
Call 01420 541424
Click on the unsubscribe or update my preferences links at the bottom of every email that we send to you or contact the sender.
Write to our Data Protection Officer
Kidney Care UK
3 The Windmills
St Mary’s Close
Turk Street
Alton GU34 1EF
7. How to complain
a. If you have any concerns about our use of your personal information, you can make a complaint to us at Data Protection Officer, Kidney Care UK, 3. The Windmills, St Mary’s Close, Turk Street, Alton, GU34 1EF. You can also telephone us on 01420 541424.
b. You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
8.Making this policy great and updates
- Well done for getting to the bottom of this policy. We have designed it to be as transparent, useful and engaging as possible and we would love to hear your feedback on how we can make it even better - please contact us at [email protected].
- Please don’t make this the last time you read it as we will review this policy at least once a year to make sure it is up to date and accurate. As a result, we may need to make changes to the policy, which will be posted on our website or for any significant changes we will of course notify you by email.