Privacy statement and notice

St Christopher’s Hospice takes privacy and the protection of personal and sensitive information seriously.

Privacy Statement

St Christopher’s Hospice takes privacy and the protection of personal and sensitive information seriously. We have robust technical and organisational systems and measures in place to manage and protect all personal data. These measures include data encryption, up to date security software and controls to guard against unauthorised access, unlawful processing, accidental loss, damage or destruction.

Our Privacy notice explains how we use and protect your personal information, to show that we are adhering to the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA).

It also explains how we collect and use the personal information that you provide to us whether, in person, online or via phone, email, letter or other correspondence, this includes data from our website and sets out how St Christopher’s Hospice uses and protects any information that you give us.

Privacy Notice

St Christopher’s Hospice is committed to protecting your privacy and right to confidentiality. We comply with UK GDPR, DPA and NHS requirements concerning confidentiality and information security standards.

This notice explains how we use any personal information we collect about you based on your relationship with St Christopher’s Hospice, detailing how we collect data, how we store it, how we use it and protect it.

St Christopher’s Hospice is a registered charity (Charity Number 210667). St Christopher’s Hospice exists to promote and provide skilled and compassionate palliative care of the highest quality. The UK GDPR and DPA require every organisation that processes personal information to be registered with the Information Commissioner’s Office.

Our registration number is Z6199614.

Trading’s registration number is ZA875113 and Trustees Pensions number is ZA309448.

You can view our full Data Protection Policy online here or request a copy of the policy by contacting us at:

Information Governance & Data Protection Manager
St Christopher’s Hospice
51-59 Lawrie Park Road, Sydenham
London, SE26 6DZ
020 8768 4500

Email: privacy@stchristophers.org.uk

Your information: how we use and keep it

A useful leaflet is available called ‘Your information: how we use and keep it’

View leaflet

Quick links

Where we process your data under the lawful basis of consent, you have the right to withdraw your consent at any time. You can do this by contacting us. We also send links with all communications that allow you to with draw consent by following the link.

Please see below our photography and videography consent information. If you would like to withdraw your consent to this type of processing at any point it is your right to do so. To withdraw consent please click ‘show more details’ and complete the short form.y

To exercise any of these rights, please contact us at the address below. We will then send you a form so you can provide us with as much information as possible about the nature of your request. This will help us locate your records. There is no requirement to complete this form to make a valid request, however, it has been designed to capture the information we may reasonably require to process your request effectively.

Please address any of the above requests, or any other request about your information in writing via post or email to our Data Protection Officer at

Information Governance & Data Protection Officer
St Christopher’s Hospice
51-59 Lawrie Park Road
London
SE26 6DZ
Email: privacy@stchristophers.org.uk

Withdrawing consent

To withdraw consent please complete this short form, so that we can locate and remove your image or story from our records.
Name
First Last
Email*
Enter Email Confirm Email
Telephone
Date your image/story was captured*
Please provide at least the month and year
Location your image/story was captured*
This might be a place, or the name of an event
How we use your data from this form
We take your personal data and privacy seriously. We will only contact you regarding your consent withdrawal if we need to. Once your consent withdrawal request has been handled, we will delete your contact details. You will not be added to any database or mailing list.

PHOTOGRAPHY & VIDEOGRAPHY CONSENT

At mass participation events St Christopher’s can take photographs and video content. If you attend one of these events, your image may be captured.

The photographs and video footage taken are processed securely and in compliance with data protection legislation.

Our lawful basis for the processing is legitimate interests, with our interests being to promote the event and St Christopher’s.

We may share these photographs and video content on external platforms, including but not limited to LinkedIn, Instagram, Facebook, TikTok, X and also on our website stchristophers.org.uk. We may also share images in printed communications, future promotional materials and at future events.

If you attend one of these events and do not wish to be captured please speak to a member of staff or event representative. You can also contact the communications team directly on communications@stchristophers.org.uk.

PATIENTS & SERVICE USERS – ADULTS

The Information We Collect About You

We obtain personal information from you when you are referred or enquire about our services and activities, send or receive an email, contact us via a telephone or mobile call, or otherwise provide us with your personal information.

We may obtain your personal information from third party data where they have a lawful basis to share your information to us, i.e. a referral for care.

If you are referred to one of our clinical services, we will collect data from you and may also receive your personal data from and share it, where necessary, with other healthcare providers and other services who are involved with your care.

In order to provide complete care, we may also collect some information about family members and carers.

Where Next of Kin or family details are provided within clinical services, this information will be shared with our Fundraising team to enable invitation to memorial events to be sent to loved ones. In addition, we may also share this information with our Spiritual care team to enable an offer of Spiritual support for loved ones. Information is also passed to our Bereavement Team when a patient dies to enable an offer of Bereavement Support to be made directly to a patient’s loved ones. These are sent on referral after a patient or family member has enquired, consent is always obtained.

If you stay at or visit our premises, such as our Inpatient Unit, we may collect your image on CCTV. We use CCTV to property, staff and patients. We may also take photographic images of you for medical purposes, with your prior consent, such as in the case of pressure ulcers. These will be processed only to assist in your care. We also receive and share data about our patients and their families and carers from other healthcare providers to support the provision of your care.

Personal data we collect may include one or more of the following:

Patient details such as name, address, telephone number, email address, date of birth
Patient Health Care Records (electronic or paper)
Patient GP details (plus other involved health care professionals)
Patient representative details, such as name, address, telephone number and email address
In addition, we may need to contact other agencies for relevant health or social care information for the benefit of our patients’ care

We use your personal data for a number of purposes including the following:

Information relating to diagnosis, treatment and care will be shared across our multi-disciplinary hospice teams to ensure all our healthcare professionals are updated for continuing care
Advising patient representatives (keeping in touch)
If appropriate, information will be shared with external healthcare professionals such as GPs, Hospitals and other involved health care professionals, such as our contracted Pharmacy
For medical research and educational purposes

We will process your data where:

When we have your consent to use your information
When it is necessary for compliance with a legal obligation to which we are subject (for example a change in the law)
When there is a legitimate interest to do so – for example, in order to fulfil our duty of care to you
When it is in the public interest to do so (for example, a notification of infectious diseases (NOID) that need to be reported to the Local Authority health protection team)
Where data disclosure may be required by law, for example to government bodies and law enforcement agencies

We will process your special category data where:

The processing is necessary for the provision of health care services
The processing is necessary to protect the vital interests of the data subject or other person.
You have provided your explicit consent to the processing for continuing healthcare and support
The processing is necessary for St Christopher’s Hospice to comply with its obligations i.e. For safeguarding purposes

In some cases, we also require a condition under the Data Protection Act 2018 for the processing of your data. This is detailed in our Appropriate Policy.

Please be assured, we never share, sell, swap or rent your data to third parties for marketing purposes.

We adopt appropriate data collection, storage, and processing practices, including the use of multifactor authentication for remote access, to safeguard your personal and transactional data from unauthorised access, alteration, disclosure, or destruction on our website and systems.

We have security procedures, rules and technical measures in place to protect your data. Your data will be kept in a secure environment with access restricted on a need to know basis. We do not keep your data for longer than is required by law or necessary for the purpose for which it was obtained.

We aim to ensure that all information we hold about you is accurate and, where necessary, kept up to date. If any of the information we hold about you is inaccurate and either you advise us or we become otherwise aware of this, we will ensure it is amended and updated as soon as possible.

We take great care to ensure that your data is kept secure at all times. Data is only accessible to appropriately trained Employees and volunteers whose job functions makes it necessary that they have access to your information.

Although most of the information we store and process stays within the UK some information may be transferred to countries outside of the UK. Where your data is to be transferred we will ensure there is an appropriate transfer mechanism to safeguard your data in place.

We will keep your information for as long as required to enable us to operate our services, but we will not keep your information for any longer than is necessary. We will take into consideration our legal obligations, tax and accounting rules when determining how long we should retain your information. When we no longer need to retain your information, we will ensure it is securely disposed of, at the appropriate time.

SERVICE USERS – CHILDREN

As a child service user, you are entitled to the same rights as adult service users. We collect the same type of information about you as we do from the adults, process it for the same reasons and hold your data in the same way.

Where your data is held with the under the lawful basis of consent we may need to gain the consent of your parents/guardian but where possible we will ask you for your consent. Your details are kept securely with restricted access and handled with the greatest respect for privacy.

We may share your details with our Candle Child Bereavement Service, which provides bereavement services for children. Please see our children’s privacy notice where we explain how we use your data more clearly for you.

BEREAVEMENT SERVICE USERS – ADULTS AND CHILDREN

We may obtain your personal information from third party data where they have a lawful basis to share your information to us, i.e. a referral for bereavement support.

If you are referred to us, we will collect data from you and may also receive your personal data from and share it, where necessary, with other healthcare providers and other services who are involved with your care, such as Social Services or schools.

In order to provide complete care, we may also collect some information about family members and carers.

If you stay at or visit our premises, we may collect your image on CCTV. We use CCTV to protect property, staff and patients in accordance with law.

What information we collect about you

Personal data we collect may include one or more of the following:

Details such as name, address, telephone number, email address, date of birth
GP details (plus other involved health care professionals)
Details of who died and how
School details (if under 18)
Representative details, such as name, address, telephone number and email address along with any familiar details
In addition, we may need to contact other agencies for relevant health or social care information for the benefit of our clients’ care
Information shared within a session

We use your personal data for a number of purposes including the following:

Information will be shared within Bereavement to ensure all our healthcare professionals are updated for continuing care
If appropriate and with your consent information will be shared with external professionals such as GPs and other health or social care professionals and/or education professionals for those under 18 and this may be done as part of referral to another service.
If we have concerns about your safety or that of someone else, then we will share this information with other professionals and may need to do so without your consent.
For educational purposes

We will process your personal data where:

When we have your consent to use your information or consent of a parent, carer or next of kin
When it is necessary for compliance with a legal obligation to which we are subject (for example a change in the law)
When there is a legitimate interest to do so – for example, in order to fulfil our duty of care to you
Where data disclosure may be required by law, for example to government bodies and law enforcement agencies

We will process your special category data where:

You have provided your explicit consent to the processing for continuing ~~healthcare and~~ support
The processing is necessary for St Christopher’s Hospice to comply with its obligations i.e. For safeguarding purposes
UK GDPR Article 9(2)(c) which is processing that is necessary to protect the vital interests of the service user or those of another person
UK GDPR Article 9(2)(h) which is processing that is necessary for the provision of healthcare

Please be assured, we never share, sell, swap or rent your data to third parties for marketing purposes.

We take great care to ensure that your data is kept secure at all times. Data is only accessible to appropriately trained employees and volunteers whose job functions makes it necessary that they have access to your information.

We do not routinely transfer your data to countries outside of the UK. Where your data is to be transferred we will ensure there is an appropriate transfer mechanism to safeguard your data in place.

Our Candle Child Bereavement Service provides bereavement services for children. Please see our children’s privacy notice where we explain how we use your data more clearly for you.

We use anonymised information to improve our services and support research.

To help us understand how well our services are working and to improve what we offer, we sometimes remove details that could identify individuals—this process is called anonymisation. We may then use this anonymised information in research or share it with trusted partners, such as the Childhood Bereavement Network at the National Children’s Bureau (NCB). This helps us and others understand what support works best across different services.

EMPLOYEES

The Information We Collect About You

When you apply to work at St Christopher’s Hospice (for a temporary or permanent position, or as a contractor) we will only use the information you give us to process your application and to monitor recruitment statistics unless you are the employed by us If we want to disclose information to someone outside the hospice – for example, if we need a reference, or need to get a criminal record check from the Disclosure and Barring Service – we will make sure we tell you beforehand unless we are required to disclose this information by law. Unless your application is successful we will retain your application data for 6 months before securely deleting it.

When you apply or go on to work at St Christopher’s Hospice, we will typically collect the following information about you:

Name
Date of Birth
Address
Mobile phone number
Emergency contact details (where we offer you a position)
National Insurance Number
A copy of your passport or immigration document (where we offer you a position)
Your skills, knowledge, experience and qualifications where applicable
Industry/ professional body registration details where applicable
Contact details for referees
Pre-employment checks – DBS information (where we offer you a position)
Full employment history
Equality and Diversity monitoring information

Where your application is successful, and you are then employed by us, we will also collect data about you during the course of your employment. This will include performance data including probation, training and appraisals data as well as reasons for sickness absence data.

If you are unsuccessful in your job application, we will hold your personal information for 6 months after we have finished recruiting the post you applied for. After this date, we will destroy or delete your personal information. We keep information about the applications process in order develop and improve our recruitment processes, but this information is kept in a form that ensures that individual applicants cannot be identified.

If you begin employment with us, we will put together a file about your employment. We keep the information in this file secure, and will only use it for matters that apply directly to your employment.

Once you stop working for us, we will keep this file according to our record retention guidelines. You can contact us to find out more about this.

We will in most cases process your data under the legal basis of UK GDPR Article 6(1)(b) where the processing is necessary for the performance of a contract, i.e. our employment contract with you.

In some cases, we may process your personal information under UK GDPR Article 6(1)(a) where you have given consent for the processing or in accordance with Article 6(1)(c) where the processing is necessary for compliance with a legal obligation to which we are subject for example to ensure that those we care for are safe and therefore we need to verify that applicants and employees hold the required qualifications.

We may also process your data under Article 6(1)(d) where the processing is necessary in order to protect your vital interests or those of another person.

Where appropriate we will also process your data under Article 6(1)(f) where the processing is necessary for our legitimate interests, for example where we operate CCTV for the safety of individuals and protection of our property.

Your information will be shared where data disclosure may be required by law, for example to government bodies such as HMRC for tax purposes

Date of birth information is collected for pension and if applicable, redundancy purposes.

Your mobile or home phone number may be used in the event of work-related emergencies.

We also process special category data about you (such as ethnicity data and health information). We do this under the following lawful bases:

UK GDPR Article 9(2)(b) where processing is necessary for us to comply with our obligations as an employer.
Article 9(2)(a) where you have given explicit consent to the processing of those personal data for one or more specified purposes.
Article9(2)(c) if processing is necessary to protect the vital interests of yourself or another person.
Article 9(2)(h) where processing is necessary for the purposes of preventive or occupational medicine and assessing your working capacity as an employee.

Where we process your special category data under Article 9(2)(b) or 9(2)(h) a condition from Schedule 1 of the DPA 2018 is also required as detailed in our Appropriate Policy.

We have security procedures, rules and technical measures in place to protect your data. Your data will be kept in a secure environment with access restricted on a need to know basis. We don’t keep your data for longer than is required by law or necessary for the purpose for which it was obtained.

VOLUNTEERS

What Information We Collect About You

As appropriate for a volunteer role, we may ask:

Emergency contact information
Mobile phone number
Contact details for referees
Your interests, experience, relevant qualifications
Your driving licence records
Any previous convictions
Your DBS
Relevant medical conditions
If you have been bereaved in the last 18 months

We collect this information we give you a suitable volunteer role and support you to carry out the duties of the role. We also have to ensure that those we care for are safe – it is our moral and legal obligation.

We will in most cases process your data under the legal basis of UK GDPR Article 6(1)(b) where the processing is necessary for the performance of a contract, i.e. our volunteer contract with you.

We may also process your data under Article 6(1)(d) where the processing is necessary in order to protect your vital interests or those of another person.

Where appropriate we will also process your data under Article 6(1)(f) where the processing is necessary for our legitimate interests.

Your mobile or home phone number may be used in the event of work-related emergencies.

We also process special category data about you (such as ethnicity data and health information). We do this under the following lawful bases:

UK GDPR Article 9(2)(b) where processing is necessary for us to comply with our legal obligations.
Article 9(2)(a) where you have given explicit consent to the processing of those personal data for one or more specified purposes.
Article9(2)(c) if processing is necessary to protect the vital interests of yourself or another person.
Article 9(2)(h) where processing is necessary for the purposes of preventive or occupational medicine and assessing your working capacity.

Where we process your special category data under Article 9(2)(b) or 9(2)(h) a condition from Schedule 1 of the DPA 2018 is also required as detailed in our Appropriate Policy.

If your volunteering role requires remote access to St. Christopher’s IT systems, we will ask you to set up 2 factor authentications on your mobile phone for added security.

We have security procedures, rules and technical measures in place to protect your data. Your data will be kept in a secure environment with access restricted on a need to know basis. We don’t keep your data for longer than is required by law or necessary for the purpose for which it was obtained.

FUNDRAISING/SUPPORTERS

Where We Collect Information About You

We collect information from you directly which you provide when you fill in any of our online or printed forms to make a donation, sign up to an event or buy a product. Sometimes, this information is collected by an organisation working on our behalf, but we are responsible for your data at all times.

We also collect information shared with us by independent organisations. These third parties will only share your information with us when you have given permission for them to do so.

The type of information we collect will include:

Names
Addresses
Next of kin
Family connections
Email
Telephone details
Dates of birth
Communication preferences and information, you have shared such as your experience of the hospice or why you have chosen to support our work.

When taking part in a challenge event, you may also be asked for health information and emergency/next of kin contact information for health and safety reasons.

We hold records of your donations and fundraising efforts alongside communications we have sent to you and those we have received from you.

When you sign up to our events, depending on the event, we have an obligation to check that you are in a reasonably good health to participate safely in the event you signed up for.

We have a legitimate interest to contact you about making or increasing your donations to St Christopher’s Hospice (where you have consented to us contacting you).

We also have a legitimate interest to invite you to fundraising, memorial and other related events. (where you have consented to us contacting you).

We may also have to share your donation information with HMRC in order, for example, to process Gift Aid.

We use your information to process your donations or product/information requests, provide appropriate acknowledgement and collect gift aid. We also keep a record of your relationship with the hospice and your contact preferences.

We will also use your information to keep you informed of our work, the latest news and to ask for donations or other fundraising support in accordance with your contact preferences.

We make it easy for you to tell us how you want us to communicate with you and include information on how to select your communication preferences when we send you marketing and communication material.

We may analyse geographic, demographic and other information relating to you and this allows us to understand the background of our supporters, which helps us to make appropriate requests to supporters who may be willing and able to give more than they currently do, or to identify those who may be able to support us in other ways. This information is compiled using publicly available data about you.

Where possible, we will ask you about your contact preferences at the first point of contact, i.e. when you first register for an event, make a donation or request fundraising information. However, when this is not possible, we will ask you about your contact preferences in an appropriate and timely manner.

We have security procedures, rules and technical measures in place to protect your data. Your data will be kept in a secure environment with access restricted on a need to know basis. We don’t keep your data for longer than is required by law or necessary for the purpose for which it was obtained.

You can unsubscribe from fundraising communications via our fundraising unsubscribe form.

PROFESSIONAL LEARNING & LIBRARY SERVICES

Professional Learning training programmes and conferences are delivered by St Christopher’s Hospice through the Education Department to delegates who may be individuals employed by or volunteer for St Christopher’s, or who may be external to the hospice and from countries outside the UK/EU.

The library is open to all staff who may wish to borrow books and other resources.

The information we collect is made clear on the education application form and will include details such as:

Your contact details
Name of employer/ Institution
Event or programme of interest,
Payment details – These will include debit or credit card details. Please note that this information is processed by a third-party secure payment solutions provider called Opayo.

We will normally collect this information directly from you or your employer if they have booked the place on the event for you.

Library book borrowers are registered by name.

We will in most cases process your data under the legal basis of the UK GDPR 6(1)(b) where the processing is necessary for the performance of a contract, i.e. our contract to provide services to you.

When you sign up to our educational events or programmes, we may also, based on contractual obligation, share your details with the relevant certificate awarding body. For example, if you sign up to a City and Guilds programme, we will share your details with them.

We will process your debit or credit card details for the purpose of processing your payments to fulfil our contract with you.

We also have a legitimate interest to inform you about related education programmes and events that we think might be of interest to you and will contact you with this information where you have consented to hear from us.

We use your personal information at St Christopher’s CARE to undertake the following:

Administer your payment by sending you an invoice where applicable
Send you relevant correspondence about your registration, event or educational programme you have signed up to.
Provide you with services, products or information you have asked for and check annually that you still want to receive this information.
Manage our training events, programmes and conferences
To keep a record of your relationship with us
Respond to or fulfil any requests, complaint or queries you make to us
Contact you if you enter your details onto one of our online forms, and you don’t ‘send’ or ‘submit’ the form, to see if we can help with any problems you may be experiencing with the form or the online registration process.
Understand how we can improve our services, products or information by conducting analysis and market research
Audit and administer our accounts
Manage the library books borrowed and returned.

Information about our delegates will be shared with the service suppliers instructed by us. For example, name and address details of individuals we wish to mail information to must be sent to a print and mailing house to fulfil this purpose.

Other suppliers that we work with support us through email delivery platforms, direct marketing, data analysis and insight.

Any information shared to support and further the work of the St Christopher’s CARE department is processed by the supplier under contract with St Christopher’s remaining in control of your information at all times.

Some of our suppliers run their operation of the UK. Where your data is to be transferred we will ensure there is an appropriate transfer mechanism to safeguard your data in place.

Application and payment information is kept for a maximum of 5 years for legal reasons and registration for Continued Professional Development for 5 years.

Although most of the information we store and process stays within the UK some information may be transferred to countries outside the European Economic Area. This may occur if, for example, one of our trusted partners’ servers is located in a country outside the EU. These countries may not have similar data protection laws to the UK, however, we will take steps with the aim of ensuring your privacy continues to be protected as outlined in this privacy policy.

We have security procedures, rules and technical measures in place to protect your data. Your data will be kept in a secure environment with access restricted on a need to know basis. We don’t keep your data for longer than is required by law or necessary for the purpose for which it was obtained.

You can unsubscribe from education communications via our education unsubscribe form. There will also be a unsubscribe link included in all communications from us.

FURTHER INFORMATION

We are committed to protecting the privacy of the young people that engage with us through our website and at fundraising events. Our fundraising events also request specific information about the age of participants. Anyone under the age of 16 must obtain parental or guardian consent before participating in an event organised by St Christopher’s Hospice. We have a child friendly privacy notice (available here).

We gather non-identifiable general information from the use of our websites such as pages visited and areas that are of most interest to users. We use this information to improve our website and make it a better experience for everyone. More information can be found in the cookies section below.

Your Rights

Under the UK General Data Protection Regulation, you have the following rights regarding the processing of your data. Note, some are these rights are not absolute and only apply in some circumstances:

The right to access your personal information
The right to edit and update your personal information
The right to request to have your personal information deleted
The right to restrict processing of your personal information
The right to object to the processing of your personal information
The right to data portability
The right to lodge a complaint with a supervisory authority

We do not carry out automated decision making or profiling.

1. The right to access your personal information

You have a right to obtain confirmation that your personal information is being processed. You also have the right to request a copy of your personal information we hold.

You may be required to provide proof of your identity by providing a valid photographic identity document such as a passport or photocard drivers licence. Your request will be processed within 1 month of receipt of your request and all the relevant information we require.

2. The right to edit and update your personal information

The accuracy of your personal information is important to us. You can ask us to rectify any incorrect data we hold about you including your address and contact details at any time.

3. The right to request to have your personal information deleted

In some circumstances you have the right to request the deletion of your personal information which we will review on a case by case basis.

4. The right to restrict processing of your personal information

You have the right to ‘block’ or suppress processing of your personal data. However, we may continue to store your data but will no longer process it. We do this by retaining just enough of your personal information so we can ensure that the restriction is respected in the future.

5. The right to object

In some circumstances you have the right to object to your personal information being processed. This includes for fundraising, marketing (including profiling) and for research purposes.

Please provide as much information as possible about the nature of your contact with us to help us locate your records. Any changes you have requested may take 28 days before they take effect.

If we process your personal information for the exercise or defence of legal claims, or we can demonstrate compelling grounds that override your rights and freedoms, we may not be able to fulfil your request. However, we will contact you to discuss further.

6. Your right to lodge a complaint with a supervisory authority

We expect to be able to resolve any complaints that you might have concerning our services or events. We therefore ask that you give us the opportunity to do so in the first instance. You, however, have the right to lodge a complaint or seek advice from a supervisory authority. Please contact If you wish to lodge a complaint or seek advice from a supervisory authority please contact:

The Office of the Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: +44 (0) 01625 545 745
Website: www.ico.org.uk

How to exercise your rights (make a request for your data)

You can request access to your data, or exercise any of your rights under the UK GDPR, by contacting us in writing via post or email.
Please use the contact details provided below and clearly state which information you are requesting or which right you wish to exercise.

To help us process your request efficiently, include as much detail as possible.
We may need to ask for proof of photo identification to verify your identity.

Please note: You may only request your own personal data unless you are acting on someone’s behalf as a parent, carer, or have legal authority such as lasting power of attorney.

Address your request to;

Information Governance Manager & DPO
St Christopher’s Hospice
51-59 Lawrie Park Road, Sydenham
London, SE26 6DZ

Tel: 020 8768 4500

Email: privacy@stchristophers.org.uk

Caldicott Guardian

What is a Caldicott Guardian?

A Caldicott Guardian is a senior person responsible for protecting the confidentiality of patients’ and service users’ information. They ensure that personal data is used appropriately, balancing the need for confidentiality with the necessity of sharing information for safe and effective care.

The Caldicott Principles guide their work, ensuring that information is only used when necessary and that individuals’ rights to privacy are upheld.

Why is this role important?

The Caldicott Guardian helps ensure that your personal health information is handled responsibly and ethically. They make sure that the right people have access to the right information at the right time—protecting privacy while enabling good care.

How to contact the Caldicott Guardian

If you have concerns about how your health information is used or shared, you can contact our Caldicott Guardian:
Amanda Mayo info@stchristophers.org.uk

Changes to The Policy

This policy is correct as of September 2023. We will regularly review and update this Privacy and Data Protection Statement and will update, modify, add or remove sections at our discretion and in response to relevant changes in legislation.

We will notify you of any changes, either via e-mail or through an announcement on our website and your continued use of our website, any of our services and/or the continued provision of personal information after we have posted the changes to these terms, will be taken to mean you agree with those changes.

How to Complain

We expect to be able to resolve any complaints that you might have concerning our use of your information. Please write to us or call us at:

Information Governance & Data Protection Manager
St Christopher’s Hospice
51-59 Lawrie Park Road, Sydenham
London, SE26 6DZ

Tel: 020 8768 4500

Email: privacy@stchristophers.org.uk

Do you need extra help?

If you would like this notice in another format (for example audio, large print, braille), please contact us as above.

Cookies

The St Christopher’s Hospice website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorised as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyse and understand how you use this website.

These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience.

For more details please see our Cookie Policy.

Festive Gifting

Free furniture collections

Privacy statement and notice

St Christopher’s Hospice takes privacy and the protection of personal and sensitive information seriously.