What is the purpose of this document?
In this notice you’ll find important information about your personal rights to privacy, and how and why we use your personal information in line with all applicable data protection laws, including the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).
It’s up to you whether you choose to give us your personal information. But if you don’t, we may not be able to give you a complete service.
At Marie Curie, we are committed to protecting your personal information and being transparent about what we do with it. We will do our best to use your personal information in accordance with data protection law and will not do anything with your information that you wouldn't reasonably expect.
Who we are
Marie Curie is the UK’s leading end of life charity (registered charity in England & Wales (207994) and Scotland (SC038731) and company limited by guarantee (00507597) and/or Marie Curie Trading Limited (registered company 02292795), whose registered offices are at One Embassy Gardens, 8 Viaduct Gardens, London SW11 7BW.
ICO reference number: Z6328056
How we process your data
This notice sets out how we process your data. It also explains your rights and options around how we use your personal information.
What rights do I have over my personal data?
Right to be informed about the collection and use of your personal information, this privacy notice explains how we process your personal information.
Right to access your data by making a Subject Access Request. Learn how to access your health records.
Right to correct your personal information – You have the right to rectify, erase, or restrict your data where this is justified. You have a right to require us to correct any information about you that is inaccurate, and you may also ask us to remove information which is inaccurate or to complete information which is incomplete. We may seek to verify the accuracy of the personal information before rectifying it, and in some circumstances, we will need to keep a copy of the inaccurate data (for example, if we need to keep an audit trail).
If we do update inaccurate information, we will inform relevant third parties with whom we have shared your data so they may update their own records.
Right to data portability – In some situations, you have a right to obtain your personal information from us in a structured, commonly used and machine-readable format and reuse it for your own purposes, perhaps for another service, without hindering the usability of the data. This includes the right to require us, where technically feasible, to pass on information we obtained from you to another data controller.
This right applies when we are relying on your consent or the fact that the processing is necessary for the performance of a contract to which you are party as the lawful ground for processing, and we are carrying out processing by automated means.
Right to erasure (‘right to be forgotten’) – You have the right to require us to erase your personal information in certain circumstances, for example:
- where it is no longer necessary for us to continue holding or processing your personal information for a particular purpose;
- if you withdraw your consent to certain processing (in relation to which we rely upon your consent as a lawful basis); or
- if you have objected to processing in relation to which we rely upon our legitimate interests, and we have no overriding interest or that personal information is processed for direct marketing purposes (and this includes profiling to the extent that it is related to such direct marketing).
This right is not absolute: for example, we do not have to delete your data if we need to continue processing this information to comply with our legal obligations, or for the establishment, exercise or defence of legal claims. We may also need to keep some information about you in order to, for example, comply with an instruction not to contact you again.
Right to restrict processing – You have a right to ask us to restrict our processing of your information if:
- you contest its accuracy, and we need to verify whether it is accurate;
- the processing is unlawful and you ask us to restrict use of it instead of erasing it;
- we no longer need the information for processing, but you need it to establish or defend legal claims;
- you have objected to processing of your information being necessary for the performance of a task carried out in the public interest, or for the purposes of our legitimate interests. The restriction would apply while we carry out a balancing act between your rights and our legitimate interests. If you exercise your right to restrict processing, we would still need to process your information for exercising or defending legal claims, protecting the rights of another person or for public interest reasons.
This is an alternative right to the right to be forgotten and it is not an absolute right.
Right to withdraw consent – If we rely on consent as the legal basis, you can withdraw your consent to processing, and we will stop that particular activity.
However, we may still continue to use the same data for other purposes: for example, you withdraw your consent to receipt of direct electronic marketing from us, and also make a complaint, we may rely on our legitimate interests to process your personal information in order to investigate that complaint.
Right to object to processing – You have the right to object to: processing that is based on legitimate interests or performance of a task in the public interest (including profiling); direct marketing (including profiling for the purposes of direct marketing) and processing for the purposes of scientific, statistical or historical research.
- We must comply with any request to stop processing for the purposes of direct marketing. The right to object is not absolute in relation to processing for legitimate interests and research purposes.
- If you would prefer us not to profile you for the purposes of targeting or tailoring our fundraising efforts, please contact supportersrelations@mariecurie.org.uk.
- Automated decision making (where applicable).
Links and third parties
We link our website directly to other sites. This notice does not cover external websites and we are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any external websites you visit via links on our website.
When you make a donation through ‘Text to Donate’, your donation will be managed by your network provider in accordance with their terms and conditions and privacy policy. For more information on our ‘Text to Donate’ subscription service, please see the mobile terms and conditions.
Concerns about your records
If you have questions about this Privacy Notice, or if you would like to exercise any of your privacy rights, please contact infogov@mariecurie.org.uk.
If you are dissatisfied with our response, or if you have any further queries regarding how your personal data is processed, you should contact Marie Curie’s Data Protection Officer at DPO@mariecurie.org.uk.
If you are still unhappy with the outcome of your enquiry, you have the right to object to data processing in certain circumstances, which you can do by contacting the Information Commissioner’s Office.
The Information Commissioner
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Changes to this Privacy Notice
We reserve the right to update this Privacy Notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
