PLEASE READ THIS PRIVACY STATEMENT CAREFULLY BEFORE USING OUR WEBSITE
St Catherine’s Hospice Limited (STCH or We) is committed to protecting and respecting your privacy. You can visit our website freely without having to register or subscribe for services.
This notice covers our overall approach to data protection and privacy and is supported by a number of specific privacy notices depending on your relationship to us.
- Patients
- Next of Kin
- Service Users
- Supporters
- Job Applicants/Employees/Volunteers
- Contractor
- Visitors to our hospice
- Website terms and conditions
INTRODUCTION
StCH is a local charity that provides hospice care in West Sussex and East Surrey. Further information about us can be found on our About Us page. For the purpose of the Data Protection Act 2018 (the Act), the data controller is St Catherine’s Hospice Ltd, Grace Holland Avenue, Pease Pottage, West Sussex, RH11 9SL.
At StCH, we are committed to protecting your information and privacy and using your data only in the ways which you would expect. This notice sets out how we aim to repay the trust you have shown by sharing your personal data with our charity.
WHAT IS PERSONAL DATA?
Personal data is information that can be used to identify you. It can include your name, email address, postal address, date of birth, telephone number, credit or debit card details.
WHAT IS SPECIAL CATEGORY DATA?
Special category data is personal data that is deemed more sensitive including: medical data, religious of philosophical beliefs, trade union membership, race or ethnic origin, political opinions, sex life and orientation, biometric data and genetic data.
HOW DO WE COLLECT INFORMATION?
We collect data if you:
- Are referred to us as a patient, carer or family member
- Register with us – for example for our events and lottery
- Make a donation to us
- Give goods to our shops with Gift Aid
- Attend our education/training events
- Are employed by us or volunteer for us
- Are contracted to complete work for us
- Are visiting our website
HOW DO WE USE YOUR INFORMATION?
We use your personal information to give you the care, services, information or products you ask for. We also use your information for administrative purposes, for example, as legislation dictates, for Gift Aid, lottery memberships, or direct debits.
If you are a supporter, you can choose to receive occasional fundraising and promotional information suited to your interests.
Your personal information is not shared with third parties for their own purposes or used in any other way (other than described in this statement or as required by law) unless you agree.
We reserve the right to share your personal information if we are legally obliged to.
No data transmission via the internet is ever 100 per cent secure and, while we will do our utmost to protect your personal information, we cannot guarantee the security of any information you transmit to us and you do so at your own risk. We do however use strict policies and procedures to prevent any unauthorised access.
HOW DO WE PROTECT YOUR PERSONAL INFORMATION?
The separate databases that we keep our patient, supporter and other information on are held securely within our IT network and are not sold to, traded or shared with any other organisations to use for their own commercial purposes.
LEGAL BASIS FOR PROCESSING
The law requires us to set out the lawful grounds on which we collect and process your personal information as described across our privacy notices. Depending on the purpose for which we use your data, one or more of the grounds listed below may be relevant.
Legitimate Interest
We rely on the ‘legitimate interest’ ground for processing where we believe it is in the legitimate interest of you, as the data subject, or of St Catherine’s Hospice, to process your data. When we process your personal information in this way, we also consider and balance any potential impact on you (both positive and negative) and your rights under data protection laws.
Consent
In many circumstances, we will rely on obtaining your consent to our use of your personal information in a certain way (for example, we may ask for your explicit consent to share sensitive personal information with us).
Legal Obligation
We may need to collect, process and disclose personal information to comply with legal obligation. For example, where we are ordered by a court or regulatory authority or we are legally required to hold donor transaction details for Gift Aid or accounting/tax purposes.
Performance of a contract
For example, if you purchase something from our online shop or agree to work for us, we need to be able to process your information for the purpose of meeting our contractual obligations.
RIGHT OF ACCESS
You can ask us at any time what information we hold about you, including where and when we obtained it, why we are keeping it and what we are using it for. This is called a ‘subject access request’. Depending on your relationship to us, you can request these via email at qualityteam@stch.org.uk or by writing to us at St Catherine’s Hospice, Grace Holland Avenue, Pease Pottage, West Sussex, RH11 9SL.
PUTTING YOU IN CONTROL
If you receive communications or contact from the hospice and you want to change or stop this, you can contact us at any time, and we will action your request wherever possible. If you request no communications, there are still some circumstances in which we may be obliged to contact you. For example, if you are receiving care or support services from us, we may need to get in touch with you for administrative purposes about the services we supply to you.
Sometimes people ask to be removed from our databases. However, we may not be able to completely delete all your information from our systems as there are some records we must keep for legal and regulatory purposes. These include, for example, case files from our care and support services, Gift Aid records, ‘do not call’ lists and complaint files.
We also endeavour to make sure our records are as accurate and up to date as possible. We reserve the right to contact you if we have reason to believe that your details are out of date, but we will only do this if it is for your benefit.
We reserve the right to amend this privacy statement at any time. If we do, we will post the change on our website and use appropriate means to communicate the change with you. You will be deemed to have accepted such changes, unless you tell us otherwise. If you would like further support finding out how your data is used, please email privacy@stch.org.uk.
CCTV IMAGES ON HOSPICE SITE
The hospice site maintains video surveillance technology to deter and assist in the prevention or detection of crime. St Catherine’s Hospice will protect the rights and interests of all individuals, ensuring that processing remains lawful, fair, and necessary, without causing harm and where there is no less intrusive way to achieve the same result.
Video surveillance systems operate continually and may be monitored by employees responsible for the security of visitors to our premises. Access is restricted, documented and audited where appropriate.
St Catherine’s Hospice is the data controller who maintains and controls all the CCTV equipment and monitors, as well as the storage and deletion processes.
Sharing of CCTV Footage
To support our legitimate interests in maintaining a safe and secure environment, we share CCTV footage with Delta Security. They assist us in the prevention and detection of crime. We have a Data Processing Agreement in place that ensures processing remains in line with this intended purpose and upholds the rights of individuals and protects your personal data in line with UK GDPR and the Data Protection Act 2018.
Any footage shared is limited to what is necessary for security purposes. It is transferred securely, accessed only by authorised personnel, and retained only for as long as is required to fulfil these purposes or to meet legal obligations. We do not permit the security company to use the footage for their own purposes.
ANPR – AUTOMATIC NUMBER PLATE RECOGNITION
We use ANPR technology to capture images of number plates in our car parks at the hospice. When visiting the hospice or the Woodgate Hub, we ask visitors to provide their number plate to reception via our ‘Sign In’ app so we can use this alongside the imagery to manage use of the car parks. The car parks on site are for our employees and volunteers, visitors to hospice and visitors of the Woodgate Hub. St Catherine’s will not share this data outside of our organisation unless there is a lawful or safety concern for doing so.
ELECTRIC VEHICLE (EV) CHARGING
The EV chargers onsite have been installed and are maintained by Rolec, and they are available to use via the Monta App. Monta is the data processor and is responsible for collecting and storing the data related to charging your vehicle. For further information about how your data is processed when using one of the chargers, please refer to the Monta privacy policy.
DATA PROTECTION OFFICER
The role of Data Protection Officer for St Catherine’s Hospice has been contracted to BLS Stay Complaint. BLS are a consultancy-based firm who take a flexible, risk-based approach, supporting organisations to achieve regulatory compliance and ensuring adherence to the UK Data Protection Act 2018.
For more information about BLS, see their website, or contact them via email at info@bls-ltd.co.uk, telephone on 01904 217788 or by post at BLS Stay Compliant, Blake House, 18 Blake Street, York, YO1 8QG.
GETTING IN TOUCH
If you have any feedback about the way your personal information has been used, please email us at qualityteam@stch.org.uk or write to us at St Catherine’s Hospice, Grace Holland Avenue, Pease Pottage, West Sussex, RH11 9SL to let us know so that we can put it right or answer your questions.
You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe we have not handled your request in an appropriate manner. For information on contacting the ICO please visit the ICO’s website.
Thank you for taking time to read this privacy notice.
Version 3 – Reviewed April 2026
