Preloader

Privacy Policy

Last updated: 26 August 2026

We respect your privacy and as such adhere to the following. St David’s Hospice is the data controller for any personal data you provide to us.

Information Collection and Use

St David’s Hospice collects personal information when you complete forms such as newsletter registrations, contact forms, volunteer applications, and event partnerships.

Categories of personal data we collect:

  • Standard interactions: name, email address, phone number, postal address, and donation or payment details.
  • Volunteer applications: profession, skills, experience, health conditions, criminal convictions (where legally permitted and relevant), and references.
  • Event partnerships: company details (address, website, email) and event specifics (date, address, and time).

St David’s Hospice is the sole owner of the information collected on this site. We treat your information fairly and in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Legal bases for processing:
Under the UK GDPR, we must have a valid legal basis to process your data. We rely on the following bases:

  • Consent: Where you have given us clear consent to process your personal data for a specific purpose (e.g., non-essential cookies, specific direct marketing).
  • Contract: Where processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
  • Legal Obligation: Where processing is necessary for us to comply with the law.
  • Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms.

We do not sell, rent or trade your personal information. We may share your information with trusted third parties who provide services on our behalf (for example, IT hosting, email delivery, payment processing and analytics), under strict contractual obligations and only for the purposes described in this statement.

International transfers:
The personal information we collect is stored on secure servers located within the United Kingdom and the European Union (Germany). Where data is transferred to and hosted in the EU, it is fully protected under UK adequacy regulations.

Data retention:
We retain your personal information only for as long as necessary to fulfil the purposes set out in this statement, or as required by law.

We use your personal information as follows:

  • to maintain our relationship with you whilst you are a customer, donor, or supporter;
  • to process orders, donations, and provide agreed goods and services to you;
  • to communicate with you, including to respond to information requests/enquiries submitted and/or to obtain your feedback on our products and services;
  • for record keeping, statistical analysis, internal reporting, and research purposes;
  • to ensure data security and to provide you with access to secure areas of our Websites;
  • to notify you about changes to our products and services;
  • to monitor the quality of our products and services;
  • to investigate any complaint you make.

Marketing

We may send you direct marketing in relation to our own products and services by email and post, as long as this is in line with any marketing preferences that you have provided to us.

We will only send you direct marketing by email where:

  • you have given your explicit consent; or
  • you are an existing donor or customer and you have not opted out, and we are marketing similar products or services to those you previously received from us.

Your agreement to the use of your personal information for direct marketing purposes is optional and if you choose not to consent, your visit to and use of our Website will not be affected.

You can choose to opt out of receiving direct marketing information from us at any time, through the ‘Unsubscribe’ link at the bottom of any St David’s Hospice email you receive, or by contacting St David’s Hospice:

Cookies

Most websites use cookies in order to make them work, or to work more efficiently, as well as to provide information to the owners of the website. They help us to understand how our visitors use our website so we can develop and improve the design, layout, content, and function of the site.

How we use cookies:

  • Essential cookies: We use essential cookies that are necessary for the website to function. For example, where there is a login process relating to buying products or services from us, we use cookies to store personal registration information so that you do not have to provide it to us again on subsequent visits.
  • Non-essential cookies: Any non-essential cookies (such as Google Analytics cookies, which collect information in an anonymous form to help us monitor website traffic) are only set after you have given your explicit consent via our cookie banner.

Managing your cookies:
You can manage your cookie preferences at any time using our cookie banner / settings tool. Alternatively, you can disable cookies on your computer by changing the settings in the preferences or options menu in your browser. You can set your browser to reject or block cookies or to tell you when a website tries to put a cookie on your computer.

Please be aware that if you do delete and block all cookies from our website, parts of the site will not then work. This is because some of the cookies we use are essential for parts of our website to operate.

To find out more about cookies, including seeing what cookies have been set and how to manage and delete them, visit https://www.allaboutcookies.org.

If you do not wish to accept cookies from our website, please adjust your preferences via the cookie banner or leave this site immediately and then delete and block all cookies from this site.

Links To Third Party Sites

Our Websites contain links to other Internet websites. Unless otherwise explicitly stated, we are not responsible for the privacy practices or the content of such websites, including such sites‘ use of any personal information.

Security

We employ reasonable security methods to protect the personal information that we process, including Internet standard encryption technology (“SSL“ or “Secure Socket Layer“ technology) to encode personal information that you send to us through our Websites. SSL works by using a private key to encrypt data that‘s transferred over the SSL connection. To check that you are in a secure area of the Website before sending personal information to us, please look at the bottom right of your website browser and check that it displays an image of a closed padlock or an unbroken key.

However, please note that whilst we take appropriate technical and organisational measures to safeguard the personal information that you provide to us, no transmission over the Internet can be guaranteed to be secure. Consequently, please note that we cannot guarantee the security of any personal information that you transfer to us over the Internet.

Your Rights

Under the UK GDPR, you have several rights regarding how we handle your personal information:

  • 1. The right to be informed: You have the right to be provided with clear, transparent and easily understandable information about how we use your personal information and your rights.
  • 2. The right of access: You have the right to obtain a copy of your personal information (if we’re processing it), to ensure we’re using it in accordance with data protection law.
  • 3. The right to rectification: You can ask us to take reasonable measures to correct your personal information if it’s inaccurate or incomplete.
  • 4. The right to erasure: Also known as ‘the right to be forgotten’, this enables you to request the deletion or removal of your personal information where there’s no compelling reason for us to keep using it.
  • 5. The right to object: You have the right to object to certain types of processing, including processing for direct marketing purposes.
  • 6. The right to restrict processing: You can ask us to block or suppress the processing of your personal information in certain circumstances.
  • 7. The right to data portability: Where applicable, you have the right to obtain and reuse your personal information for your own purposes across different services.

Updating This Statement

We may update this Privacy Statement from time to time. Any changes will be posted on this page with the date of the latest update. Where changes are significant, we will take additional steps to inform you, such as by email or a prominent notice on our website.

Contact Us

For further information regarding these rights, about this Privacy Statement generally, or to make a complaint, please contact us:

Please provide as much information as possible to help us identify the information you are requesting, the action you are wanting us to take and why you believe this action should be taken. Before assessing your request, we may request additional information in order to identify you. If you do not provide the requested information and, as a result, we are not in a position to identify you, we may not be able to action your request.

We will generally respond to your request within one month of receipt. We can extend this period by an additional two months if this is necessary taking into account the complexity and number of requests that you have submitted.

We will not charge you for such communications or actions we take, unless:

  • you request additional copies of your personal data undergoing processing, in which case we may charge for our reasonable administrative costs; or
  • you submit manifestly unfounded or excessive requests, in particular because of their repetitive character, in which case we may either: (a) charge for our reasonable administrative costs; or (b) refuse to act on the request.

If after contacting St David’s Hospice you are still unhappy, you may also complain to the Information Commissioner. All contact details are available on the Information Commissioner‘s Website: https://ico.org.uk