Patient and carers privacy notice

Last updated:  August 2025.

The Mary Stevens Hospice is committed to protecting the privacy of our patients, families and carers. This notice explains what information we collect, why we collect it, how we use it and your rights under UK data protection law.

Why We Collect Your Information

We collect personal information to provide safe, effective and compassionate care. This may include:

  • Assessing your suitability for our services
  • Planning, delivering, and recording your care
  • Supporting people who matter to you such as family members, friends and carers where relevant
  • Meeting legal, regulatory and NHS obligations

If you are referred to our services, we may receive information from and share information with other healthcare providers involved in your care.

Our Legal Basis for Processing

We process your personal data under:

  • UK GDPR Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest (the provision of health and social care)
  • UK GDPR Article 9(2)(h) – processing is necessary for the provision of health or social care
  • Consent – where required, e.g. photographs taken for medical purposes or if you agree to receive information about carers’ events etc

What Information We Collect

We may collect and store:

  • Identity details (name, date of birth, NHS number)
  • Contact details (address, phone, email)
  • Next of kin and carer contact details
  • Details of your medical history, diagnosis, allergies and treatment
  • Records of inpatient stays, clinic appointments and care provided.
  • Images (CCTV if you visit our premises, medical photographs with your consent)

How We Use Your Information

We use your data for:

  • Direct care: referral, assessment, care delivery, care planning and keeping your healthcare team informed.
  • Care coordination - sharing essential information with other healthcare professionals and services involved in your treatment
  • Service management - auditing, monitoring quality, reporting to commissioners and improving our services
  • Legal, safeguarding and regulatory purposes- including Care Quality Commission inspections, safeguarding concerns or public health requirements
  • Research and planning - we may use anonymised data to improve services. Where identifiable data is required, we will seek your consent unless there is another lawful basis and the NHS National Data Opt-Out will always be respected (find out more).

How We Store Your Information

We take the security of your data seriously. Safeguards include:

  • Secure paper and electronic records, with access limited to authorised staff and volunteers
  • Security technologies such as encryption and firewalls
  • Individual login credentials and monitoring of system access
  • Policies and training to ensure responsible handling of personal data

Who We Share Your Information With

We will never sell your data or share it for fundraising or marketing without your consent. We may share your information with:

  • Other healthcare providers directly involved in your care
  • The Care Quality Commission (CQC) during inspections
  • Regulators, safeguarding authorities, or courts, where required by law
  • The Police or public health authorities where there is a clear legal obligation

If you are named as a carer or next of kin, we will hold your details so we can keep you informed about the patient’s care. With your consent, we may also contact you about events or other ways to support the hospice.

How Long We Keep Your Information

We retain patient and carer records in line with NHS records management guidance and statutory requirements. Records are securely destroyed once they are no longer needed.

Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request erasure of data (where appropriate)
  • Restrict or object to certain processing
  • Withdraw consent where this is the legal basis for processing
  • Complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data

Contact Us

If you have any questions about this notice or how we handle your data, please contact:

Simon Henwood (Privacy Officer)
The Mary Stevens Hospice
221 Hagley Road
Oldswinford
Stourbridge
West Midlands, DY8 2JR

Tel: 01384 443010
Email: info@marystevenshospice.co.uk

If you are concerned about how we handle your data, you also have the right to contact the Information Commissioner’s Office: www.ico.org.uk