Why We Collect Your Information
We collect personal information to provide safe, effective and compassionate care. This may include:
- Assessing your suitability for our services
- Planning, delivering, and recording your care
- Supporting people who matter to you such as family members, friends and carers where relevant
- Meeting legal, regulatory and NHS obligations
If you are referred to our services, we may receive information from and share information with other healthcare providers involved in your care.
Our Legal Basis for Processing
We process your personal data under:
- UK GDPR Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest (the provision of health and social care)
- UK GDPR Article 9(2)(h) – processing is necessary for the provision of health or social care
- Consent – where required, e.g. photographs taken for medical purposes or if you agree to receive information about carers’ events etc
What Information We Collect
We may collect and store:
- Identity details (name, date of birth, NHS number)
- Contact details (address, phone, email)
- Next of kin and carer contact details
- Details of your medical history, diagnosis, allergies and treatment
- Records of inpatient stays, clinic appointments and care provided.
- Images (CCTV if you visit our premises, medical photographs with your consent)
How We Use Your Information
We use your data for:
- Direct care: referral, assessment, care delivery, care planning and keeping your healthcare team informed.
- Care coordination - sharing essential information with other healthcare professionals and services involved in your treatment
- Service management - auditing, monitoring quality, reporting to commissioners and improving our services
- Legal, safeguarding and regulatory purposes- including Care Quality Commission inspections, safeguarding concerns or public health requirements
- Research and planning - we may use anonymised data to improve services. Where identifiable data is required, we will seek your consent unless there is another lawful basis and the NHS National Data Opt-Out will always be respected (find out more).
How We Store Your Information
We take the security of your data seriously. Safeguards include:
- Secure paper and electronic records, with access limited to authorised staff and volunteers
- Security technologies such as encryption and firewalls
- Individual login credentials and monitoring of system access
- Policies and training to ensure responsible handling of personal data
Who We Share Your Information With
We will never sell your data or share it for fundraising or marketing without your consent. We may share your information with:
- Other healthcare providers directly involved in your care
- The Care Quality Commission (CQC) during inspections
- Regulators, safeguarding authorities, or courts, where required by law
- The Police or public health authorities where there is a clear legal obligation
If you are named as a carer or next of kin, we will hold your details so we can keep you informed about the patient’s care. With your consent, we may also contact you about events or other ways to support the hospice.
How Long We Keep Your Information
We retain patient and carer records in line with NHS records management guidance and statutory requirements. Records are securely destroyed once they are no longer needed.
Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request erasure of data (where appropriate)
- Restrict or object to certain processing
- Withdraw consent where this is the legal basis for processing
- Complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data
Contact Us
If you have any questions about this notice or how we handle your data, please contact:
Simon Henwood (Privacy Officer)
The Mary Stevens Hospice
221 Hagley Road
Oldswinford
Stourbridge
West Midlands, DY8 2JR
Tel: 01384 443010
Email: info@marystevenshospice.co.uk
If you are concerned about how we handle your data, you also have the right to contact the Information Commissioner’s Office: www.ico.org.uk