Privacy notice

Last updated:  August 2025.

Introduction

The Mary Stevens Hospice is committed to protecting your privacy and the personal data you share with us. This Privacy Notice explains how we collect, use, store, and protect your personal information, whether you interact with us online, by phone, by post, in person or via any other channel. This notice applies to donors, supporters, customers and those engaging with our fundraising, trading or lottery activities.

If you are:

  • A patient, family member, or carer, please see our Patient and Carers Privacy Notice
  • A member of staff or volunteer, please see our Staff and Volunteer Privacy Notice 

We recognise that people may have more than one relationship with the hospice. Your data may therefore be collected for different purposes by different teams. Data will only be shared between departments with your consent. Whenever we collect your information, we will ask whether you are happy to hear from us and in what ways. You can withdraw or update your preferences at any time. By using our website, services or providing us with personal information, you agree to the practices described in this notice.

We process your personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

We rely on the following legal bases:

  • Consent - where you have given clear permission (e.g. marketing or contact forms)
  • Contract - where processing is necessary to deliver a service or transaction
  • Legal obligation - where we must comply with the law (e.g. Gift Aid records or HMRC requirements)
  • Legitimate interests - where processing is necessary for our charitable purposes, provided your rights and freedoms are not overridden.

What Personal Information We Collect

We may collect the following personal information:

  • Name, date of birth, contact details
  • Payment details (bank, credit/debit card – processed securely, not stored)
  • Gift Aid eligibility
  • Event participation details
  • Marketing and communication preferences
  • Website usage information (via cookies – see Website Privacy Policy)

Where relevant, we may also collect:

  • Health information (if participating in certain events or activities)
  • Emergency/next-of-kin details
  • Security/background checks (e.g. for volunteering)
  • Parental consent if under 13
  • Information on why you support us (optional)

We only collect what is necessary, relevant and proportionate.

How We Use Your Information

We may use your information to:

  • Provide services, products, or information you request
  • Administer donations, Gift Aid claims, fundraising, lottery entries and event participation
  • Comply with legal and regulatory obligations
  • Process payments securely
  • Keep a record of your relationship with us
  • Communicate with you (where consented or where legitimate interest applies)
  • Detect and prevent fraud or misuse of our services
  • Share stories and experiences (with your consent only)

Marketing and Communications

We will only contact you for marketing purposes where we have your consent or where it is lawful under the Privacy and Electronic Communications Regulations. You can opt out of marketing communications at any time by:

Emailing info@mshfundraising.co.uk
Calling 01384 377778
Clicking "unsubscribe" on our emails

Sharing Your Information

We will never sell your data. We may share your information with:

  • Trusted service providers (data processors) who act on our behalf under contract and UK GDPR compliance
  • Regulators, HMRC, or law enforcement where legally required
  • Event partners where necessary for safety, participation, or administration (with your consent)
  • Transfers outside the UK/EU will only occur where appropriate safeguards (such as standard contractual clauses) are in place.

Data Retention

We keep your personal data only as long as necessary to fulfil the purposes for which it was collected and when no longer needed, data is securely destroyed.

Keeping Your Information Safe

We have technical and organisational measures in place to protect your data from unauthorised access, misuse, loss or disclosure. 

Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data (Subject Access Request)
  • Rectify inaccurate or incomplete data
  • Request erasure (where legally permissible)
  • Restrict or object to processing
  • Withdraw consent at any time (where consent is the legal basis)
  • Request data portability (where applicable)
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

Contact Us

For questions, to exercise your rights, or to raise a concern:

Simon Henwood (Privacy Officer)
The Mary Stevens Hospice
221 Hagley Road
Oldswinford, Stourbridge
West Midlands, DY8 2JR

Tel: 01384 443010
Email: info@marystevenshospice.co.uk

If you remain concerned, you can contact the ICO at www.ico.org.uk