- How we collect your personal information
LNAACT will always aim to collect personal information directly from you. If you are a patient, you may be asked to provide our Helicopter Emergency Medical Service (HEMS) operational team with personal information. If you do not want your patient data to be shared for purposes except your own care, you can opt-out of this process. For further information please access the website National data opt-out – NHS Digital
As a donor or supporter, you may give us personal information directly when you sign up for one of our events, make a donation, purchase items from our website or take part in our in-house lotteries.
If you apply for a job, apply to be a volunteer or enquire about our service, you may give us personal information.
Sometimes we may obtain or receive your personal information from a third party. For donors or supporters, examples of indirect data collection may include fundraising sites such as Just Giving and Virgin Money Giving, or from organisers of an event you are participating in. We want to assure you that LNAACT does not purchase personal information from third parties.
If you apply for a job or to be a volunteer, we may receive your personal information from a previous employer, recruitment agency or volunteer bureau.
- What information do we collect?
The personal information that we collect from you will be dependent on the relationship that you have with us. The main reason we collect personal information is so that we can identify you, whether that be as a patient, donor, supporter, volunteer, job applicant or employee.
Such personal information that we may collect might include contact details such as your name, date of birth, postal address, email address and telephone number, as well as any other information you provide in correspondence between us. We may also hold a record of the communications we have with you.
In some circumstances, we will need to collect bank or debit/credit card information. Financial information will only be collected if necessary. Such examples include participation in our in-house lottery or contributing to our cause by regular or one-off donations.
Personal information collected about patients may be used to help our HEMS operational team provide the best possible care.
Special Categories of Personal Data
Due to the nature of some of our HEMS work, the Trust may collect data defined by the General Data Protection Regulation as Special Categories of Personal Data. These categories of data include your mental and physical health, race and ethnic origins and genetics. We will only collect this information if it is necessary, or with your explicit consent.
- How do we use personal information?
We primarily use your data to maintain, improve and develop the relationship that we have with you.
LNAACT may use donor or supporter information in the following ways:
– To process transactions, purchases or enquiries made by you.
– To verify your identity and identify you from other supporters.
– To use any feedback or comments from you to improve our service.
– To notify you of changes to our services.
– To improve our services or for marketing purposes.
– To send you a personal thank you letter for any contribution that you give to us.
– To send you communications which you have requested and/or that may be of interest to you; these may include information about our work, campaigns, appeals or other fundraising activities.
We will use patient information in the following ways:
- To verify your identity.
- To help decide what care to provide.
- To undertake research to help improve the medical support we give at scene and during transition to hospital.
- What the lawful basis for processing your data
Data protection law requires us to rely on one or more lawful grounds to process your personal information.
(a)Your consent. You are able to remove your consent at any time.
(b) We have a contractual obligation.
(c) We have a legal obligation.
(d) We have a vital interest.
(e) We need it to perform a public task.
(f) We have a legitimate interest
- Your choices
We like to keep all our supporters up to date with information about our service. From time to time, we also like to send you marketing literature and suggestions of ways in which you may like to support us. You will have the opportunity to choose how we keep in touch (post, email, telephone and/or text) and you can change your preferences or opt out of receiving information from LNAA at any time by emailing firstname.lastname@example.org or by telephone 01522 548469. We aim to make your preferences as easy to manage as possible.
As a charity that cares for its patients, we also care for those who support us and will always respect your wishes should you tell us that you no longer wish to hear from us.
- Who has access to your information?
The personal information that we collect about you will be used by our staff to provide you with the highest level of supporter service. LNAACT may disclose personal information to:
- Selected organisations that provide services to LNAACT. For example, LNAACT engages with third-party print and mailing houses, which are bound by our privacy standards, to print and distribute communications to our donors and supporters.
- Other healthcare and emergency services (NHS, police or fire services).
- Legal and regulatory authorities to comply with any legal obligations.
LNAACT has never, and will never, sell or share your personal information with other organisations to enable them to contact you for marketing purposes.
- Security of personal information
LNAACT is fully aware of the importance of data security. All staff undergo data protection training to ensure the protection of your information. We have implemented appropriate physical, technical and organisational measures to protect the personal information we have under our control, both online and offline, from improper access, use, alteration, destruction and loss.
LNAACT will always ensure that your data is not kept longer than necessary. We only keep personal information for as long as it is reasonable and necessary, which may be to fulfil statutory obligations set by legislation or professional bodies.
If you use your debit or credit card to donate to us online, over the phone, in person, or to make a purchase for merchandise, Christmas cards or a lottery membership, we will ensure that this is done securely and in accordance with the Payment Card Industry Data Security Standard. LNAACT does not store your debit or credit card details following the completion of your transaction.
Although most of the information we store and process stays within the UK, some information may be transferred to countries outside the European Economic Area (EEA). This may occur if, for example, one of our trusted partners uses a server located in a country outside the EEA. Whilst these countries may not have similar data protection laws to the UK, we will take steps with the aim to ensure your privacy continues to be protected as outlined in this Privacy Statement.
Our website may contain links to other websites. Whilst we endeavour to link only to sites that share our high standards and respect for privacy, we are not responsible for the content or privacy practices adopted by these sites. This Privacy Statement does not cover the practices of those websites or advertisers.
Whilst we are an independent Charity which is not governed by the NHS, we follow NHS good practice to help us ensure the protection and confidentiality of our patient data. Within our Governance team we have a Senior Information Risk Owner (SIRO) and a Caldicott Guardian, to ensure the protection of confidentiality.
Further information on the duties of a SIRO and a Caldicott Guardian can be found by clicking Organisation Data Service – NHS Digital
- Your rights
Under data protection law you have rights you need to be aware of. The rights available to you may depend on our reason for processing your information.
The right to access your personal information
You have the right to ask us for a copy of the personal/sensitive information we hold about you. This right also applies to any other person whose personal data you provide to us. On receipt of such a request we will require proof of identity or proof of authority if the request comes from someone other than yourself. By requesting this information, we can ensure we provide information to the correct person. We respond to these requests within 30 days of receipt.
To request a copy of the personal information that LNAACT holds on you, please contact our Data Protection Officer:
– In writing: Lincs & Notts Air Ambulance HQ, HEMS Way, Sleaford Road, (off A15), Lincoln, LN4 2GW.
– By telephone: 01522 548469
– By email: email@example.com
The right to be informed
You have the right to be told how we are using your personal information and this policy document, and shorter summary statements used in our communications, are intended to provide you with a clear and transparent description of how your data may be used.
The right of rectification
You have the right to ask us to correct information we hold about you if you think it is inaccurate.
– In writing: Lincs & Notts Air Ambulance HQ, HEMS Way, Sleaford Road (off the A15), Lincoln, LN4 2GW.
– By telephone: 01522 548469
– By email: firstname.lastname@example.org
The right to erasure
You have the right to ask us to erase your personal information in certain circumstances. This is also known as the “right to be forgotten” and allows an individual to request deletion of their personal data where there isn’t a compelling reason for its continued processing by TVAA. It may be that we recommend suppression from future communications rather than data deletion.
The right to restrict processing of your personal information
You have the right to ask us to restrict processing of your information in certain circumstances. For example, if you think the data, we hold is inaccurate and we disagree, then processing may be restricted until the accuracy has been verified.
The right to data portability
This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering a contract and the processing is automated.
The right to object – including automated decision-making and profiling
You have the absolute right to stop the processing of your personal information for direct marketing purposes. You can exercise this right at any time.
Where our only legal basis for processing your personal data is your consent to do so, you can withdraw that consent at any time, and we will have to stop processing your personal data. Please be aware that this will only affect a new activity and does not mean that processing carried out before you withdrew your consent is unlawful.
We are required to respond to your request without undue delay and at the latest within one month.
If you make a request relating to any of the rights listed above, we will consider each request in accordance with all applicable data protection laws and regulations.
When you visit our website for the first time, a cookie is downloaded onto your computer in the form of a small text (.txt) file via your browser. The next time you visit our website, your computer checks to see if it has a cookie that is relevant and sends the information contained in that cookie back to the website. Cookies do not cause or contain viruses.
The information we collect through cookies is anonymous and we are not able to attribute it to, or use it to identify, individuals. It does not contain your personal information.
It is possible to reject our cookies (except for the strictly necessary ones). Find out how to control and delete cookies by visiting aboutcookies.org – please note that if you choose to reject our cookies, our website may not work as intended for you.
- Changes to our Privacy Statement
Our Privacy Statement is reviewed regularly to ensure it reflects how we use your information. Donors, supporters, volunteers, employees, patients and stakeholders are encouraged to regularly check this Privacy Statement to ensure they are kept up to date with our privacy working practices.
- Further information
We are committed to protecting your personal information and ensuring that you have control not only over the information we store about you, but also what types of information you would like to receive from us.
For further information about our privacy practices, please contact our Data Protection Officer:
– In writing: Lincs & Notts Air Ambulance HQ, HEMS Way, Sleaford Road (off A15), Lincoln, LN4 2GW.
– By telephone: 01522 548469
– By email: email@example.com
- How to complain
If you have any concerns about our use of your personal information, you can make a complaint by emailing us at firstname.lastname@example.org, including in the subject line of your email the word “Complaint”.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk