RareCan Limited: Privacy Notice (members)
Last updated 20th December 2021
We store your data securely and safely, and use it in accordance with all relevant data protection laws. Our service was designed using ‘Privacy by Design’ principles and is fully compliant with the UK Data Protection Act 2018 (the UK version of the General Data Processing Regulations, GDPR).
Our Privacy Policy tells you, amongst other things, what personal data we collect about you, what we do with it, where we use it and for how long we keep it.
If we make changes to this notice, we will notify you by email. RareCan Limited will be what is known as the ‘Data Controller’ of personal data you provide to us.
Table of Contents
WHO THIS NOTICE APPLIES TO
This notice applies to our members ie. people affected by cancer who register their interest in taking part in research projects. A separate notice, here, applies to our business contacts (for example people who access our services).
OUR CONTACT DETAILS
Name: Andrew Hall (our data protection officer)
Address: 8 Park Avenue, Hexham, NE46 3EN
E-mail: dpo@rarecan.com
DATA TYPES
The type of personal information we collect
If you become a member
We currently collect and process of the following information:
- Name
- Gender
- Ethnicity
- NHS number
- Reason for registering
- Phone number
- Email address
- The first half of your postcode
- Cancer type
- Cancer location
- Cancer source
- Date of diagnosis
- Contact details of your GP and hospital consultant
- Histology report
- Genetic analysis
- Additional diagnostic information
- Additional clinical information (for example, treatment outcome)
DATA SOURCES
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you because you have expressed an interest in taking part in research projects related to your cancer.
We also receive personal information indirectly, with your consent, from the hospital(s) where you have been diagnosed and treated.
We use the information that you have given us in order to:
- Identify projects relevant to your cancer
- Contact you about specific projects which may interest you
- Contact you to update you on our progress
- Monitor and improve our services
DATA SHARING
Who we share your data with
We share identifiable personal data with NHS trusts to make requests for clinical data, including histology reports and details about your cancer diagnosis and treatment. With your explicit consent we may also contact NHS Trusts to convey your interest in taking part in specific clinical trials. Any data we share with researchers will be “pseudonymised” ie presented in such a way that the researcher will not be able to identify you directly, unless you have explicitly consented to us sharing your identifiable data with the research team.
Our lawful basis for processing your data
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information is your consent. You are able to remove your consent at any time. You can do this by contacting our data protection officer via mail at 8, Park Avenue, Hexham, NE46 3EN or via email at DPO@rarecan.com. You do not have to provide any reasons for your decision.
DATA STORAGE
How we store your personal information
Your information is securely stored on servers in the EU. We will keep your personal data indefinitely unless you ask us to delete it from our database. Please contact us at DPO@rarecan.com, 8 Park Avenue, Hexham, NE46 3EN if you wish to make a request to delete your information.
DATA RIGHTS
Your data protection rights
Under data protection law, you have rights including:
- Your right of access – You have the right to ask us for copies of your personal information.
- Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing – You have the right to object to the processing of your personal information in certain circumstances.
- Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
- Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at DPO@rarecan.com, 8 Park Avenue, Hexham, NE46 3EN if you wish to make a request.
COOKIES
Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit our websites, we may collect information from you automatically through cookies or similar technology. For further information, visit allaboutcookies.org.
How do we use cookies?
RareCan Ltd uses cookies in a range of ways to improve your experience on our website, including:
- Keeping you signed in
- Understanding how you use our website
What types of cookies do we use?
There are a number of different types of cookies, however, our website uses:
- Functionality – RareCan Ltd uses these cookies so that we recognize you on our website and remember your previously selected preferences. These could include what language you prefer and location you are in. A mix of first-party and third-party cookies are used.
- Advertising – RareCan Ltd uses these cookies to collect information about your visit to our website, the content you viewed, the links you followed and information about your browser, device, and your IP address. RareCan Ltd sometimes shares some limited aspects of this data with third parties for advertising purposes. We may also share online data collected through cookies with our advertising partners. This means that when you visit another website, you may be shown advertising based on your browsing patterns on our website.
How to manage cookies
You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.
EXTERNAL SITE POLICIES
Privacy policies of other websites
The RareCan Ltd website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.
COMPLAINTS
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at DPO@rarecan.com, 8 Park Avenue, Hexham, NE46 3EN.
You can also complain to the ICO if you are unhappy with how we have used your data. The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
