The General Data Protection Regulation (GDPR) is a regulation that the European Parliament, the Council of the European Union and the European Commission intend to strengthen and unify data protection for all individuals within the European Union (EU). The principle of GDPR is to give control back to citizens and residents over their personal data and to simplify and clarify how and why information about you might be used. It becomes enforceable from 25 May 2018. Woking & Sam Beare Hospices is working to be compliant with and to be GDPR ready. 

As a specialist palliative care provider, Woking & Sam Beare Hospices needs to keep important information about our patients and, where appropriate, their next of kin. This is solely to give you the best possible care and to safeguard you. Additionally we keep information about our staff, volunteers, those that have applied to work for us or volunteer for us and external agencies, business and other organisations and individuals that we work with or those who support our charitable activities.

The privacy of our patients is an organisation wide priority. Equally as important is the protection of all our data across the board and the information contained in our supporter database adheres to strict data protection protocol. We follow a national approach called Information Governance. This ensures data protection and the correct handling of personal and sensitive information about patients, staff and our volunteers, as well as any individual, business or organisation that supports us or partners with us. Information is dealt with legally, securely, efficiently and effectively.

The Data Protection Act 1998 became law on 1 March 2000. It sets standards which must be adhered to when obtaining, recording, holding, using or disposing of personal data. It provides living individuals with a right of access to personal information held about them. This right applies to all information held on computers and also covers most manual records.

All our staff and volunteers have a responsibility to ensure data protection and the correct handling of personal and sensitive information about patients, other staff and volunteers or supporters.

Our supporter database is held separately from our medical database and no information is transferred from one to the other unless we have had your permission to do so.

This section of the website provides more detailed information about why we collect personal information, how we use it and how you can access the information we keep about you and why.