The processing of your personal data is carried out by or on behalf of The Royal Marsden Cancer Charity and Royal Marsden Cancer Campaign Trading Company Limited. The Royal Marsden Cancer Charity is a registered charity in England and Wales (04615761) Royal Marsden Cancer Campaign Trading Company Limited is a registered company in England and Wales (04722285).

We refer to both organisations throughout this policy collectively as ‘The Royal Marsden Cancer Charity’ or ‘we’.

The Royal Marsden Cancer Charity raises money to support The Royal Marsden, a world-leading cancer centre. From funding state-of-the-art equipment and ground-breaking research, to creating the very best patient environments, we will never stop looking for ways to improve the lives of people affected by cancer.

To help us do this we may collect and process your personal data. This gives us a better understanding of our supporters which strengthens our decision-making processes and cost effectiveness, as well as being necessary for the administration of our supporters’ donations.

The Royal Marsden Cancer Charity adheres to the requirements of the UKGDPR/DPA 2018 (the “GDPR”) and respects any personal data you share with us. We aim to be clear about when we collect your data and will not to do anything with it you wouldn’t reasonably expect so please read this policy carefully to understand how we collect, use and store your information.

This privacy policy sets out how, in our day to day activities, The Royal Marsden Cancer Charity processes and stores personal information relating to our supporters, volunteers and other recipients of our services.

The Royal Marsden Cancer Charity is a data controller in respect of your personal data. If you have any questions about this policy or the ways in which we may process your personal data, please contact us:

Data Protection and Privacy
Supporter Care
The Royal Marsden Cancer Charity
Fulham Road
London  SW3 6JJ

Telephone: 020 7808 2233
Email: charity@royalmarsden.org

Or you can use our online form

Personal information is information that can be used to identify you or tell us about you. We will only collect what we consider necessary. This includes the following:

• Your name
• Your contact details
• Donations you make to us
• Gift Aid status
• Enquiries, feedback and complaints
• Motivations for your support
• Date of birth and gender
• Logs of communications we’ve sent you and you’ve sent us
• Your communication preferences
• Your bank or credit/debit card details - if you use your credit or debit card to donate to us, buy something or pay online or over the phone, we will ensure that this is done securely and in accordance with the Payment Card Industry Data Security Standard.
• Your personal and charitable interests
• Your professional activities
• Any relationships relevant to your support, e.g. a relationship to the hospital, the cause, or to another one of our donors
• Information about your wealth (see Identifying and building relationships with philanthropists in section 4)
• Philanthropic Interests
• Data collected from your website using cookies
• Your social media account details, handles or tags where you interact with us, send us photos or videos, or tag us in content
• Photographs, videos, and other visual and audio recordings
• Employment history/health/convictions (if a volunteer)
• Information created by analysing your support, such as insights and recommendations about the says you may be most likely to support or engage with us

Sensitive data

Occasionally we may need to collect information that is considered to be sensitive. For example:

• Medical data related to an event you might take part in - where we need this information to ensure we provide appropriate facilities for you
• Health information you have given us related to your support for the charity and the hospital

On most occasions where we collect sensitive personal data for these purposes we will obtain your consent and we will make it clear to you, when collecting this information, what we are collecting and why. You may withdraw such consent at any time by contacting us (see section 2. Contacting us)(Also see section 10. Your rights). We would only record sensitive data without explicit consent in rare circumstances where relevant information has been clearly and deliberately shared publicly by you and where it satisfies RMCC’s internal guidelines.

How do we collect personal information?

We will collect personal information directly from you when you:

• Ask about our activities or register your interest in an event
• Make a donation to us
• Sign up, register or apply for an event
• Sign up to volunteer
• Sign up for communications
• Engage with our website
• Share your views with us through surveys
• Order products such as merchandise from our shop
• Make an enquiry or complaint
• Write, email or talk to us on the phone or in person
• Attend RMCC and third party events

We may collect personal data indirectly from you in the following ways:

• We collect contact details, financial transactions, gift aid status and communications preferences via third party platforms and suppliers that support our fundraising activities e.g. Justgiving, Events organisers and third party surveys for marketing purposes.
• We may collect information about your philanthropic interests and any relationship you have to The Royal Marsden and our cause from print and online media articles about you in the public domain.
• We may receive your personal data through people who have an existing relationship with us, and where they introduce you or share your details with us. Where this happens, we will take appropriate steps make sure you are aware when this happens and explain how we will use your personal information.
• We gather and observe data about supporters’ use of our websites, such as which pages are most visited and which events or activities are of most interest as well as feedback ratings and text (see section 9. Our website and Cookies policy).
• We may collect photographs, video or other visual and audio recordings  that you provide to us, including by email, through fundraising platforms, or where you share them with us or tag us on social media.
• Our third party screening providers may look at philanthropic interests and wealth information in order to ascertain who has the ability to fund major projects. This will include publicly available information from sources, such as, but not limited to, Companies House, The Electoral Roll and The Charity Commission. For more information about how your personal data might be processed in this context (see Identifying and building relationships with philanthropists in section 4).
• If you are acting as executor to a Will with a gift to The Royal Marsden Cancer Charity your personal data is provided via a Probate Registry notification service to the Charity in order for the gift to be administered and acknowledged.
• We may use specialist fundraising analytics providers to analyse supporter information we already hold and generate recommendations that help us tailor fundraising activity and supporter communications.

Ensuring the accuracy of your information

We aim to ensure that all information we hold about you is accurate and, where necessary, kept up to date. If any of the information we hold about you is inaccurate and either you advise us or we become otherwise aware, we will ensure it is amended and updated without delay. You can find our contact details here.

4. Why do we collect and how do we use your information?

As a data controller, The Royal Marsden Cancer Charity takes its responsibilities under the GDPR very seriously. Our lawful bases for processing your data are as follows:

• We have a legitimate interest in processing your data for the purposes of improving our products, services and website to run our organisation effectively and efficiently
• Telephone and postal fundraising communications are also made on the basis of our legitimate interests, unless you have told us that you do not wish to receive telephone calls or mail from us.
• Email and SMS fundraising or marketing communications are sent only where you have given your specific and informed consent, or where we are permitted to contact you under the soft opt-in rules in the Privacy and Electronic Communications Regulations. Where we rely on soft opt-in, we use your personal data on the basis of our legitimate interests. We will always give you a clear and simple way to opt out.
• We rely on your explicit consent to process sensitive personal data and for patient stories and case studies
• We also process data to comply with legal obligations, for example when assessing your personal information for the purposes of credit risk reduction or fraud prevention. Charities are known to have been targeted for illegal purposes such as money laundering and so we are required to monitor financial activity and report suspected fraud to the appropriate authorities
• Lastly, we process data where it is necessary for the performance of a contract. For example, we need your personal details in order to send you items ordered through our shop or to process your direct debit, both of which represent a contract.

Legitimate interest

Legitimate interests means we can use your personal data where it is reasonably expected, has a minimal impact on your privacy, and helps us carry out our charitable work. We always balance our interests against your rights and you can object at any time. 

The personal data we process on this basis includes contact and identification details, financial transactions, a record of interaction, relationships relevant to your support, information about your wealth and philanthropic interests.

We process some of your personal data in a manner that you would reasonably expect to pursue our legitimate interests. We have carefully balanced your interests against our interests when deciding whether this is appropriate. Our legitimate interests and the purposes for processing that fall under each of them are as follows:

Processing and record keeping

• Process your donation(s)
• Acknowledge any donation(s) we receive
• Managing feedback and complaint
• Keeping a record of your communications with us
• Supporting your fundraising activities

Understanding and improving our products and services

• Analysing supporter data to improve our fundraising, services and communications, including making them more relevant, proportionate and cost-effective
• Blocking disruptive use of our website, record website traffic, personalise the way our information is presented to you

Fundraising and marketing by email, SMS or other digital messaging using soft opt-in

The soft opt-in is not a lawful basis for processing personal data under UK GDPR. It is a rule under PECR that allows us to send some email, SMS or other digital messaging, fundraising or marketing communications without asking for explicit consent, where the legal conditions are met. Our UK GDPR lawful basis for using personal data in this way is our legitimate interests. We may rely on soft opt-in where you have previously supported us, registered for or shown interest in our activities, and we gave you a clear opportunity to opt out when we collected your details. We will only use this approach where the communication is relevant to your previous support or interest, and every communication will include a clear and simple way to opt out.

Fundraising and marketing by post

• Provide you with updates and information about our work
• Ask you to help us raise money or donate to our charity
• Analysis to help us understand more about you so we can send more targeted and relevant communications and can ask you to support in appropriate ways
• Invite you to participate in surveys or research

Managing volunteers

• Processing your application
• Managing timesheets
• Keeping a record of communications

Supporter insight, fundraising analytics and predictive modelling

We may analyse information we already hold about you, such as donation history, event participation, communication history and engagement with the Charity, to help us understand patterns of support and make our fundraising more relevant, proportionate and cost-effective.

We may use trusted specialist providers, including predictive analytics or machine learning tools, to make recommendations that support fundraising planning and supporter communications. This  helps our staff make decisions, but we do not make decisions about you based solely on automated processing and we do not use this analysis to determine access to services or care.

We rely on our legitimate interests for this processing and use safeguards including data minimisation, supplier due diligence, contractual controls, human oversight, transparency and the right to object. You can object to this type of processing at any time by contacting us.

Telephone fundraising

We may contact you by telephone to tell you about our work and ways you can support The Royal Marsden Cancer Charity. We may have collected your telephone number when you made a donation, contacted us, or registered for an event. While we may have asked for your consent at the point of collection, we may now use your telephone number under our legitimate interests for appropriate supporter communications. 

We will always:

• Screen telephone numbers against the Telephone Preference Service (TPS).
• Tell you who we are and why we are calling.
• Give you a clear opportunity to opt out during the call.
• Respect your preferences immediately.

Where we use your data based on legitimate interests, you have the right to object at any time. This includes objecting to receiving telephone calls from us. If you object, we will stop using your phone number for this purpose. 

We always comply with the Privacy and Electronic Communications Regulations (PECR). We will not make telephone marketing calls where you have told us not to, or where we are legally required to obtain consent. 

Targeted digital or social media marketing

We may use information you have provided to us, such as your contact details and supporter history, to help make our digital and social media advertising more relevant and effective. This may include sharing securely encrypted contact details with digital advertising networks or social media companies, such as Meta, so they can match the information to their users, show our adverts to existing supporters, or help us reach audiences with similar characteristics to our supporters. This is sometimes known as customer matching, custom audiences or lookalike audiences. We rely on our legitimate interests for this processing where we have assessed that it is necessary, proportionate and within reasonable expectations. We use safeguards including data minimisation, secure transfer methods, contractual controls, supplier due diligence, transparency and the right to object. You can ask us not to use or share your information for this purpose in this way by getting in touch.

However, you should bear in mind that even when you have asked us not to share your information for this purpose, you may still see adverts relating to our cause. This will be because the ad network or social media site has selected you based on information they hold, or settings you have on your device or profile with them, without using any information provided by The Royal Marsden Cancer Charity.

If you want to manage the advertising you see through social media sites you can find out how here:

• Facebook
• Twitter

Photography, images, audio and film

The Royal Marsden Cancer Charity uses photography, images, audio and film in media (such as newspapers, magazines or websites) on social media, in publications, on our website, in printed or online fundraising materials, and in fundraising and awareness films by us or by our corporate partners, community groups and senior volunteers who help raise money to support the Charity. This may include photos, audio and videos taken at events you attend, or photos and videos that you share with us, including by email, through fundraising platforms or by tagging us or sharing content with us on social media.

We may work with photographers, videographers and other creative suppliers to create photography, audio, video and campaign materials. In some limited circumstances, and only where the relevant permissions allow, we may permit these suppliers to use selected images or footage for their own professional portfolio or marketing purposes. We will not permit this for patient images or images taken in clinical environments unless this has been clearly explained and explicitly agreed.

We may also use secure cloud-based design, content management and collaboration platforms to create, review, store and publish fundraising, marketing and campaign materials containing photographs, audio, video and other content.

Staff photography and imagery

We may use images of our staff and Royal Marsden staff in a professional or work-related context to help explain and promote the work of The Royal Marsden Cancer Charity, the impact of charitable funding, our fundraising activity, events, campaigns and the partnership between the Charity and The Royal Marsden. We rely on our legitimate interests for this use where it is appropriate, proportionate and within reasonable expectations, and we take extra care where an image is prominent, high-profile, old, used externally, or could imply personal endorsement of a particular message. Staff can object to future use of their image or raise concerns by contacting us.

Patient Case Studies

Photography, images and film created for patient case studies are only used with your explicit consent. We will discuss with you how your, and/or your child’s, image and information is going to be used, including whether it may be shared with The Royal Marsden, media partners, agencies, photographers or other suppliers. Patient images, particularly those taken in clinical environments, will not be made available for a photographer's or supplier's own marketing or portfolio use unless this has been clearly explained to you and explicitly agreed. You can ask us to stop using them at any time and we will refresh your consent every two years.

Event Photography

By taking part in or attending an event to support The Royal Marsden Cancer Charity, all participants confirm they are happy for any photographs, video footage or stills taken during their participation to be used by The Royal Marsden Cancer Charity to publicise the Event and/or other fundraising purposes including but not limited to, advertising, publications, marketing material and any other documents that may be made available to the public.

If you are an employee of a company, or if you join a company’s team or event that supports The Royal Marsden Cancer Charity, your photos may be shared with the company and may be used in marketing and publications.

If you provide photographs, videos or other visual recordings to The Royal Marsden Cancer Charity, including by email or through social media, or if you tag us in content on your social media account, you agree that these may be used by The Royal Marsden Cancer Charity or our corporate partners for commercial and/or fundraising purposes. By sending such photographs, videos or other visual recordings to us, or by tagging us in them, you are also confirming that anyone featuring prominently in any such photograph, video or recording is aged 16 or over, and that they have consented to their image being used in this way.

If you do not want your image to be used please email charity@royalmarsden.org

Identifying and building relationships with philanthropists

The Royal Marsden was founded on philanthropy and it still plays an important role in our fundraising today. By learning more about those who could support us, we are able to provide the funding opportunities most likely to interest you. We analyse all the types of personal data described in section 3 to allow us to understand your charitable interests, capacity to provide philanthropic support, and connection to our work. It is this understanding which helps us to have a personalised relationship with you, maximising the impact your philanthropy has.

This research will often be carried out by us directly but in some instances trusted third party partners will be used to manage our resources more efficiently. For more information on the third parties we use see section 5. Information Sharing and Disclosure.

Processes carried out by such third parties may include screening techniques. This would involve sharing select personal data with the third party and screening against their existing database of publicly available data for evidence that you may have the ability and inclination to provide further philanthropic support.

Should you wish to opt-out of this or any other form of data processing, you can do so at any time using the contact details provided in this privacy policy (see section 2. Contacting us).

Funding posts at The Royal Marsden NHS Foundation Trust

We process the names, professional details and salaries of hospital staff to manage, monitor and evidence the roles funded by the Charity and to ensure appropriate governance and oversight of our charitable funding.

Consent

The categories of personal data we process on this basis may include contact and identification details, your health condition and relationship with The Royal Marsden.

We may contact you for marketing purposes by email or SMS where you have given your specific and informed opt-in consent. It is your choice what type of communications and information you receive about our Charity and the ways in which you can get involved. 

In some circumstances, we may send fundraising or marketing communications by email under the charitable purposes soft opt-in rules. In those cases, we rely on our legitimate interests as our UK GDPR lawful basis.

We will also obtain your consent when we collect sensitive personal data from you, unless you have clearly and deliberately shared the relevant information in public. 

You can change your mind about consent or withdraw it at any time by contacting us.

Compliance with a legal obligation

The categories of personal data we process on this basis include contact and identification details, financial transactions and gift aid status, professional activities, records of interaction and any criminal convictions.

We may send you service communications for example if you have made a donation by SMS. We require data in order to process Gift Aid claims and manage email and SMS text suppression (permanent exclusion) lists. 

We are also required by law to protect against the possibility of charitable donations being used as part of criminal activity such as fraud or money laundering, which would need to be reported to the authorities. Such instances are rare but where a risk is highlighted, we are required to process personal data in order to carry out due diligence in order to be confident in accepting legitimate offers of support. 

When necessary for the performance of a contract

The categories of personal data we process on this basis include contact and information details as well as your bank details and financial transactions.

We may send you service communications for example when you place an order for goods or services on our website. We also need data to be able to service your direct debit. Without the relevant personal data here, it would not be possible to carry out the contract with you.

We will not, without your consent, supply any of your personal data to any third party except for the following reasons, which are expanded on below:

• We are required to do so by law enforcement or regulatory bodies where this is required or allowed under the relevant legislation
• We share personal data with The Royal Marsden for volunteer management and, when required, for supporter stewardship
• We use third-party individuals and companies from time-to-time to support our fundraising activities and carry out data processing operations on our behalf

Law enforcement

We will disclose your personal information to third parties if we are required to do so through a legal obligation (this would include but not be exclusively HMRC, Information Commissioner’s Office, Charity Commission, Companies House, the police or government bodies); to enable us to enforce or apply our terms and conditions or rights under an agreement; or to protect us, for example, in the case of suspected fraud or defamation.

The Royal Marsden hospitals

We work closely with The Royal Marsden hospitals both in managing the volunteers that help in the hospital and enabling our supporters to get updates from clinical staff about the work they help to fund. In both cases it is necessary for us to disclose information to some staff working for The Royal Marsden. We also have supporters that are patients who share their stories with us to help us promote the work of the charity. Their information is shared between the hospital and the charity. 

• Volunteers – We will share your contact details with the hospital to enable them to support your volunteer experience and have access to the relevant training. The Royal Marsden will be the data controller of any personal or sensitive data provided with regards to your work in the hospital e.g. your occupational health data
• Funding – We will share information about your support and link to the cause with staff you may meet in the hospital to ensure that they understand your interests. This information will only be held for the duration of the relationship and The Royal Marsden Cancer Charity remains the data controller for all personal data related to your support
• Where you have offered to share your story as a patient, to help promote the hospital or Charity’s work, we will share the details with the hospital. 

Use of third parties

We will use trusted third party partners, suppliers and organisations that work with us in connection with our charitable purposes and the operation of the Charity. They may support us to deliver fundraising appeals, campaigns, events, services, research surveys, communications, payments, technology, fulfilment, analysis, governance or administration, or may store or process personal information on our behalf. We do not publish a list of every individual supplier in this notice, as our suppliers may change over time. Instead, we describe below the categories of organisations who may receive or process personal data where this is necessary for the purposes explained in this policy. Not every category will apply to every person.

• Fundraising platforms and fundraising event providers, including organisations that operate fundraising platforms to give you choice about the way you can fundraise for us
• Third party companies that manage events (e.g. runs, bike rides and sky dives) that you have registered for. In some cases we may share relevant medical or health information with third party event organisers or medical providers where necessary to help ensure supporters can participate safely.
• Mailing houses, printers, fulfilment, delivery and merchandise providers that help us send communications, fundraising materials, event materials or items you have ordered
• Specialist organisations that help us analyse, segment, profile or better understand supporter data, including via fundraising analytics, predictive modelling, machine learning and prospect research providers. They help us plan campaigns, tailor communications, identify potential philanthropic support and steward supporters effectively.
• Payment processors, banks, card payment providers, direct debit providers and other financial service providers that help us process donations, purchases, refunds and Gift Aid claims
• CRM, database, cloud hosting, IT support, cyber security and systems providers that help us store, manage, protect and administer personal information
• Email, SMS, telephone, marketing automation and communication service providers that help us send service messages, fundraising communications and supporter updates in line with your preferences and the law
• Website, analytics, cookie, digital advertising, social media and online platform providers that help us operate our website, understand engagement and deliver relevant online advertising where permitted
• Survey, research, feedback and supporter insight providers who help us understand supporter views and improve our work
• Photographers, videographers, media agencies, creative agencies and production suppliers who help us create, manage or publish photography, video, case study or campaign materials. Where agreed in our contract and permitted by the relevant consent or permissions, this may include limited use of selected images  by those suppliers for their own professional portfolio or marketing purposes
• Professional advisers, auditors, insurers, consultants and other governance or compliance providers where access to personal data is necessary for advice, assurance, claims handling, legal obligations or good governance
• As part of a corporate relationship with your employer to support your fundraising and volunteering activities.
• Next of kin - if you donate in memory of someone  to allow the support to be processed and acknowledged where appropriate.
• Volunteer-led fundraising committees to allow the support to be processed and acknowledged where appropriate.
• Special Occasion Giving - if you donate in celebration of someone’s special occasion e.g. birthday or wedding to allow the support to be processed and acknowledged where appropriate.

We will always make sure appropriate contracts, due diligence and controls are in place and we regularly monitor our partners where appropriate to ensure their compliance. We actively assess these organisations to maximise the protection of your privacy and security. Where an organisation processes personal data on our behalf, they are only permitted to use the data in accordance with our instructions and applicable data protection law.

Some of the third parties we work with may process personal data outside the UK. For example, some fundraising analytics or technology providers may host or process data in countries such as Australia or use cloud infrastructure outside the UK. Where this happens, we will ensure that appropriate safeguards are in place as required by UK data protection law. This may include relying on UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism.

If you are aged 16 or under, and would like to participate in an event, make a donation or get involved with us, please make sure that you have your parent or guardian’s permission before giving us your personal information. When we collect information about a child or young person, we will make it clear as to the reasons for collecting this information and how it will be used. We will not communicate with under 16s directly beyond fulfilling the relevant service i.e. acknowledging the gift, sending out event details. You can withdraw consent at any time by contacting us (see section 2. Contacting us).

We recognise the importance of protecting our vulnerable supporters and follow the guidance issued by the Institute of Fundraising on treating donors fairly. We believe this helps to support our staff, volunteers and fundraisers who come into contact with supporters in providing high quality customer care, ensuring anyone donating to the Charity is in a position to make a free and informed decision.

We will keep all your information in a confidential record that is specific to you. We use a customer relationship management system (CRM) to support our activity. This means that we can keep the information you provide us, so we are able to see the history and relevant details of your relationship with us. We take information security very seriously. No one is allowed access to our system or files unless they need this in order to provide a service to you or for one of the other purposes discussed in this notice.

We will only keep your information for as long as we need it for the purposes explained in this policy. This includes processing your donation, responding to your enquiry, managing your relationship with us, keeping accurate financial and Gift Aid records, respecting your communication preferences and meeting our legal, regularotry and governance responsibilities.

Our standard retention period for supporter records is up to 7 years from the end of our relationship with you or your last meaningful interaction with us, unless a shorter or longer period is required for a specific type of information. Some types of information are kept for shorter periods, for example unsuccessful enquiries, prospective supporter research, event participation information, health or accessibility information collected for a specific event, and records that are no longer needed for the purpose for which they were collected.

We may need to keep some information for longer where this is necessary for legal, tax, accounting, audit, fraud prevention, safeguarding, dispute resolution, regulatory or governance reasons, or to maintain a record of your communication preferences and opt-outs.

When we no longer need to retain your information, we will securely delete, anonymise or dispose of it in line with our retention policy. You can ask us to delete your information at any time. We will respond to your request in line with data protection law, but we may need to keep some information where we have a legal reason to do so, or where it is needed to record your preferences and make sure we do not contact you again.  

We do not store your credit or debit card details at all, following the completion of your transaction. All card details and validation codes are securely destroyed once the payment or donation has been processed. Most transactions are undertaken without a person ever seeing your credit card details and only those staff authorised to process payments will be able to see your card details.

If we receive an email containing any credit or debit card details, it will be immediately deleted, no payment will be taken and you will be notified about this.

If you opt out of marketing, we will keep enough information to record and respect your preference. This helps us make sure we do not contact you again for marketing purposes, including where you have opted out of email, SMS or other digital messaging communications sent under the soft opt-in rules lists.

To make full use of our website you need to accept cookies. Without cookies you can still visit our website but some features won't work. More information on cookies can be found in our Cookies Policy.

Our website is hosted on a secure server. Any information you send to us over the internet is encrypted using secure socket layer technology (SSL). Although we cannot 100 per cent guarantee the security of any information you transmit to us, we enforce strict procedures and security features to protect your information and prevent unauthorised access.

Our website contains links to other websites belonging to third parties and we participate in social networking sites including but not limited to Twitter, YouTube, Instagram and Facebook. We may also include content from sites such as these on our website. However, we would advise you that we do not have any control over the privacy practices of these other sites. You should make sure when you leave our site to visit another site that you have read and understood that site’s privacy policy, in addition to our own.

You have the absolute right to object to your personal data being used for direct marketing at any time, including fundraising communications by telephone, post, email or SMS. This includes communications sent under the PECR soft opt-in rules. where applicable. You also have the right to object to profiling or analysis carried out on the basis of our legitimate interests, including fundraising analytics and predictive modelling. If you object to direct marketing, or use an unsubscribe or opt-out option in an email or SMS, we will stop processing your data for that purpose immediately. You have the right to:

• Request a copy of the information we hold about you, and to transmit that copy to another data controller
• Update or amend the information we hold about you if it is wrong
• Change your communication preferences at any time, including withdrawing consent or opting out of communications by email, phone, post or SMS, or withdrawing consent to process sensitive information you have given us
• Ask us to remove your personal information from our records
• Object to the processing of your information for marketing purposes
• Raise a concern or complaint about the way in which your information is being used.

If you wish to find out more about these rights, or obtain a copy of the information we hold about you, please contact us

By post

Private Information Request
The Royal Marsden Cancer Charity
Fulham Road
London  SW3 6JJ

Or via telephone on 020 7808 2233 or email: charity@royalmarsden.org 

Or you can use our online form

We hope that you will not have cause to complain about any aspect of our services. If a problem does arise you are, of course, entitled to complain – if you have any concerns or complaints that cannot be raised with us through the above details, you can also contact the Information Commissioner here.