The personal information we collect about you may also be used to:

  • Provide data analysis, wealth screening and targeting communications
    To help continue the tradition of philanthropic support of the hospitals, we use profiling and screening techniques to ensure communications are relevant and timely, and to provide an improved experience for our supporters. We do this because it allows us to target our resources effectively, understand the background of the people who support us and helps us to make appropriate requests to supporters who may be able and willing to give more than they already do. Importantly, it enables us to raise more funds, and more cost-effectively, than we otherwise would.  We may gather information from publicly available sources, for example, Companies House and the Electoral Register. We sometimes use the internet to find out about your interests and causes you support, membership of clubs and associations, average house value in your area, typical earnings in a given sector in order to better understand your interests and preferences so we can contact you with the most relevant communications. We may carry out wealth screening (prospect research), a process which uses trusted third-party partners to automate some of this work. They may also use major industry directories, newspapers and journals.  This process helps us to make appropriate requests to those who may be able and willing to give more than they already do. Importantly, it enables us to raise more funds, sooner, and more cost-effectively, than we otherwise would. We therefore believe that using your personal information in this way is necessary for our legitimate interest of efficiently raising income to support the hospitals. Although there will be some impact on your rights, freedoms and expectations we do not consider it will cause undue harm because we have informed you of what we would do, and why. Targeting our resources effectively and efficiently is an issue donors consistently tell us is a key priority for them.
    We’d really like to know more about you and may send you a questionnaire or ask to come and meet you.
  • Promote the charities work though Marketing
    With your consent, we will contact you to let you know about the impact we are making and to ask for donations or other support. We make it easy for you to tell us how you want us to communicate, in a way that suits you. Our forms have clear communication preference questions and we include information on how to change your preferences (e.g. opt out) on each piece of marketing we send you.
    We also occasionally send a Supporter Survey which we may also send you as a way of finding out your communication preferences.
    If you don’t want to hear from us any more, please just let us know and we will update your records and we will no longer contact you. You can email, telephone us on 01225 825691, visit or complete a form we may have sent you.
  • We have not, and will not sell or share personal details with third parties for the purposes of marketing.
    If we run an event in partnership with another organisation, your details may need to be shared, for example our over sea’s treks or collaborative events with other charities. We will be very clear about what will happen to your data when you register.
    We only share data where we are required by law or with carefully selected partners who do work for us, for example, mailing companies who send out large mailings for us because we cannot do ourselves. All our partners are required by their contract with us to treat your data as carefully as we would, to only use it as instructed, and to allow us to check that they do this.
  • Carry our Due Diligence
    We also use publicly available sources to carry out due diligence on donors in line with Charity Commission guidance and to meet money laundering regulations.

Who do we share your information with and why?

We use external companies to collect or process personal data on our behalf, for example, when we send out a large mailing like our newsletter. We do comprehensive checks on these companies before we work with them, and put a contract in place that sets out our expectations and requirements, especially regarding how they manage the personal data we have shared.

Some of our suppliers may run their operations outside the European Economic Area (EEA). After Brexit, the UK may be outside the EEA. Although companies may not be subject to same data protection laws as companies based in the UK, we will take steps to make sure they provide an adequate level of protection in accordance with UK data protection law. By submitting your personal information to us you agree to the transfer, storing or processing at a location outside the EEA.

We may need to disclose your details if required to the police, regulatory bodies or legal advisors.
We will only ever share your data in other circumstances if we have your explicit and informed consent.

How do we maintain your records?

We hold and process your information in accordance with the Data Protection Act 2018 (subject to Parliamentary approval) as amended by the GDPR 2016, as explained above. In addition, everyone working for the NHS must comply with the Common Law Duty of Confidentiality and various national and professional standards and requirements.
We have a duty to:

  • maintain full and accurate records of the care we provide to you;
  • keep records about you confidential and secure;
  • provide information in a format that is accessible to you.

Use of Email – As a Charity we give the option to communicate with supporters via email. Please be aware that the we cannot guarantee the security of this information whilst in transit, and by requesting this service you are accepting this risk.

What are your rights?

If we need to use your personal information for any reasons beyond those stated above, we will discuss this with you and ask for your explicit consent. The Data Protection Act 2018 (subject to parliamentary approval) gives you certain rights.

Where possible we use publicly available sources to keep your records up to date, for example, the Post Office’s National Change of Address database and information provided to us by other organisations as described above. We really appreciate it if you let us know if your contact details change.

You have a right to ask us to stop processing your personal data, and if it is not necessary for the purpose you provided it to us for (e.g. processing your donation or registering you for an event) we will do so immediately.

You have a right to ask for a copy of the information we hold about you. If there are any discrepancies in the information we provide, please let us know and we will correct them.
If you wish to raise a complaint or have any questions on how we have handled your personal data, you can contact our Data Protection Officer who will investigate the matter.

Data Protection Officer

Please contact the Head of Information Governance:
Information Governance Team
Health Informatics Service
First Floor, Apley House (E5)
Royal United Hospitals Bath NHS Foundation Trust
Combe Park

Or via

Information Commissioner’s Officer

The Information Commissioner’s Office (ICO) is the body that regulates the Trust under Data Protection and Freedom of Information legislation, If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the. ICO at:

Information Commissioner’s Office
Wycliffe House
Water Lane
Tel: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number


‘Cookie’ is a name for a small file, usually of letters and numbers, which is downloaded onto your device, like your computer, mobile phone or table when you visit a website.

They let websites recognise your device, so that the sites can work more effectively, and also gather information about how you use the site. A cookie, by itself, can’t be used to identify you.

How do we use cookies?

We use cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you come to our website and also allows us to improve the user experience.

The cookies we use

We use the categorisation set out by the International Chamber of Commerce in their UK Cookie Guide.

We use all four categories of cookies:

  • Strictly necessary cookies are essential for you to move around our website and to use its features, like our shopping basket and your account.
  • Performance cookies collect anonymous information about how you use our site, like which pages are visited most.
  • Functionality cookies collect anonymous information that remember choices you make to improve your experience, like your text size or location. They may also be used to provide services you have asked for such as watching a video or commenting on a blog.
  • Targeting or advertising cookies collect information about your browsing habits in order to make advertising relevant to you and your interests. As such if you visit the Mind website you may then be more likely to see adverts about Mind’s work on other websites as your browsing suggests that this is an area of interest.

No cookies, please

You can opt out of all our cookies (except the strictly necessary ones). Find out how to control and delete cookies in your browser.

But, if you choose to refuse all cookies, our website may not function for you as we would like it to.

We may change this Privacy Policy from time to time.  If we make any significant changes in the way we treat your personal information we will make this clear on our website or by contacting you directly.