Collecting and using your data
- Information we may collect about you
We may collect certain information or data about you in various ways. The main circumstances we do so are below.
- When you submit enquiries or feedback through one of our website forms, leave a comment or sign up for email newsletters, or book a place at a King's Fund event (eg, via our third party booking platform EventBrite or online events platform WorkCast) we may collect your name, email address, telephone number and other information.
- When you apply for our courses or awards, eg, Athena programme or GSK IMPACT Awards we may collect your name, email address, role, organisation and other information.
- When you use our website we will collect:
- your IP address, and details of web browser and which version of it you used
- information on how you use our website, using cookies, that will help us improve the website
- details of transactions you carry out through our website and of the fulfilment of your orders.
- When you participate in any of our research projects we may collect your name, contact and other details.
- When you attend a course, conference or award ceremony we may collect images of you in films or photographs or, in respect of contributions you may make, audio recording.
- When you are employed by an organisation that has a tenancy on our Health Campus in Cavendish Square, we may collect your name, contact details and photograph (for security access).
- When you contact us directly, we may keep a record of that correspondence.
- Keeping your personal data safe
We have technical and organisational measures in place to keep your data secure once we receive it. These protective measures may include pseudonymising and encrypting personal data, firewalls, anti-virus and malware software, holding personal data in secure, confidential storage, and regularly assessing and evaluating the effectiveness of such measures.
Online payment transactions are always encrypted. The King’s Fund is PCI DSS compliant.
- Transfer and processing of your personal data outside the European Economic Area (EEA)
When sharing personal data with third parties as set out in this privacy notice, it may be transferred outside the EEA. In these circumstances, your personal data will only be transferred on one of the following bases:
- the country that we send the personal data to is approved by the European Commission as providing an adequate level of protection for personal data
- the transfer is to a recipient in the US who has registered under the EU/US Privacy Shield
- the recipient has entered into European Commission standard contractual clauses with us
- you have explicitly consented to the same.
To find out more about the transfers by us of your personal data outside the EEA and the countries concerned, please contact us at firstname.lastname@example.org.
- How do we use your personal information?
We may use your personal information:
- to provide you with information, products or services that you request from us, or to process your booking in relation to an event or course we are organising
- to make you aware of related products and services (but only with your consent where required)
- to notify you of any changes to our services or products
- to assist with any contractual obligations between us
- to administer a research project or programme you participate in
- to administer any courses or awards that you participate in, eg, Athena programme, GSK IMPACT Awards
- to provide a record of, or to promote and market a course, conference or award using images and film taken on the day.
- The basis for processing your personal information
Products and services
We need to process your personal data when we provide you with information, products and services that you have requested from us. We do so because it is necessary for our legitimate interests and/or because it is necessary for the performance of a contract to which you are a party or in order to take steps at your request before entering into a contract.
When we send marketing communications to you at a business email address, we do so because it is necessary for our legitimate interests. Our legitimate interests include disseminating our independent research and analysis, as well as highlighting relevant courses and conferences, in order to fulfil our vision to improve health and care in England. You can request that we stop sending you marketing communications at any time (see 'your rights' below).
In respect of personal email addresses, we will only send you marketing with your explicit consent and you can opt out at any time.
We may need to process your personal data when we partner with your organisation during OD work. This is necessary for the performance of a contract to which you are a party or in order to take steps at your request before entering into a contract.
Personal data gathered from publicly available sources
We gather limited personal data from publicly available sources (such as announcements about job moves in the health sector) so that we can contact individuals who we think will be interested in our events or publications. We do so in connection with our legitimate interests as referred to above under 'Marketing'.
If you participate in research into health and care that we conduct (for example, in relation to the management of health policy / services), we may need to collect and process your personal information. We do so because it is necessary for our legitimate interests in pursuing research into the health and care sector. However, we follow ethical guidelines when conducting research and will always keep you informed of your rights.
We may also collect health data from organisations, eg, NHS Digital, when we conduct research. However, this data is pseudonymised. This means that a person’s identity cannot be seen unless other information is available – known as a ‘key’. This ‘key’ is stored by the organisation we have collected the data from and cannot be accessed by The King’s Fund.
Filming and photography at events
We (or a third party) sometimes carry out filming (including audio recordings) or photography at events as part of our publicity/marketing output. We do so because it is necessary for our legitimate interests in promoting and disseminating our work. We make delegates aware of this in advance in the information pack provided and in signage at the event.
Tenants at Cavendish Square
We need to process your personal data if you are an employee of an organisation that is a tenant on our Health Campus in Cavendish Square. This is necessary for the performance of a contract to which your organisation is party.
Other bases for processing
We may need to process your personal data for compliance with our legal obligations, including where it is necessary for the prevention and detection of crime, or for the establishment, exercise or defence of legal claims (for example, to protect and defend our rights or property).
- Sharing your information with others
For the purposes referred to in this privacy notice and relying on the bases for processing as set out above, we may share your personal data with certain third parties. We may disclose limited personal data to a variety of recipients including:
- our employees, agents and contractors where there is a legitimate reason for their receiving the information
- KEHF Limited, our wholly owned trading company through which we manage certain commercial activity related to our charitable activities (please see further below for more information)
- members of our Corporate Partners and Supporters programmes if we hold an event they are supporting (and in respect of which we disclose details of who is attending that particular event)
- attendees of an event you are participating in for networking purposes (name, role, and organisation in the form of an attendee list)
- internal and external auditors and our legal advisers
- when The King's Fund is legally required to do so (eg, by a court, government body, law enforcement agency or other authority of competent jurisdiction), for example, by HM Revenue and Customs.
We often work with third parties to help us provide our services and products to you. For example, if you wanted to attend one of our events we use a third party called EventBrite to manage the booking on our behalf.
We have contracts in place with all our third parties to make sure they protect and respect your information with the same commitment as we do. For further information please contact us at email@example.com.
- How long will we keep your personal data?
We will retain your personal data no longer than is necessary for the purposes for which it is processed. This purpose is set out in the 'How do we use your personal information?' section above. For example, it may be kept for the duration of a service or product you receive from us or as part of our legal obligations.
- Your rights
Under data protection legislation you have several rights concerning your personal data. These are:
- the right to be informed what personal data we hold about you and/or to obtain access to it
- the right to rectification of personal data we hold about you if it is inaccurate
- the right to erasure of your personal data (in certain circumstances)
- the right to restrict processing (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal)
- the right to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller
- the right to object on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights.
The above rights are not absolute, and we may be entitled to refuse requests where exceptions apply: for example, if we have reason to believe the personal data we hold is accurate or we can show our processing is necessary for a lawful purpose set out in this notice.
Where our processing of your personal data relies on your consent, and where you then withdraw that consent, we may not be able to provide all or some aspects of our services to you and/or it may affect the provision of those services. If you have given your consent and you wish to withdraw it, please contact us at firstname.lastname@example.org.
You can find out more about your rights under data protection legislation at www.ico.org.uk. If you are not satisfied with how we are processing your personal data, you can make a complaint to the Information Commissioner.
- KEHF Limited
KEHF Limited (‘KEHF’) (registered company number 02754697 and with registered office at 11–13 Cavendish Square, London W1G 0AN) is the wholly owned trading subsidiary of The King's Fund and runs the venue hire business 11 Cavendish Square.
KEHF will collect personal data relating to venue hire bookings (for example, the hirer's name and contact information) because it is necessary for the performance of a contract or to take steps at the hirer's request before entering into a contract.
Where the individual making the booking is doing so in a business/work context (ie, using a business email address) KEHF collects that information for marketing purposes, to be able to send details of offers or other services because it is necessary for KEHF's legitimate interests in promoting its business. KEHF will always provide the option to opt out of receiving such communications. Where the individual provides a personal email address, KEHF will only send marketing communications with their consent (and always with the option to opt out at any stage).
If the hirer provides KEHF with any health-related information of attendees (for example, allergy information or particular dietary requirements) KEHF processes this information on the basis of consent for the event in question and for the purpose of protecting the wellbeing of such attendees.
Please see the 'your rights' section above, which also applies in respect of KEHF, and you can contact us at email@example.com with any queries.
The King’s Fund website, kingsfund.org.uk, puts small files (known as ‘cookies’) on to your computer to collect information about how you browse the site.
Cookies are used to:
- measure how you use the website, so it can be updated and improved based on your needs
- remember your settings between and during visits
- make the shopping basket and checkout work on shop.kingsfund.org.uk.
The exact cookies we use are detailed below.
You’ll normally see a message on the site before the first time we store a cookie on your computer.
Find out more about how to manage, delete and control cookies.
- Google Analytics
We use Google Analytics software to collect information about how you use kingsfund.org.uk. We do this to help make sure the site is meeting the needs of its users and to help us make improvements.
Google Analytics stores information about:
- the pages you visit on kingsfund.org.uk
- how long you spend on each kingsfund.org.uk page
- how you got to the site
- what you click on while you’re visiting the site.
We don’t collect or store your personal information (eg your name or address) so this information can’t be used to identify who you are. We don’t allow Google to use or share our analytics data.
Google Analytics sets the following cookies:
Name Purpose Expires _ga This helps us count how many people visit kingsfund.org.uk by tracking if you’ve visited before 2 years _gat Used to manage the rate at which page view requests are made 10 minutes _gat_UA-275328-1 Used to manage the rate at which page view requests are made 10 minutes
You can opt out of Google Analytics cookies.
- Cookie notification message
Name Purpose Expires dontShowCookieNotice This lets us know that you’ve seen our cookie message 1 year
- Dotmailer/Webinsight cookies
We use Dotmailer to send email newsletters and other bulk emails, and we use WebInsight software to collect information about how users who receive these emails use kingsfund.org.uk. We do this to help make sure the site is meeting the needs of its users and to help us make improvements.
WebInsight stores information about the pages you visit on kingsfund.org.uk and matches that to information that you supply to Dotmailer when you sign up to receive email newsletters. These cookies will come from the domain trackedweb.net.
Name Purpose Expires AWSELB Used for routing client request on the server XSRF-TOKEN Attempts to validate the user Session Tracks the user through the site When you leave the website
- Twitter cookies
In conjunction with targeted advertising (see below), we use Twitter cookies to collect information about which pages you view on our websites in order to measure the performance of these advertisements and to help target future advertising.
- Other site cookies
Cookies can also be set by third-party domains when we embed content and tools from those domains. These include:
This page contains public sector information licensed under the Open Government Licence v3.0.