Privacy notice and cookies policy

How we collect, use and store your data

This content relates to the following topics:

This privacy notice explains how The King's Fund (‘we’, ‘us’, ‘our’) collects, uses and discloses your personal data, and your rights in relation to the personal data we hold. 

The King's Fund (registered charity number 1126980 and with registered office at 11–13 Cavendish Square, London W1G 0AN) will generally be the controller of your personal data. However, in certain limited circumstances, The King's Fund's wholly owned trading subsidiary, KEHF Limited, will be the controller of your personal data – please see the relevant section below for more information. 

Last updated: May 2018

Collecting and using your data

We may collect certain information or data about you in various ways. The main circumstances we do so are below.

  • When you submit enquiries or feedback through one of our website forms, leave a comment or sign up for email newsletters, or book a place at a King's Fund event (eg, via our third party booking platform EventBrite or online events platform WorkCast) we may collect your name, email address, telephone number and other information. 
  • When you apply for our courses or awards, eg, Athena programme or GSK IMPACT Awards we may collect your name, email address, role, organisation and other information. 
  • When you use our website we will collect:
    • your IP address, and details of web browser and which version of it you used
    • information on how you use our website, using cookies, that will help us improve the website
    • details of transactions you carry out through our website and of the fulfilment of your orders. 
  • When you participate in any of our research projects we may collect your name, contact and other details.
  • When you attend a course, conference or award ceremony we may collect images of you in films or photographs or, in respect of contributions you may make, audio recording.
  • When you contact us directly, we may keep a record of that correspondence.

We have technical and organisational measures in place to keep your data secure once we receive it. These protective measures may include pseudonymising and encrypting personal data, firewalls, anti-virus and malware software, holding personal data in secure, confidential storage, and regularly assessing and evaluating the effectiveness of such measures.

Online payment transactions are always encrypted. The King’s Fund is PCI DSS compliant.

When sharing personal data with third parties as set out in this privacy notice, it may be transferred outside the EEA. In these circumstances, your personal data will only be transferred on one of the following bases:

  • the country that we send the personal data to is approved by the European Commission as providing an adequate level of protection for personal data
  • the transfer is to a recipient in the US who has registered under the EU/US Privacy Shield
  • the recipient has entered into European Commission standard contractual clauses with us
  • you have explicitly consented to the same.

To find out more about the transfers by us of your personal data outside the EEA and the countries concerned, please contact us at dataprotection@kingsfund.org.uk.

We may use your personal information:

  • to provide you with information, products or services that you request from us, or to process your booking in relation to an event or course we are organising
  • to make you aware of related products and services (but only with your consent where required)
  • to notify you of any changes to our services or products
  • to assist with any contractual obligations between us
  • to administer a research project or programme you participate in
  • to administer any courses or awards that you participate in, eg, Athena programme, GSK IMPACT Awards
  • to provide a record of, or to promote and market a course, conference or award using images and film taken on the day. 

Products and services

We need to process your personal data when we provide you with information, products and services that you have requested from us. We do so because it is necessary for our legitimate interests and/or because it is necessary for the performance of a contract to which you are a party or in order to take steps at your request before entering into a contract.

Marketing

When we send marketing communications to you at a business email address, we do so because it is necessary for our legitimate interests. Our legitimate interests include disseminating our independent research and analysis, as well as highlighting relevant courses and conferences, in order to fulfil our vision to improve health and care in England. You can request that we stop sending you marketing communications at any time (see 'your rights' below).

In respect of personal email addresses, we will only send you marketing with your explicit consent and you can opt out at any time. 

Organisational development(OD)

We may need to process your personal data when we partner with your organisation during OD work. This is necessary for the performance of a contract to which you are a party or in order to take steps at your request before entering into a contract.

Personal data gathered from publicly available sources

We gather limited personal data from publicly available sources (such as announcements about job moves in the health sector) so that we can contact individuals who we think will be interested in our events or publications. We do so in connection with our legitimate interests as referred to above under 'Marketing'.

Research

If you participate in research into health and care that we conduct (for example, in relation to the management of health policy / services), we may need to collect and process your personal information. We do so because it is necessary for our legitimate interests in pursuing research into the health and care sector. However, we follow ethical guidelines when conducting research and will always keep you informed of your rights.

We may also collect health data from organisations, eg, NHS Digital, when we conduct research. However, this data is pseudonymised. This means that a person’s identity cannot be seen unless other information is available – known as a ‘key’. This ‘key’ is stored by the organisation we have collected the data from and cannot be accessed by The King’s Fund.

Filming and photography at events

We (or a third party) sometimes carry out filming (including audio recordings) or photography at events as part of our publicity/marketing output. We do so because it is necessary for our legitimate interests in promoting and disseminating our work. We make delegates aware of this in advance in the information pack provided and in signage at the event.

Other bases for processing

We may need to process your personal data for compliance with our legal obligations, including where it is necessary for the prevention and detection of crime, or for the establishment, exercise or defence of legal claims (for example, to protect and defend our rights or property).

For the purposes referred to in this privacy notice and relying on the bases for processing as set out above, we may share your personal data with certain third parties. We may disclose limited personal data to a variety of recipients including:

  • our employees, agents and contractors where there is a legitimate reason for their receiving the information 
  • KEHF Limited, our wholly owned trading company through which we manage certain commercial activity related to our charitable activities (please see further below for more information)
  • our corporate partners if we hold an event they are supporting (and in respect of which we disclose details of who is attending that particular event)
  • attendees of an event you are participating in for networking purposes (name, role, and organisation in the form of an attendee list) 
  • internal and external auditors and our legal advisers
  • when The King's Fund is legally required to do so (eg, by a court, government body, law enforcement agency or other authority of competent jurisdiction), for example, by HM Revenue and Customs.

We often work with third parties to help us provide our services and products to you. For example, if you wanted to attend one of our events we use a third party called EventBrite to manage the booking on our behalf. 

We have contracts in place with all our third parties to make sure they protect and respect your information with the same commitment as we do. For further information please contact us at dataprotection@kingsfund.org.uk.

We will retain your personal data no longer than is necessary for the purposes for which it is processed. This purpose is set out in the 'How do we use your personal information?' section above. For example, it may be kept for the duration of a service or product you receive from us or as part of our legal obligations. 

Under data protection legislation you have several rights concerning your personal data. These are:

  • the right to be informed what personal data we hold about you and/or to obtain access to it
  • the right to rectification of personal data we hold about you if it is inaccurate
  • the right to erasure of your personal data (in certain circumstances)
  • the right to restrict processing (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal)
  • the right to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller
  • the right to object on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights.

The above rights are not absolute, and we may be entitled to refuse requests where exceptions apply: for example, if we have reason to believe the personal data we hold is accurate or we can show our processing is necessary for a lawful purpose set out in this notice.

Where our processing of your personal data relies on your consent, and where you then withdraw that consent, we may not be able to provide all or some aspects of our services to you and/or it may affect the provision of those services. If you have given your consent and you wish to withdraw it, please contact us at dataprotection@kingsfund.org.uk.  

You can find out more about your rights under data protection legislation at www.ico.org.uk. If you are not satisfied with how we are processing your personal data, you can make a complaint to the Information Commissioner.

KEHF Limited (‘KEHF’) (registered company number 02754697 and with registered office at 11–13 Cavendish Square, London W1G 0AN) is the wholly owned trading subsidiary of The King's Fund and runs the venue hire business 11 Cavendish Square. 

KEHF will collect personal data relating to venue hire bookings (for example, the hirer's name and contact information) because it is necessary for the performance of a contract or to take steps at the hirer's request before entering into a contract. 

Where the individual making the booking is doing so in a business/work context (ie, using a business email address) KEHF collects that information for marketing purposes, to be able to send details of offers or other services because it is necessary for KEHF's legitimate interests in promoting its business. KEHF will always provide the option to opt out of receiving such communications. Where the individual provides a personal email address, KEHF will only send marketing communications with their consent (and always with the option to opt out at any stage).

If the hirer provides KEHF with any health-related information of attendees (for example, allergy information or particular dietary requirements) KEHF processes this information on the basis of consent for the event in question and for the purpose of protecting the wellbeing of such attendees.

Please see the 'your rights' section above, which also applies in respect of KEHF, and you can contact us at dataprotection@kingsfund.org.uk with any queries.

Cookies

The King’s Fund website, kingsfund.org.uk, puts small files (known as ‘cookies’) on to your computer to collect information about how you browse the site.

Cookies are used to:

  • measure how you use the website, so it can be updated and improved based on your needs
  • remember your settings between and during visits
  • make the shopping basket and checkout work on shop.kingsfund.org.uk.

The exact cookies we use are detailed below.

You’ll normally see a message on the site before the first time we store a cookie on your computer.

Find out more about how to manage, delete and control cookies.

We use Google Analytics software to collect information about how you use kingsfund.org.uk. We do this to help make sure the site is meeting the needs of its users and to help us make improvements.

Google Analytics stores information about:

  • the pages you visit on kingsfund.org.uk
  • how long you spend on each kingsfund.org.uk page
  • how you got to the site
  • what you click on while you’re visiting the site.

We don’t collect or store your personal information (eg your name or address) so this information can’t be used to identify who you are. We don’t allow Google to use or share our analytics data.

Google Analytics sets the following cookies:

NamePurposeExpires
_gaThis helps us count how many people visit kingsfund.org.uk by tracking if you’ve visited before2 years
_gatUsed to manage the rate at which page view requests are made10 minutes
_gat_UA-275328-1Used to manage the rate at which page view requests are made10 minutes

You can opt out of Google Analytics cookies.

You may see a message when you first visit kingsfund.org.uk that notifies you about our use of cookies. We store a cookie so that your computer knows you’ve seen it and knows not to show it again.

NamePurposeExpires
dontShowCookieNoticeThis lets us know that you’ve seen our cookie message1 year

Many parts of kingsfund.org.uk use Javascript to affect how webpages are displayed, but these pages can also work without Javascript. We store a cookie if Javascript is enabled in your web browser.

NamePurposeExpires
has_jsThis lets us know that you have Javascript enabled on your web browserWhen you leave the website

We use Dotmailer to send email newsletters and other bulk emails, and we use WebInsight software to collect information about how users who receive these emails use kingsfund.org.uk. We do this to help make sure the site is meeting the needs of its users and to help us make improvements.

WebInsight stores information about the pages you visit on kingsfund.org.uk and matches that to information that you supply to Dotmailer when you sign up to receive email newsletters. These cookies will come from the domain trackedweb.net.

NamePurposeExpires
AWSELBUsed for routing client request on the server 
XSRF-TOKENAttempts to validate the user 
SessionTracks the user through the siteWhen you leave the website

In conjunction with targeted advertising (see below), we use Twitter cookies to collect information about which pages you view on our websites in order to measure the performance of these advertisements and to help target future advertising.

Cookies can also be set by third-party domains when we embed content and tools from those domains. These include:

ServiceLink to their cookie policy
AddThisaddthis.com/privacy
Eventbriteeventbrite.co.uk/cookies
Facebookfacebook.com/policies/cookies/ 
Hotjarhotjar.com/legal/compliance/opt-out
Slideshareslideshare.net/privacy-preview
Soundcloudsoundcloud.com/pages/cookies
Storifystorify.com/privacy
Twittersupport.twitter.com/articles/20170514
YouTubegoogle.com/policies/technologies/cookies/

Targeted advertising

We occasionally use Twitter, Facebook and LinkedIn to serve advertisements targeted to users' interests. To opt out of targeted advertising please refer to https://support.twitter.com/articles/20170405 or https://www.facebook.com/help/568137493302217.

Contact us

Our data protection lead is the Business Information Manager, Tim Judkins. If you have any questions about how we use your personal data, or you wish to exercise any of the rights set out above, you can contact us at dataprotection@kingsfund.org.uk  

This page contains public sector information licensed under the Open Government Licence v3.0.