UCLH Charity is the official charity (registered number 1165398) supporting University College London Hospitals (UCLH) NHS Foundation Trust. We aim to improve and enhance patient care at UCLH and we do that by supporting patients, staff, equipment and research. We understand the importance of protecting the privacy and security of your personal information and undertake to safeguard all personal data that we collect. The following policy is written in accordance to the General Data Protection Regulation (GDPR) and it provides information how UCLH Charity collects and uses personal information including those given by people who visit our website.

Under GDPR, we need to be able to specify and demonstrate on what lawful grounds we process your personal information such as:

  • Consent - where you have given us consent to process your information. For example, the supplying of your contact details on a completed form will be recognised as consent.
  • Legitimate interest - we may process your personal information for specific purposes which are within our legitimate interest and which enable us to support our cause or help us raise funds

If you have any queries or concerns that are not covered below in regards to how UCLH Charity uses your information please email us at uclh.charity@nhs.net or write to us at 5th Floor East, 250 Euston Road, London NW1 2PG.

The personal information we collect will depend on why you are engaging with us this is to ensure our communications meet your requirements.

  • Personal details (name, email, postal address etc.);
  • Financial information (e.g. payment information);
  • Any other information that you choose to share with us such as your hobbies, work place, interests or health condition that you or a family member are affected by;
  • Information created by your involvement with UCLH Charity – for example if you entered a raffle organised by the charity, received our newsletter or attended one of our events, we will collect provided information on our database.

Other information can include your telephone number, date of birth, gender and financial information needed to process donations , online shop payment or event fees. We may also ask you if you are a UK tax payer so that we can claim Gift Aid. We may ask if you or your family member has been a patient and whether there is a particular area of the hospital you are interested in.

We need to collect person data on donors and potential donors. This is to enable us to identify individuals, corporates and foundations who may have the capacity and the propensity to give large donations to support our cause or to help raise funds through other means such as volunteer support and the facilitation of partnership opportunities.

We may collect personal information when you contact UCLH Charity personnel or anyone in connection with managing one of the charitable funds held with us, using any form of communication to enquire about our activities, make a donation or fundraise for us. We will also process personal and financial information when you make a doantion.

We may also collect personal data which relates to you from third parties. Your information may be shared with us by fundraising sites like JustGiving or Virgin Money. These independent third parties will only do this when you have specified that you wish to support UCLH Charity and with your clear consent. They have their own privacy policies and if you wish to know more you should contact them on how they will process your data.

We use third parties to collect data on our behalf to support our activities. This might include running raffles, event registrations and processing your donations, and ensuring our records are as up to date as possible through running address and detail verification checks

Depending on your settings or the privacy policies for other online services like Facebook or Twitter, you might give us permission to access information from those accounts or services. The information we get from those online services depends on your personal settings, and therefore it is recommended that you check them regularly.

We may collect personal information from referrals, local and national public sources including Companies House, Charity Commission and the media. We ensure that information collected is neither intrusive nor excessive. We believe this will help us to approach potential supporters with relevant fundraising projects, latest activities and appeals.

If you have provided your consent, by responding to a mailing, for UCLH NHS Foundation Trust to pass your details to us, we may contact you to keep you up-to-date about our activities, appeals and what’s happening at UCLH. Please rest assured that we do not have access to confidential patient data.

Your information may be used for a number of purposes including the following:

  • To provide you with information that you have requested
  • To process payment for purchases through UCLH Charity shop and to deliver your order
  • To help you with creating an online donation account
  • To claim Gift Aid on your donation from HMRC
  • To process entries into a prize draw or raffle
  • To gain better understanding of our supporters and provide you with relevant information about our work and how you can help us, for example, information about our fundraising activities, volunteering and campaigns
  • To send direct marketing that includes products, and news and information on volunteering opportunities, work that we do at UCLH, appeals and fundraising, our events, activities and leaving a legacy
  • To use IP addresses to identify your approximate location, to block disruptive use, to record website traffic or to personalise the way our information is presented to you
  • To analyse the information available to us such as your postcode, history of support and interests in order to gain better understanding of our supporters and provide you with relevant information about our work and how you can help us, for example, information about our fundraising activities, volunteering and campaigns. For a small number of individuals we may combine the data which you have provided with other publicly available financial, business, philanthropic and demographic information in order to ensure that requests for major gifts are directed to only those who we believe may be able and willing to give Internal analysis and research to determine for example success of our activities
  • To detect and reduce fraud and credit risk
  • To thank you for your support
  • To ensure statutory and regulatory compliance
  • To use for other purposes – but we will notify you about this and obtain your consent

If you do not wish your data to be used in any of the listed ways please let us know at the above address.


We have appropriate technical controls in place to protect your personal data.

Our fundraising platform uses a secure server when you enter into any financial transaction.

Reviews are carried out to establish who has access to information that we hold and to ensure that your information is only accessible by appropriately trained and authorised personnel.

We will keep your data for as long as only necessary for the smooth running of our services. We will take into consideration our legal obligations and tax and accounting rules when determining how long we should retain your information.

When we no longer need to retain your information we will ensure it is securely disposed of, at the appropriate time. In the meantime we ensure appropriate technical controls are in place to safeguard your personal details.

The UCLH Cancer Fund website may include links to other sites, not owned or managed by us. We cannot be held responsible for the privacy of information collected by websites not managed by us.

How we use cookies

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work more efficiently, and sometimes provide useful information to the owners of the site.

There are some cookies necessary to this site functioning, such as interacting with our accessibility toolbar. These cookies will usually remove themselves when you close your browsing session. More information can be found in the ‘Necessary cookies’ section.

We use some additional cookies, such as Google Analytics, to help us gather information and improve the website. You have the option to deny use of these cookies; more information can be found in the ‘Additional cookies’ section.

Cookie Purpose Expiry
cookieconsent_status Persistently records your option regarding additional cookies. 1 year

The following necessary cookies allow the functions within our accessibility toolbar to work optimally.

Cookie Purpose Expiry
accessibility-controls Records option regarding additional cookies. End of browsing session
saveFontSize Allows the website (CMS) to record if the user’s font size selection. End of browsing session
contrast-mode Allows the website (CMS) to record the user’s contrast mode selection. End of browsing session
googtrans Allows the language of page content to be changed and records the language selected. End of browsing session

In order to help us to improve the content, format and structure of this website we record and analyse how visitors use the using Google Analytics.

You can read Google’s extensive information on data practices in Google Analytics.

You can opt-out of Google Analytics on our website by denying additional cookies or by using the Google Analytics Opt-out Browser Add-on.

Cookie Purpose Expiry
_ga Distinguishes user for Google Analytics. 2 years
_gid Distinguishes user for Google Analytics. 1 day
_gat Throttles request rate for Google Analytics. 1 minute
_ga_{ID} Persists session state for newer versions of Google Analytics. 2 years
_gat_gtag_UA_{ID} Persists session state for older versions of Google Analytics. 1 minute
__utma Distinguishes user and session for Google Analytics. 2 years
__utmb Determines new session or visit for Google Analytics 30 minutes
__utmc Determines new session or visit for Google Analytics. End of browsing session
__utmz Stores traffic source for Google Analytics. 6 months