Privacy Notice
No.11 Cavendish Square is run by KEHF Limited, a wholly owned trading subsidiary of The King's Fund.
The King's Fund Privacy Notice
This Privacy Notice explains how The King's Fund (‘we’, ‘us’, ‘our’) collects, uses and discloses your personal data, and your rights in relation to the personal data we hold.
The King's Fund (registered charity number 1126980 and with registered office at 11-13 Cavendish Square, London W1G 0AN) will generally be the controller of your personal data. However, in certain limited circumstances, The King's Fund's wholly owned trading subsidiary, KEHF Limited, will be the controller of your personal data – please see the relevant section below for more information.
Information we may collect about you
We may collect certain information or data about you in various ways. The main circumstances we do so are as set below.
- When you submit enquiries or feedback through one of our website forms, leave a comment or sign up for email newsletters, or book a place at a The King's Fund event (via our third party booking platform EventBrite) we may collect your name, email address, telephone number and other information.
- When you apply for our courses or awards, eg, Athena programme or GSK IMPACT Awards we may collect your name, email address, role, organisation and other information.
When you use our website we will collect:
- your IP address, and details of web browser and which version of it you used
information on how you use our website, using cookies, that will help us improve the website
details of transactions you carry out through our website and of the fulfilment of your orders. - When you contact us directly, we may keep a record of that correspondence.
- When you participate in any of our research projects we may collect your name, contact and other details.
- When you attend a course, conference or award ceremony we may collect images of you in films or photographs or, in respect of contributions you may make, audio recordings.
Keeping your personal information safe
We have technical and organisational measures in place to keep your data secure once we receive it. These protective measures may include pseudonymising and encrypting personal data, firewalls, anti-virus and malware software, holding personal data in secure, confidential storage, and regularly assessing and evaluating the effectiveness of such measures.
Online payment transactions are always encrypted. The King’s Fund is PCI DSS compliant.
Transfer and processing of your personal data outside the European Economic Area (EEA)
When sharing personal data with third parties as set out in this Privacy Notice, it may be transferred outside the EEA. In these circumstances, your personal data will only be transferred on one of the following bases:
- the country that we send the personal data to is approved by the European Commission as providing an adequate level of protection for personal data
- the transfer is to a recipient in the US who has registered under the EU/US Privacy Shield
- the recipient has entered into European Commission standard contractual clauses with us
- you have explicitly consented to the same.
To find out more about the transfers by us of your personal data outside the EEA and the countries concerned please contact us using the details below.
How do we use your personal information?
We may use your personal information:
- to provide you with information, products or services that you request from us, or to process your booking in relation to an event or course we are organising
- to make you aware of related products and services (but only with your consent where required)
- to notify you of any changes to our services or products
- to assist with any contractual obligations between us
- to administer a research project or programme you participate in
- to administer any courses or awards that you participate in, eg, Athena programme, GSK IMPACT Awards
- to provide a record of, or to promote and market a course, conference or award using images and film taken on the day.
The basis for processing your personal information
Products and services
We need to process your personal data when we provide you with information, products and services that you have requested from us. We do so because it is necessary for our legitimate interests and/or because it is necessary for the performance of a contract to which you are a party or in order to take steps at your request before entering into a contract.
Marketing
When we send marketing communications to you at a business email address, we do so because it is necessary for our legitimate interests. Our legitimate interests include disseminating our independent research and analysis, as well as highlighting relevant courses and conferences, in order to fulfil our vision to improve health and care in England. You can request that we stop sending you marketing communications at any time (see 'Your Rights' below).
In respect of personal email addresses, we will only send you marketing with your explicit consent and you can opt out at any time.
Organisational development(OD)
We may need to process your personal data when we partner with your organisation during OD work. This is necessary for the performance of a contract to which you are a party or in order to take steps at your request before entering into a contract.
Personal data gathered from publicly available sources
We gather limited personal data from publicly available sources (such as announcements about job moves in the health sector) so that we can contact individuals who we think will be interested in our events or publications. We do so in connection with our legitimate interests as referred to above under 'Marketing'.
Research
If you participate in research into health and care that we conduct (for example, in relation to the management of health policy / services), we may need to collect and process your personal information. We do so because it is necessary for our legitimate interests in pursuing research into the health and care sector. However, we follow ethical guidelines when conducting research and will always keep you informed of your rights.
We may also collect health data from organisations, eg, NHS Digital, when we conduct research. However, this data is pseudonymised. This means that a person’s identity cannot be seen unless other information is available – known as a ‘key’. This ‘key’ is stored by the organisation we have collected the data from and cannot be accessed by The King’s Fund.
Filming and photography at events
We (or a third party) sometimes carry out filming (including audio recordings) or photography at events as part of our publicity/marketing output. We do so because it is necessary for our legitimate interests in promoting and disseminating our work. We make delegates aware of this in advance in the information pack provided and in signage at the event.
Other bases for processing
We may need to process your personal data for compliance with our legal obligations, including where it is necessary for the prevention and detection of crime, or for the establishment, exercise or defence of legal claims (for example, to protect and defend our rights or property).
Sharing your information with others
For the purposes referred to in this Privacy Notice and relying on the bases for processing as set out above, we may share your personal data with certain third parties. We may disclose limited personal data to a variety of recipients including:
- our employees, agents and contractors where there is a legitimate reason for their receiving the information
- KEHF Limited, our wholly owned trading company via which we manage certain commercial activity related to our charitable activities (please see further below for more information)
- our Corporate Partners, if we hold an event they are supporting (and in respect of which we disclose details of who is attending that particular event)
- internal and external auditors and our legal advisers
- when The King's Fund is legally required to do so (eg, by a court, government body, law enforcement agency or other authority of competent jurisdiction), for example, by HM Revenue and Customs.
We often work with third parties to help us provide our services and products to you. For example, if you wanted to attend one of our events we use a third party called EventBrite to manage the booking on our behalf.
We have contracts in place with all our third parties to make sure they protect and respect your information with the same commitment as we do. For further information please contact us using the details below.
How long will we keep your personal information?
We will retain your personal data no longer than is necessary for the purposes for which the personal data are processed. This purpose is set out in the ’How do we use your personal information?’ section above. For example, it may be kept for the duration of a service or product you receive from us or as part of our legal obligations.
Your rights
Under data protection legislation you have several rights concerning your personal data. These are:
- the right to be informed what personal data we hold about you and/or to obtain access to it
- the right to rectification of personal data we hold about you if it is inaccurate
- the right to erasure of your personal data (in certain circumstances)
- the right to restrict processing (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal)
- the right to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller
- the right to object on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights.
Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply: for example, if we have reason to believe the personal data we hold is accurate or we can show our processing is necessary for a lawful purpose set out in this notice.
Please note that where our processing of your personal data relies on your consent and where you then withdraw that consent, we may not be able to provide all or some aspects of our services to you and/or it may affect the provision of those services. If you have given your consent and you wish to withdraw it, please contact us using the contact details as set out below.
You can find out more about your rights under data protection legislation at www.ico.org.uk If you are not satisfied with how we are processing your personal data, you can make a complaint to the Information Commissioner.
KEHF Limited
KEHF Limited (‘KEHF’) (registered company number 02754697 and with registered office at 11-13 Cavendish Square, London W1G 0AN) is the wholly owned trading subsidiary of The King's Fund and runs the venue hire business 11 Cavendish Square.
KEHF will collect personal data relating to venue hire bookings (for example, the hirer's name and contact information) because it is necessary for the performance of a contract or to take steps at the hirer's request before entering into a contract.
Where the individual making the booking is doing so in a business/work context (ie, using a business email address) KEHF collects that information for marketing purposes, to be able to send details of offers or other services because it is necessary for KEHF's legitimate interests in promoting its business. KEHF will always provide the option to opt out of receiving such communications. Where the individual provides a personal email address, KEHF will only send marketing communications with their consent (and always with the option to opt out at any stage).
If the hirer provides KEHF with any health-related information of attendees (for example, allergy information or particular dietary requirements) KEHF processes this information on the basis of consent for the event in question and for the purpose of protecting the wellbeing of such attendees.
Please see the 'Your rights' section above, which also applies in respect of KEHF, and you can contact us via the details below if you have any queries.
Contact us
Our data protection lead is the Business Information Manager, Tim Judkins. If you have any questions about how we use your personal data, or you wish to exercise any of the rights set out above, you can contact us at: dataprotection@kingsfund.org.uk
Cookies
No.11 Cavendish Square place Cookies on your device to enable this site to work, to enhance your user experience and to improve our services. Some cookies we use are necessary for the site to work, while others are non-essential and used to help us manage and improve the site and the services we offer you.
Google Analytics
We use Google Analytics software to collect information about how you use 11cavendishsq.com. We do this to help make sure the site is meeting the needs of its users and to help us make improvements.
Google Analytics stores information about:
- the pages you visit on 11cavendishsq.com
- how long you spend on each 11cavendishsq.com page
- how you got to the site
- what you click on while you’re visiting the site.
We don’t allow Google to use or share our analytics data.
Cookie Policy