Privacy Policy

Gatton Park (‘we’, ‘us’, ‘our’, etc.) respects people’ right to privacy. This privacy statement informs you about how we collect, use, and disclose personal data about you, while acknowledging both your right to privacy and our need to collect, use, and disclose personal data about you for purposes we believe are reasonable and appropriate in light of our work assisting children and families affected by chronic and life-threatening illnesses.

It applies to all persons (‘you’, ‘your’, etc.) who are our beneficiaries, members of their families, contributors to us, attendees at our public events, our staff, including volunteers, and online visitors of our website at www.gattonpark.com. ‘You’, ‘your’, and similar terms refer to a beneficiary’s parent or parents, a guardian, or another caregiver who is responsible for the beneficiary’s welfare.

If you do not fall into one of these categories but we collect, use, or disclose personal data about you as part of our work, this privacy statement will apply to such personal data in the same manner as it does to the aforementioned persons.

Purpose of collecting, using or disclosing personal data

We acquire personal data from or about our users and potential beneficiaries, as well as their families in each case, as well as from our contributors, workers, volunteers, and other persons. We use and/or disclose that personal data to ensure the efficient and successful provision of our services (as specified on our website) and to comply with our legal requirements.

Collection, use and disclosure of personal data

Except for one exception, we gather personal data directly from you through a variety of methods, including in-person meetings and by requesting that you complete various forms. With the approval of their parent(s), guardian, or other caregiver, we acquire personal data about potential beneficiaries from their doctor.

If at any point you choose to opt out of providing certain personal data that we seek, please notify us. We will then explain why we are collecting the personal data in the first place. If you continue to refuse to submit it, we shall examine whether or not we can proceed without it, which may be impossible.

We gather, use, and share personally identifiable information about you only if:

  • You grant, or are assumed to have given, your permission to our collecting, processing, or disclosing that personal data under the Personal Data Protection Act (PDPA);
  • The collection, use, or disclosure of your personal data by us without your agreement is necessary or authorised by the PDPA or any other applicable written legislation.

When we ask for your consent to collect, use, or disclose personal data about you, we will first inform you of the purpose for which we are collecting, using, or disclosing the data. We shall not use or disclose personal data about you for any new purposes without first telling you and obtaining your agreement to do so (s).

You are presumed to have agreed in some instances to our collecting, processing, or disclosing personal data about you for a specific purpose. For instance, if you pose for a photograph at one of our events or email us your CV when applying for a job with us, you are assumed to have agreed to our collecting, processing, and disclosing the personal data about you included in the photograph (that is, your image).

The PDPA authorises us to collect, use, and disclose personal data about you without your consent in a variety of situations, including the following:

  • If the information is publicly accessible or if it pertains to company contact information
  • If it was supplied to us by another individual in order for us to offer a service for that individual’s personal or domestic reasons
  • In the event of a medical emergency
  • If we do so for the sake of assessment (such as assessing job or volunteering application)
  • Where the disclosure is necessary for law enforcement purposes or when the collection, use, or disclosure is connected to specific legal problems

Please contact our Data Protection Officer if you want further information regarding the instances in which we may collect, use, or disclose personal data without your consent.

When you view our website, we do not collect any information that identifies you.

Withdrawing your consent

You may withdraw any permission you have given, or are considered to have granted, to us collecting, processing, or disclosing personal data about you at any time by providing us with fair notice. Any withdrawal of permission must be communicated in writing (including through email) to our Data Protection Officer.

You may face significant repercussions if you withdraw your permission to our collecting, using, or disclosing personal data about you for any reason. Therefore:

  • We may request you to present identification and
  • We will notify you in writing (which may be by email) of the possible repercussions of withdrawing your permission for the stated purpose.

If you continue to desire to withdraw your consent, we will honour your request and cease collecting, processing, or disclosing personal data, unless doing so without your consent is permitted or authorised by the PDPA or other applicable legislation. Additionally, we shall discontinue collecting, utilising, and disclosing personal data through any and all of our data intermediaries.

Additionally, we shall destroy any documents containing such personal data or any methods by which it may be connected with you as soon as it is reasonable for us to believe that retention is no longer essential for our legal or commercial objectives.

Access to personal data and information about use

On request by you, we shall as soon as practically practicable supply you with:

  • Personal information about you that we have in our custody or control; and
  • Information on how we have used or released the personal data in the year preceding the date of your request.

Your communication with us should be in writing (including email) and addressed to our Data Protection Officer. We may request you to submit identification.

There are some instances in which we are not compelled to give you with information, and others in which the PDPA prohibits us from doing so. We may be able to supply you with limited information in some instances. Our Data Protection Officer can provide you with further information regarding any of these instances.

We reserve the right to charge you a fee for providing you with access to your personal data or information concerning its possible use or disclosure. The charge will represent the additional costs we incur in responding to your request. Our Data Protection Officer can provide you with information regarding the cost.

Correction of errors in, or omissions from, personal data about you

You may request that we fix an error or omission in the personal data we possess or control about you. Your communication with us should be in writing (including email) and addressed to our Data Protection Officer. We may require proof of your identity, as well as documents or other evidence substantiating your request.

There are some cases when we do not make a correction and other conditions where we are not compelled to act on such a request. Our Data Protection Officer can provide you with further information on these scenarios.

Unless we have sufficient grounds to believe that a correction should not be made, we will rectify personal data as quickly as possible. Additionally, we shall provide the rectified personal data to any other organisation to which we gave it within a year of making the change (unless that other organisation does not need the corrected personal data for any legal or business purpose). Alternatively, with your approval, we will communicate rectified personal data to just the organisations with which you have agreed.

Accuracy of personal data

We make reasonable steps to ensure that the personal data we gather about you is accurate and complete if we intend to use it to make an important judgement about you or if we want to disclose it to another organisation.

Personal data protection

We take reasonable precautions to secure the personal data about you that we have in our custody or control from risks such as loss or unauthorised access, deletion, use, alteration, or disclosure. Access to your personal data is restricted to approved persons.

Data retention

We delete documents containing personal data about you as soon as it is reasonable to believe that the purpose for which the data was obtained is no longer fulfilled and that retention is no longer necessary for legal or commercial purposes.

Feedback procedure

We aim for excellence in the services we provide to our beneficiaries and in all of our relationships with donors, workers (including volunteers), and the broader community. This includes our adherence to the PDPA’s requirements.

Kindly send any questions or comments you have regarding how we collect, use, or disclose your personal data to our Data Protection Officer.

We will not respond to anonymous comments due to our inability to investigate it. If you provide feedback anonymously, we will still take note of the issue.

When you submit a comment, our Data Protection Officer will collect adequate information from you to conduct an investigation. Please be prepared to offer information to our Data Protection Officer about, for example:

  • The nature of our behaviour, or lack thereof, that arouses your worry
  • If the occurrence is isolated or ongoing; and, if it is isolated, when it happened.
  • A copy of any pertinent correspondence that you may possess; and
  • Specifics on what you believe should have occurred or should not have occurred

Our Data Protection Officer will analyse your input and notify you within five business days of the following:

  • The disposition of the complaint and the justifications for the disposition; or
  • Tespond to you (perhaps through email) informing you that the Data Protection Officer need further time to examine your complaint and indicating when the Data Protection Officer anticipates resolving it for you.

If a complaint is resolved satisfactorily, our Data Protection Officer is not obligated to notify you in writing of the decision, unless you request a written response (which may be by email).

If a complaint is not resolved completely to your satisfaction, our Data Protection Officer will inform you in writing of the conclusion and the reason(s) for the outcome (which may be by email).

Data Protection Officer

We have designated a Data Protection Officer, who may be reached at the following address. Attention is drawn to “The Data Protection Officer” and,

Please contact us through 

  • Email at info@gattonpark.com
  • Telephone 077 8554 5157
  • Send us a letter to 19 High Street ASHINGTON RH20 9THT

Changes to this privacy policy

We retain the right, at any time and from time to time, to review, alter, and/or update this privacy statement.