Gatton Park (‘we’, ‘us’, ‘our’, etc.) respects people’ right to privacy. This privacy statement informs you about how we collect, use, and disclose personal data about you, while acknowledging both your right to privacy and our need to collect, use, and disclose personal data about you for purposes we believe are reasonable and appropriate in light of our work assisting children and families affected by chronic and life-threatening illnesses.
It applies to all persons (‘you’, ‘your’, etc.) who are our beneficiaries, members of their families, contributors to us, attendees at our public events, our staff, including volunteers, and online visitors of our website at www.gattonpark.com. ‘You’, ‘your’, and similar terms refer to a beneficiary’s parent or parents, a guardian, or another caregiver who is responsible for the beneficiary’s welfare.
If you do not fall into one of these categories but we collect, use, or disclose personal data about you as part of our work, this privacy statement will apply to such personal data in the same manner as it does to the aforementioned persons.
We acquire personal data from or about our users and potential beneficiaries, as well as their families in each case, as well as from our contributors, workers, volunteers, and other persons. We use and/or disclose that personal data to ensure the efficient and successful provision of our services (as specified on our website) and to comply with our legal requirements.
Except for one exception, we gather personal data directly from you through a variety of methods, including in-person meetings and by requesting that you complete various forms. With the approval of their parent(s), guardian, or other caregiver, we acquire personal data about potential beneficiaries from their doctor.
If at any point you choose to opt out of providing certain personal data that we seek, please notify us. We will then explain why we are collecting the personal data in the first place. If you continue to refuse to submit it, we shall examine whether or not we can proceed without it, which may be impossible.
We gather, use, and share personally identifiable information about you only if:
When we ask for your consent to collect, use, or disclose personal data about you, we will first inform you of the purpose for which we are collecting, using, or disclosing the data. We shall not use or disclose personal data about you for any new purposes without first telling you and obtaining your agreement to do so (s).
You are presumed to have agreed in some instances to our collecting, processing, or disclosing personal data about you for a specific purpose. For instance, if you pose for a photograph at one of our events or email us your CV when applying for a job with us, you are assumed to have agreed to our collecting, processing, and disclosing the personal data about you included in the photograph (that is, your image).
The PDPA authorises us to collect, use, and disclose personal data about you without your consent in a variety of situations, including the following:
Please contact our Data Protection Officer if you want further information regarding the instances in which we may collect, use, or disclose personal data without your consent.
When you view our website, we do not collect any information that identifies you.
You may withdraw any permission you have given, or are considered to have granted, to us collecting, processing, or disclosing personal data about you at any time by providing us with fair notice. Any withdrawal of permission must be communicated in writing (including through email) to our Data Protection Officer.
You may face significant repercussions if you withdraw your permission to our collecting, using, or disclosing personal data about you for any reason. Therefore:
If you continue to desire to withdraw your consent, we will honour your request and cease collecting, processing, or disclosing personal data, unless doing so without your consent is permitted or authorised by the PDPA or other applicable legislation. Additionally, we shall discontinue collecting, utilising, and disclosing personal data through any and all of our data intermediaries.
Additionally, we shall destroy any documents containing such personal data or any methods by which it may be connected with you as soon as it is reasonable for us to believe that retention is no longer essential for our legal or commercial objectives.
On request by you, we shall as soon as practically practicable supply you with:
Your communication with us should be in writing (including email) and addressed to our Data Protection Officer. We may request you to submit identification.
There are some instances in which we are not compelled to give you with information, and others in which the PDPA prohibits us from doing so. We may be able to supply you with limited information in some instances. Our Data Protection Officer can provide you with further information regarding any of these instances.
We reserve the right to charge you a fee for providing you with access to your personal data or information concerning its possible use or disclosure. The charge will represent the additional costs we incur in responding to your request. Our Data Protection Officer can provide you with information regarding the cost.
You may request that we fix an error or omission in the personal data we possess or control about you. Your communication with us should be in writing (including email) and addressed to our Data Protection Officer. We may require proof of your identity, as well as documents or other evidence substantiating your request.
There are some cases when we do not make a correction and other conditions where we are not compelled to act on such a request. Our Data Protection Officer can provide you with further information on these scenarios.
Unless we have sufficient grounds to believe that a correction should not be made, we will rectify personal data as quickly as possible. Additionally, we shall provide the rectified personal data to any other organisation to which we gave it within a year of making the change (unless that other organisation does not need the corrected personal data for any legal or business purpose). Alternatively, with your approval, we will communicate rectified personal data to just the organisations with which you have agreed.
We make reasonable steps to ensure that the personal data we gather about you is accurate and complete if we intend to use it to make an important judgement about you or if we want to disclose it to another organisation.
We take reasonable precautions to secure the personal data about you that we have in our custody or control from risks such as loss or unauthorised access, deletion, use, alteration, or disclosure. Access to your personal data is restricted to approved persons.
We delete documents containing personal data about you as soon as it is reasonable to believe that the purpose for which the data was obtained is no longer fulfilled and that retention is no longer necessary for legal or commercial purposes.
We aim for excellence in the services we provide to our beneficiaries and in all of our relationships with donors, workers (including volunteers), and the broader community. This includes our adherence to the PDPA’s requirements.
Kindly send any questions or comments you have regarding how we collect, use, or disclose your personal data to our Data Protection Officer.
We will not respond to anonymous comments due to our inability to investigate it. If you provide feedback anonymously, we will still take note of the issue.
When you submit a comment, our Data Protection Officer will collect adequate information from you to conduct an investigation. Please be prepared to offer information to our Data Protection Officer about, for example:
Our Data Protection Officer will analyse your input and notify you within five business days of the following:
If a complaint is resolved satisfactorily, our Data Protection Officer is not obligated to notify you in writing of the decision, unless you request a written response (which may be by email).
If a complaint is not resolved completely to your satisfaction, our Data Protection Officer will inform you in writing of the conclusion and the reason(s) for the outcome (which may be by email).
We have designated a Data Protection Officer, who may be reached at the following address. Attention is drawn to “The Data Protection Officer” and,
Please contact us through
We retain the right, at any time and from time to time, to review, alter, and/or update this privacy statement.