Types of Personal Information Collected
To support you with the services provided, SEKPA collects only the minimum Personal Information required. These are the types of information collected:
1.1 Information you provide SEKPA
When you apply to become a member of SEKPA or to be added to its mailing list, you may provide us with contact details, such as name, postal address, email address and phone number. In providing us with this information, you are giving consent for it to be used by SEKPA. Sharing this information with the National Kidney Federation is an option, which you may refuse.
1.2 Information collected when you use SEKPA’s services
When you visit the SEKPA website or communicate with SEKPA, you may provide us with contact details, such as name, postal address, email address and phone number.
2. The Reason such Personal Information is Collected
Your Personal Information is used solely to communicate with you. SEKPA has no commercial interest in any of the information.
3. Sharing such Personal Information
SEKPA provides all its members regular copies of the SEKPA Newsletter and, if agreed by you, the NKF (National Kidney Federation) magazine. In order to provide this service, your postal address will be sent to the printers of the SEKPA Newsletter and to the NKF.
4. How your Personal Information is stored Securely
The storage and processing of Personal Information conforms to the General Data Protection Regulations (GDPR) that came into force in May 2018. Under the GDPR, all organisations, including the South Eastern Kidney Patients Association (SEKPA), are allowed to collect and use personal data where they have a legitimate reason in doing so.
Personal Information is handled securely by use of Protonmail.com, an encrypted email system, as follows:
Membership Application forms are sent to firstname.lastname@example.org. Protonmail is encrypted and all the attachments to emails are encrypted, hence the members contact details are kept in a secure store
The contact details are entered into an Excel spreadsheet (Membership Database). This is then sent as an email attachment to email@example.com and the copy on the computer is deleted
When postal addresses are sent to the Newsletter printers, they consist of a minimal version of the Membership Database that is sent by Protonmail with a time-limited password
Similarly, when postal addresses are sent to the NKF for them to post magazines, they are similarly password protected.
All the above processes may be demonstrated as evidence of compliance with the GDPR.
5. Deletion of Personal Information
A member or user may request their Personal Information to be deleted from the SEKPA records at any time by either:
Or writing to: SEKPA, Sussex Kidney Unit,
Royal Sussex County Hospital,
Brighton BN2 5BE