Privacy Notice

Macmillan Cancer Support (Jersey) Limited

Last updated: September 2026

At Macmillan Cancer Support Jersey, we are committed to protecting your personal information and being transparent about how and why we use it.

This Privacy Notice explains how Macmillan Cancer Support (Jersey) Limited ("Macmillan Jersey", "we", "us" or "our") collects, uses, stores and shares personal information.

We process personal information in accordance with the Data Protection (Jersey) Law 2018 ("DPJL 2018") and other applicable legislation.

We aim to use your personal information in a fair, lawful and transparent way and only for purposes that you would reasonably expect.

This Privacy Notice applies to personal information collected through our website, when you contact us, when you use our services, when you fundraise or donate for us, when you attend our events, and when you otherwise interact with Macmillan Jersey.

In some circumstances, we may provide additional or more specific privacy information when we collect your information. Where this happens, that information should be read together with this Privacy Notice.

1. Who we are

Macmillan Cancer Support (Jersey) Limited is the data controller responsible for your personal information for the purposes of the Data Protection (Jersey) Law 2018.

Macmillan Cancer Support (Jersey) Limited is a company limited by guarantee (Company No. 104090), a registered Jersey charity (Charity No. 58) and registered NPO (No. 0217).

Our registered address is:

Macmillan Cancer Support (Jersey) Limited
The Oasis
Suite 2.13, The Lido Medical Centre
St Saviour's Road
St Saviour
Jersey
JE2 7LA

If you have any questions about how we use your personal information, or wish to exercise any of your data protection rights, you can contact us on:

Telephone: 01534 498188
Email: admin@macmillanjersey.com

2. What personal information do we collect?

Some of this information, particularly information concerning your health, is special category personal data and receives additional protection under the DPJL 2018.

Contact and identification information

• Name
• Address
• Date of birth
• Telephone number
• Email address
• Preferred method of contact
• Emergency contact details
• Relationship to an emergency contact

Service-user information

• Details about your cancer diagnosis
• Date of diagnosis
• Current or previous treatment
• Consultant or clinical team details
• Referral information
• Information about your support needs
• Information about your wellbeing
• Information about other services you are accessing
• Information required to provide appropriate emotional, practical or wellbeing support
• Information relating to accessibility or communication requirements

Fundraising and supporter information

• Donation information
• Fundraising activity
• Event registration information
• Payment and transaction information
• Communication preferences
• Information about your relationship with Macmillan Jersey

Website and technical information

• IP address
• Browser and device information
• Website usage information
• Cookie and similar technology information
• Information about how you interact with our website

The information we collect depends on how you interact with Macmillan Jersey.

This may include:

3. Where do we collect your information from?

We may collect personal information directly from you, for example when you:

• Contact us by telephone, email, online form or in person
• Register for our services
• Attend an appointment or support session
• Register for an event
• Make a donation
• Fundraise for Macmillan Jersey
• Subscribe to communications
• Complete a survey or feedback form
• Use our website

We may also receive information from other people or organisations where this is necessary and lawful.

For example, in relation to our support services, information may be provided by:

• Healthcare professionals
• Hospitals or healthcare services
• GPs or GP practices
• Clinical teams
• Other professionals involved in your care or support
• Family members, friends or representatives where appropriate
• Other organisations involved in providing support to you

Where we receive personal information about you from another source, we will use it in accordance with applicable data protection law and this Privacy Notice.

4. How do we use your personal information?

Where appropriate, we may also ask for your consent to send optional communications about Macmillan Jersey, including news, fundraising activities and other updates. You can withdraw consent to optional communications at any time.

Research, analysis and service improvement

We may use information to understand how our services are being used, identify trends, evaluate our performance and improve our services.

Where possible, information used for statistical or analytical purposes will be anonymised or otherwise appropriately protected so that individuals are not identified.

Where research involves identifiable personal information, we will ensure that an appropriate lawful basis and any additional requirements under the DPJL 2018 are met.

Providing our support services

• Understand your circumstances and support needs
• Register you with our services
• Provide appropriate emotional, practical and wellbeing support
• Coordinate support where appropriate
• Communicate with you about your support and appointments
• Make reasonable adjustments to enable you to access our services
• Maintain appropriate records of the support provided
• Monitor and improve the quality of our services
• Respond appropriately to safeguarding or emergency situations
• Meet our legal and regulatory responsibilities

Fundraising and supporter management

• Process donations
• Administer fundraising activities
• Register you for events
• Manage supporter relationships
• Process Gift Aid where applicable
• Provide receipts and acknowledgements
• Thank and recognise supporters
• Administer regular giving arrangements
• Keep appropriate financial and accounting records

Communications

• Services you are using
• Appointments or arrangements
• Events you have registered for
• Donations or fundraising activities
• Changes to services
• Other information necessary to manage our relationship with you

Administration and legal purposes

• Maintain accurate records
• Manage complaints and feedback
• Investigate incidents
• Respond to legal claims
• Meet accounting and financial requirements
• Comply with legal and regulatory obligations
• Protect the rights, safety and wellbeing of individuals
• Prevent or detect fraud or other unlawful activity
• Defend or establish legal claims

We use personal information for different purposes depending on our relationship with you.

5. Our lawful bases for processing

Macmillan Jersey will only process your personal information where we have a lawful basis to do so.

Not all processing is based on consent.

Depending on the circumstances, we may process personal information because:

• You have given your consent for a specific purpose;
• Processing is necessary to provide a service or take steps at your request;
• We have a legal or regulatory obligation;
• Processing is necessary to protect someone's vital interests;
• Processing is necessary for a public task where the relevant legal conditions apply; or
• Processing is necessary for our legitimate interests, where those interests are not overridden by your rights and interests.

The lawful basis we rely upon will depend on the particular processing activity.

Where we rely on legitimate interests, we will consider the impact of the processing on individuals and whether those interests are appropriately balanced against their rights and freedoms.

We will not ask for your consent where consent is not the appropriate lawful basis for the processing.

6. Health and other special category information

Some information we process is considered special category personal data under the DPJL 2018.

This may include information concerning:

• Your health
• Racial or ethnic origin
• Religious or philosophical beliefs
• Sexual orientation or sex life
• Genetic or biometric information where applicable
• Criminal record information where applicable

For Macmillan Jersey, health information is particularly relevant to the delivery and coordination of our support services.

Special category information receives additional protection under the DPJL 2018. We will only process this information where an appropriate condition under the DPJL 2018 applies in addition to a lawful basis for processing ordinary personal data.

Where we rely on explicit consent for a particular processing activity involving special category information, we will make this clear to you and explain what you are consenting to.

You may withdraw consent where consent is the basis relied upon. Withdrawal of consent does not affect processing that we are otherwise permitted or required to undertake under the law.

7. Sharing your information

We do not sell or rent your personal information.

We may share relevant personal information with other organisations or professionals where there is a lawful basis to do so and where sharing is necessary and proportionate.

Depending on the circumstances, this may include:

• Healthcare professionals
• GPs and GP practices
• Hospitals and healthcare services
• Clinical teams
• Counselling or psychological support providers
• Hospice services
• Other charitable or voluntary-sector support organisations
• Professionals involved in your care or support
• Organisations providing services on our behalf
• IT, software, payment, communication and other service providers
• Professional advisers, such as legal or financial advisers
• Regulators or public authorities where required or permitted by law
• Emergency services or other relevant organisations where necessary to protect someone from serious harm

Where we ask for your consent to share information, we will explain, where appropriate:

• What information will be shared;
• Who it will be shared with; and
• Why it needs to be shared.

Where health or other special category information is involved and consent is the condition relied upon, we will seek explicit consent where required.

There may also be circumstances where we are permitted or required to share information without consent, for example where necessary to comply with a legal obligation, protect vital interests, meet safeguarding responsibilities, or otherwise where the law permits or requires disclosure.

8. Organisations that process information on our behalf

We use a number of third-party organisations and technology providers to help us operate our services and charity.

These organisations may process personal information on our behalf and may include providers of:

• Website hosting and management
• IT and cloud storage
• Email and communications
• Customer or supporter relationship management systems
• Service-user record systems
• Event registration and ticketing
• Payment processing
• Donation and fundraising platforms
• Accounting and financial systems
• Data analysis and reporting services
• Room or appointment booking systems

Where a third party processes personal information on our behalf, we will take appropriate steps to ensure that it processes information in accordance with applicable data protection requirements and our instructions.

Some providers may operate outside Jersey. Where personal information is transferred outside Jersey, we will comply with the requirements of the DPJL 2018 concerning international transfers and ensure that appropriate safeguards are in place where required.

9. How long do we keep your information?

We will keep your personal information only for as long as is reasonably necessary for the purposes for which it was collected.

The length of time we retain information will depend on:

• The type of information;
• Why we collected it;
• Whether you continue to use our services;
• Our legal, regulatory and accounting obligations;
• Whether we need the information to establish, exercise or defend legal claims;
• Our safeguarding responsibilities; and
• Any applicable retention schedule or organisational requirement.

Different categories of information may therefore be retained for different periods.

Where information is no longer required, we will securely delete, destroy or anonymise it in accordance with our retention procedures.

10. Data security

We take appropriate technical and organisational measures to protect personal information against unauthorised or unlawful processing and against accidental loss, destruction or damage.

These measures may include:

• Access controls
• Password protection
• Multi-factor authentication where available
• Appropriate staff access permissions
• Secure systems and storage
• Staff data protection training
• Physical security measures
• Procedures for identifying and responding to data protection incidents

Access to personal information is limited to people who have a legitimate reason to access it.

No method of storing or transmitting information can be guaranteed to be completely secure. However, we regularly review our security arrangements and take appropriate steps to protect the information we hold.

11. Cookies and website technologies

Our website may use cookies and similar technologies.

Some cookies are necessary for the website to operate correctly. Other cookies may be used to understand how visitors use our website, improve its performance or remember preferences.

Where consent is required for non-essential cookies, we will provide an appropriate mechanism for you to accept or decline them.

You can also control cookies through your browser settings, although disabling certain cookies may affect how the website functions.

Our website may use third-party services such as analytics providers. The specific cookies and technologies used on the website may change from time to time.

We will keep our cookie information under review and update it when necessary.

12. Direct communications and marketing

We may contact you where this is necessary to provide or manage a service you have requested or are using.

We may also contact supporters and other individuals with optional communications about Macmillan Jersey where we have an appropriate lawful basis to do so.

Where we rely on consent, we will make this clear and you can withdraw your consent at any time.

You can contact us using the details at the end of this notice if you wish to change your communication preferences.

13. Your data protection rights

Under the Data Protection (Jersey) Law 2018, you have a number of rights in relation to your personal information, although these rights are subject to certain conditions and exemptions.

Depending on the circumstances, these may include the right to:

1. Be informed about how your personal information is collected and used;
2. Access personal information we hold about you;
3. Rectify inaccurate or incomplete personal information;
4. Request erasure of your personal information in certain circumstances;
5. Restrict processing in certain circumstances;
6. Object to certain processing, including certain processing based on legitimate interests;
7. Data portability in certain circumstances;
8. Withdraw consent where we are relying on consent as our lawful basis; and
9. Rights relating to automated decision-making and profiling, where applicable.

These rights are not absolute and there are circumstances where the law allows or requires us to continue processing information despite a request.

For example, we may need to retain certain information to comply with legal obligations, protect someone's vital interests, establish or defend legal claims, or meet safeguarding responsibilities.

14. How to exercise your rights

If you would like to exercise any of your data protection rights, or have a question about how we use your personal information, please contact us:

Macmillan Cancer Support (Jersey) Limited
The Oasis
Suite 2.13, The Lido Medical Centre
St Saviour's Road
St Saviour
Jersey
JE2 7LA

Telephone: 01534 498188
Email: admin@macmillanjersey.com

We may need to verify your identity before responding to certain requests.

We will normally respond to requests within the timeframe required by the DPJL 2018.

15. Complaints and concerns

If you have concerns about the way Macmillan Jersey has handled your personal information, we encourage you to contact us first so that we have an opportunity to investigate and resolve your concern.

You also have the right to raise a concern or make a complaint with the Jersey Office of the Information Commissioner (JOIC).

Jersey Office of the Information Commissioner
2nd Floor
5 Castle Street
St Helier
Jersey
JE2 3BT

Telephone: +44 (0)1534 716530
Email: enquiries@jerseyoic.org

16. Automated decision-making and profiling

Macmillan Jersey does not currently use personal information to make decisions about individuals based solely on automated processing where those decisions have a legal or similarly significant effect on them.

If this changes, we will provide appropriate information about the processing and the rights available to individuals before such processing takes place.

17. Changes to this Privacy Notice

We keep this Privacy Notice under regular review.

We may update it from time to time to reflect changes to our services, technology, legal requirements or the way we process personal information.

Where changes are significant, we will take appropriate steps to bring them to your attention.

The date at the top of this notice shows when it was last updated.

18. Further information

If you would like this Privacy Notice provided in an alternative format, require a paper copy, or would like someone to explain it to you, please contact a member of the Macmillan Jersey team using the contact details above.

Macmillan Cancer Support (Jersey) Limited
Jersey Office of the Information Commissioner Registration No. 62962

Last updated: September 2026