Our privacy statement
We cannot carry out our lifesaving research without your help. Whether you give financially, support our campaigns, carry out research or volunteer your time, your support is vital to our success.
It is important for you and for us that we protect your privacy. Kidney Research UK is committed to protecting your privacy. This statement outlines how we comply with data protection legislation, including: Data Protection Act 2018 (DPA 2018), the UK General Data Protection Regulation (UK GDPR), and the Privacy and Electronic Communications Regulations (PECR).
Whenever you interact with us, be it through post, email, telephone, our website, face-to-face interactions, or via social media, or third parties, we may collect data and information about you. This might include:
- Your first name, surname, and title.
- Contact details: Your address, telephone number/s, and email address.
- Payment details, including card or bank information for direct debits or transfers.
- Other information depending on the type of interaction such as health data or ethnic information.
- Your photograph.
We may collect or update your personal data for various reasons, including:
- To keep you updated about our work and opportunities to support us further.
- If you ask us for information or updates.
- If you register an interest or participate in any of our events or fundraising activities.
- If you make a donation whether one-off or regular.
- If you apply for a job or a volunteer role within our charity.
- If you apply for research or other types of grants.
- If you are a patient participating in any of our research projects.
- If you would like to suggest, complain, or provide other types of feedback, we will respond unless you ask us not to.
Cookies are small data files stored on your computer when you visit our website. They help us understand how you interact with the site and improve your experience.
We use cookies to gather statistical information, to remember your settings and preferences, and to monitor and improve website security.
You can choose to disable cookies in your browser settings.
If you would like to find out more about cookies and their use on the internet, you may find the following links useful:
Change your cookie preferences:
This table sets out the cookies used on this website and what they are used for:
| Cookie | Duration | Description |
|---|---|---|
| __cf_bm | 1 hour | This cookie, set by Cloudflare, is used to support Cloudflare Bot Management. |
| wt_consent | 1 year | The WebToffee GDPR Cookie Consent plugin sets this cookie to store the user’s consent preferences, allowing the website to recognise those choices on future visits. The cookie does not collect or store any personal or identifiable information about the visitor. |
| rc::a | never | This cookie is set by the Google recaptcha service to identify bots to protect the website against malicious spam attacks. |
| rc::c | session | This cookie is set by the Google recaptcha service to identify bots to protect the website against malicious spam attacks. |
| ASP.NET_SessionId | session | Issued by Microsoft's ASP.NET Application, this cookie stores session data during a user's website visit. |
| AWSELB | session | Associated with Amazon Web Services and created by Elastic Load Balancing, AWSELB cookie is used to manage sticky sessions across production servers. |
| VISITOR_PRIVACY_METADATA | 6 months | YouTube sets this cookie to store the user's cookie consent state for the current domain. |
| __RequestVerificationToken | session | This cookie is set by web application built in ASP.NET MVC Technologies. This is an anti-forgery cookie used for preventing cross site request forgery attacks. |
| swpext86386 | 7 days | A cookie used to anonymously track search-related activity on the website |
| VISITOR_INFO1_LIVE | 6 months | A cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface. |
| yt-remote-connected-devices | never | YouTube sets this cookie to store the user's video preferences using embedded YouTube videos. |
| ytidb::LAST_RESULT_ENTRY_KEY | never | The cookie ytidb::LAST_RESULT_ENTRY_KEY is used by YouTube to store the last search result entry that was clicked by the user. This information is used to improve the user experience by providing more relevant search results in the future. |
| yt-remote-device-id | never | YouTube sets this cookie to store the user's video preferences using embedded YouTube videos. |
| yt-remote-session-name | session | The yt-remote-session-name cookie is used by YouTube to store the user's video player preferences using embedded YouTube video. |
| yt-remote-fast-check-period | session | The yt-remote-fast-check-period cookie is used by YouTube to store the user's video player preferences for embedded YouTube videos. |
| yt-remote-session-app | session | The yt-remote-session-app cookie is used by YouTube to store user preferences and information about the interface of the embedded YouTube video player. |
| yt-remote-cast-available | session | The yt-remote-cast-available cookie is used to store the user's preferences regarding whether casting is available on their YouTube video player. |
| yt-remote-cast-installed | session | The yt-remote-cast-installed cookie is used to store the user's video player preferences using embedded YouTube video. |
| _ga | 1 year 1 month 4 days | Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors. |
| _ga_* | 1 year 1 month 4 days | Google Analytics sets this cookie to store and count page views. |
| YSC | session | YSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages. |
| SM | session | Microsoft Clarity cookie set this cookie for synchronizing the MUID across Microsoft domains. |
| MR | 7 days | This cookie, set by Bing, is used to collect user information for analytics purposes. |
| AWSELBCORS | 1 hour | This cookie is used by Elastic Load Balancing from Amazon Web Services to effectively balance load on the servers. |
| _gcl_au | 3 months | Google Tag Manager sets this cookie to experiment advertisement efficiency of websites using their services. |
| test_cookie | 15 minutes | doubleclick.net sets this cookie to determine if the user's browser supports cookies. |
| IDE | 1 year 24 days | Google DoubleClick IDE cookies store information about how the user uses the website to present them with relevant ads according to the user profile. |
| yt.innertube::nextId | never | YouTube sets this cookie to register a unique ID to store data on what videos from YouTube the user has seen. |
| yt.innertube::requests | never | YouTube sets this cookie to register a unique ID to store data on what videos from YouTube the user has seen. |
| MUID | 1 year 24 days | Bing sets this cookie to recognise unique web browsers visiting Microsoft sites. This cookie is used for advertising, site analytics, and other operations. |
| ANONCHK | 10 minutes | The ANONCHK cookie, set by Bing, is used to store a user's session ID and verify ads' clicks on the Bing search engine. The cookie helps in reporting and personalization as well. |
| SRM_B | 1 year 24 days | Used by Microsoft Advertising as a unique ID for visitors. |
| NSC_QH-PMY | session | No description available. |
| __Secure-ROLLOUT_TOKEN | 6 months | This cookie is used by YouTube and other Google services to manage feature rollouts and experiments, ensuring that users see consistent versions of the platform during testing. |
| __Secure-YEC | past | This is a security cookie used by YouTube to detect and prevent spam, fraudulent activity, and abuse on YouTube and other Google services. |
| pp_modal_bt0yvqx6hz3o | 1 day | Description is currently not available. |
| __Secure-YNID | 6 months | Description is currently not available. |
| FormsWebSessionId | 1 month | Description is currently not available. |
| msal.cache.encryption | session | Description is currently not available. |
We process your personal data for specific purposes, which may include:
- Fundraising and campaigns
- Event organisation
- Financial transactions
We strive to keep all the information accurate and up to date, ensuring that we only collect data relevant to our interactions with you.
- We might contact you by phone for marketing purposes if we have an existing relationship with you, you can opt-out of this at anytime and we will stop, we will make sure opting out is a clear and easy process to follow.
- We might email you or send you an SMS in relation to admin or information regarding something you are already involved in with us.
- We might contact you by email or SMS for marketing purposes if we have consent from you to do so.
We will not communicate any unsolicited marketing material to you by email or SMS without your prior consent. This consent can be withdrawn at any time and will always be an opt-in.
We mainly rely on Legitimate Interest. We conduct a Legitimate Interest Assessment that considers what we want to achieve, whether we need to process and store your data, and ensures that we use your data legally, transparently and fairly.
If we can’t rely on Legitimate Interest, such as most incidences of direct marketing we will ask you for your Consent. This includes asking for explicit consent for processing medical and health information, other special category or sensitive data and any information belonging to children or where you have consented to hear form us.
There are some instances where we might use another lawful basis, these will be limited to:
- Legal obligation: we adhere to legal requirements such as tax and employment regulations.
- Contractual obligation: our contracts include data protection clauses to ensure compliance with regulations.
- Vital interest: we may process data when it is crucial for your well-being.
- Public interest: very occasionally, data may be processed for tasks carried out in the public interest.
The right to lodge a complaint with a supervisory authority. Right to lodge a complaint: You can do this if you are not happy with how we are handling your data.
You have specific rights under data protection laws. These include:
- Right to be informed: We'll tell you how we plan to use your data when we collect it.
- Right of access: We are always happy to tell you what information we hold on you.
- Right to rectification: We want to keep your data accurate, if you believe it isn’t, please let us know and we will correct it.
- Right to erasure: If there's no good reason for us to keep your data and you want us to delete it, we will.
- Right to restrict processing: If you want us to stop using your data in certain ways, you can ask us and unless there is good reason for us not to, we will.
- Right to data portability: We can provide you with your data in a standard format, we can also send this to a different data controller on your request.
- Right to object: We only seek to use your data in accordance with your wishes, you can object to us processing or storing your data at any time.
- Automated decision-making and profiling: We will only make decisions that may affect you using humans.
- Right to lodge a complaint: You can do this if you are not happy with how we are handling your data.
- Right to withdraw consent: Where you have previously given us your consent, you can take this back at any time.
Most requests will be processed within one month. More complex requests may take longer however we will inform you in accordance with ICO guidelines.
We keep all personal data in a highly secure physical or IT environment to protect the confidentiality, integrity, and availability of your personal data.
We do not transfer data outside of the UK without adequate protections in place.
Personal data is stored only for as long as we need it, in accordance with our Retention Policy.
View our retention schedule.
This privacy statement is reviewed and updated regularly. The latest version will always be available on our website.
Any disputes regarding this privacy statement will be resolved under the laws of the United Kingdom.
Email: supportercare@kidneyresearchuk.org
Phone: 0300 303 1100
Post: Stuart House, City Road, Peterborough, PE1 1QF
Privacy statement for children
What’s this about?
It’s about anything that lets people know who you are. Things like:
- your name
- where you live
- your photograph
- where you go to school
- anything about your health
This stuff is personal, which means it belongs to you. We can only use it if it’s in your best interest, and if the people who look after you agree.
Your information is powerful
Sometimes we use it to teach people about kidney disease.
Sometimes we use it to encourage people to give us money, because that’s how we pay for scientific research.
Sometimes, scientists will use your information in their research. This is how we fight kidney disease.
We always tell the people who look after you why we’re using your information. They can ask us to stop using it any time.
The people who work for our Charity are trained to keep information safe. We will never share your information with people we don’t trust, and we’ll only share it if we need to.
Our computer systems have lots of protection, including anti-virus and passwords.
If you want to know more about how we use your information, or how we keep it safe, you can ask the person who looks after you to contact us. We’re so grateful for your help fighting kidney disease, and we’ll always do our best to answer your questions.
Health data privacy statement
Our charity has a legal duty to keep your personal health data safe, secure and confidential. We invest in technology, procedure and training to prevent loss, misuse, unauthorised access, modification or disclosure. We manage all personal health data and information legally and ethically.
We will not collect health data from you without your explicit consent, we will certainly never share your health information with anyone unless we have your explicit written consent to do so. With this consent, we might share information about you with research partners for our projects and will only do so if the partners involved have a genuine need for it and apply appropriate measures in line with legal obligations and our own high standards. When we pass on your information, we do so securely.
If you are unsure or want more information about how we share your personal information, our staff will discuss this with you and/or your relatives.
In exceptional circumstances, we may be required to disclose your information to meet a legal requirement. For example, a court might order us to pass on information without consent to prevent harm or to allow the investigation of a serious crime.
We only collect, process and store personal health data that you have provided to us directly. This includes your contact details, the fact that you are a kidney patient or the parent/guardian of a kidney patient. Additionally, you may choose to tell us what your kidney condition is and if you have experience of dialysis or transplantation.
There may be other times when you choose to share additional information about your health with us. We will always check that you are happy for us to collect and store this information.
We use your data to:
- Inform our research priorities (through our patient survey);
- send you information about patient engagement opportunities: such as Patient Survey, Patient Education Grants, volunteering, the opportunity to respond to consultations;
- send you information about research project participation opportunities: such as providing evidence to support a project, patient expertise and experience in the development of research projects;
- support your fundraising activity and provide you with an excellent experience;
- enable you to participate in or provide support to a research project;
- enable us to use your story for raising awareness about our charity and its work;
- ensure that we have a diverse range of kidney patients involved in our volunteer groups such as our Lay Advisory Committee.
We analyse your health information:
- If you participate in the Patient Survey, your information may be analysed to inform our research priorities;
- To keep track of the number of kidney patients on our database to ensure that we fully involve patients in all aspects of our work;
- To review the makeup of our volunteer committees to ensure that a range of kidney conditions and experiences are represented
We keep your health information:
- For six years from the completion of the purpose we have processed it for unless you have:
- renewed your consent for us (on our request) to continue to store and process your information for longer
- given explicit consent that we can store this information for a longer defined period such as when you have been involved in a clinical study or research project
- asked us to remove your data earlier
- Withdrawn your consent.
We will always use the lawful basis of Consent to collect and process your health data, in addition we will always apply the condition of Explicit Consent which means we will ask you to give very specific consent for us to process your data in very specific way. You have the right to withdraw your consent at any time and this will also withdraw any specific consents you may have given.
Policy reviewed: June 2024
