Data Privacy Notice

Updated June 2026

Next reviewed June 2027

Life after Cancer is committed to protecting and respecting your privacy. This Data Privacy Notice explains how we look after your personal information when you use our services, including how we collect, use, store and share it. It also explains your rights under UK data protection law and how we keep your information safe.

We are committed to protecting your personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws.

We use Your personal data to provide and improve the Service. We process Your personal data in accordance with applicable data protection legislation and the lawful bases set out in this Data Privacy Notice.

We may update this notice from time to time. Any changes will be published on this page and will take effect immediately upon posting. The “last updated” date will always be shown at the top of the notice.

Who we are

We are Life after Cancer, a Community Interest Company, that supports people after cancer treatment.

Contact details:

Life after Cancer CIC
Company Number: 11304761
Data Protection Lead: Stephanie Davies
Email: hello@life-aftercancer.co.uk

We may collect:

Name and contact details (email address, telephone number, postal address)
Communication preferences
Information you share when contacting us
Event, workshop, coaching or programme participation details
Donation and payment information (processed securely via third-party providers)
Feedback, survey and evaluation responses
Information relating to complaints, concerns or safeguarding matters where relevant

You may also choose to share information about your health, wellbeing, cancer diagnosis or treatment experience. This is known as special category data and is only collected where relevant to the support and services we provide.

How we use your information

We use your personal information to:

Provide the services, events and support you request
Communicate with you about programmes, workshops and activities you have registered for
Send newsletters and updates where you have consented to receive them
Process donations and payments
Manage workshops, events, coaching programmes and support groups
Improve our services and measure their impact
Meet legal, financial, safeguarding and funding requirements
Maintain internal records, including feedback, complaints and enquiries

Our lawful basis for processing

Under UK GDPR, we only process personal data where we have a lawful basis to do so. These may include:

Consent – for example, when you sign up to receive newsletters or marketing communications.
Contract – where processing is necessary to provide a service, programme or event you have registered for.
Legal Obligation – where we are required to retain information for legal, accounting or regulatory purposes.
Legitimate Interests – where processing is necessary to deliver, improve and evaluate our services, provided your rights and interests are protected.

Where we process information relating to your health, cancer experience or wellbeing, we do so only where both a lawful basis under Article 6 UK GDPR and a condition under Article 9 UK GDPR apply.

How we collect your data

We collect personal information when you:

Sign up to our mailing list
Contact us by email, phone, website or social media
Register for events, workshops, coaching or support programmes
Make a donation
Complete surveys, feedback forms or evaluations
Join a WhatsApp group or similar communication service

We may also receive information from trusted third-party platforms that help us deliver our services, such as Eventbrite, Raisely or other event and fundraising providers.

Where WhatsApp or similar communication platforms are used, participation is voluntary. Please be aware that your phone number, profile information and messages may be visible to other group members. We encourage participants to consider the information they choose to share within these groups.

How we store and protect your data

We store personal information securely using password-protected systems, restricted access controls and secure cloud-based services.

We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure or alteration. However, no electronic storage system or internet transmission can be guaranteed to be completely secure.

How long we keep your information

We only keep personal information for as long as necessary to fulfil the purposes for which it was collected, meet legal and accounting requirements, comply with funding obligations, resolve disputes and fulfil our contractual or legal responsibilities.

Retention periods may vary depending on the type of information and the purpose for which it was collected.

Who we share your information with

We do not sell your personal information.

We may share information with trusted service providers who help us deliver our services, such as website providers, event management platforms, payment processors, email systems and cloud storage providers. These organisations act as data processors and are required to protect your information and comply with data protection law.

We may also share information where required by law, regulation, safeguarding responsibilities or legal process.

We never share your personal information with third parties for marketing purposes without your consent.

International transfers

Some of the service providers we use may store or process personal information outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), or other approved mechanisms designed to protect personal information.

Data of individuals under 18s

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from children. If we become aware that personal information relating to a child has been provided to us, we will take reasonable steps to delete it.

Your rights

Under UK GDPR, you have the right to:

Be informed about how your information is used
Access the personal information we hold about you
Request correction of inaccurate or incomplete information
Request deletion of your information in certain circumstances
Restrict processing in certain circumstances
Object to processing based on legitimate interests
Withdraw consent at any time where processing is based on consent
Request transfer of your data to another organisation where applicable
Lodge a complaint with the Information Commissioner's Office (ICO) if you are unhappy with how we have handled your personal information.

Requests can be made by contacting us using the details provided in this notice.

We aim to respond to requests within one calendar month. You will not normally be charged a fee for exercising your rights.

Cookies and website data

When you visit our website, we may automatically collect certain technical information, including your IP address, browser type, device information, pages visited and website usage patterns. This information is collected through cookies and analytics tools to help us improve the performance, functionality and user experience of our website.

Our website uses cookies and analytics tools (such as Wix and Google Analytics) to help us understand how the site is used and improve user experience.

How to Make a Complaint

If you have concerns about how we use your personal information, please contact us using the details below

Complaints will be handled in accordance with our Data Protection Complaints Procedure, which is available on request.