Privacy Notice

The Phoenix Project both respects your privacy and is committed to protecting your personal data. We endeavour to maintain transparency on why and how we collect your data, as well as how we use it.

This Privacy Notice explains how we use the personal information you provide as either a volunteer, participant or donor.

We recommend that you read this Privacy Notice in full to ensure you are completely informed about your personal data. However, if you only want to access a particular section of this Privacy Notice, then you can click on the relevant link above to jump to that section.

This Privacy Notice was last updated on 11/10/24.

  • This website is operated by The Phoenix Project, the Data Controller, through the website platform SquareSpace.

    The Phoenix Project is a registered charity (registered in England No. 11991100).

    Our Data Protection Officer (DPO), Amelia Fortescue, is responsible for answering any questions your have about this Privacy Notice. Amelia may be contacted by email: tppseniorleadership@gmail.com.

  • This section details what information The Phoenix Project collects, keeps and stores about you.

    We use the personal data that we collect from and about you only for the purposes described in this Privacy Notice (set out below) or for the purposes that we explain to you at the time we collect your information. Depending on our purpose for collecting your information, we rely on the following legal bases:

    • Contract - we require certain personal data in order to provide the goods and support the services you purchase of request from us;

    • Consent - in certain circumstances, we may ask for your consent (separately from any contact between us) before we collect, use, or disclose your personal data, in which case you can voluntarily choose to give or deny your consent without any negative consequences to you;

    • Legitimate interests - we will use or disclose your personal data for the legitimate interests of either The Phoenix Project or a third party, but only when we are confident that your privacy rights will remain appropriately protected. If we rely on our (or a third party's) legitimate interests, these interests will normally be to: operate, provide and improve our organisation, including our website; communicate with you and respond to your questions; improve our website or use the insights to improve our services; detect or prevent illegal activities (for example, fraud); and/or to manage the security of our IT infrastructure, and the safety and security of our participants and visitors. Where we require your data to pursue our legitimate interests or the legitimate interests of a third party, it will be in a way which is reasonable for you to expect as part of the running of our organisation and which does not materially affect your rights and freedoms; or

    • Legal obligation - there are instances where we must process and retain your personal data to comply with laws or to fulfil certain legal obligations.

    People who use our services

    • Name

    • Mobile number

    • Email address

    • Job role prior to UK arrival

    • Country of Medical training

    • Years of experience within profession

    • Length of stay in the UK

    • Self-identification as a refugee or asylum-seeker

    • Bank details

    We collect the above data directly from you in order to be able to provide appropriate teaching sessions and support to you across the GMC qualification process.

    We process your data in accordance with our legitimate interests in providing high quality, safe and efficient services. Our Research and Audit team use personal data in their research activities, which includes evaluation of our services.

    The provision of this data is necessary for these legitimate interests. If you do not provide this data, then we may not be able to provide teaching sessions and/or examination sponsorship.

    We will keep your personal data for a one year period after either our last contact with you or passing your PLAB 2. On passing the PLAB 2, we will only keep your name and email address in case of future contact.

    For more information, please read the 'Your Rights' section.

    People who volunteer with us

    • Name

    • Mobile number

    • Email address (university of work)

    • Year of undergraduate study or grade of training

    • University of study or place of work

    We collect the above information directly from you in order to enable the effective and safe delivery of services and support provided by The Phoenix Project to Displaced Doctors.

    We process your data in accordance with our legitimate interests to manage our recruitment process and provide high quality, safe and efficient services. Our Research and Audit team use personal data in their research activities, which includes evaluation of our services.

    We will keep your personal data for a one year time period after either the recruitment process or you have finished working with us.

    For more information, please read the 'Your Rights' section.

    Donors

    • Name

    • Email address

    • Gift aid status

    We collect the above information directly from you in order to share updates on what your generous support has enabled.

    We process your data in accordance with our legitimate interests in conducting fundraising, processing payments, promoting our charitable activities and responding to you upon enquiry.

    We will keep your personal data until a request for no future contact, when we have a legitimate interest in keeping a list of people who no longer wish to be contacted, to ensure no future contact.

    For more information, please read the 'Your Rights' section.

  • We share your personal data with the following categories of recipients:

    • third party service providers and partners

    • any competent law enforcement body, regulatory, government agency, court or third party (such as our professional advisers) where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights or so a third party can defend theirs, or (iii) to protect your vital interests or those of any other person;

    • any other person with your consent to the disclosure (obtained separately from any contact between us).

  • The Phoenix Project takes the security of your data seriously. We have internal policies, controls and security measures in place to ensure your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our volunteers in the proper performance of their duties.

    We undertake regular reviews of who has access to information that we hold to ensure that your information is only accessible to relevant volunteers.

  • Your right to be informed - You have the right to be informed about the collection and use of your personal data. This is described to you through this Privacy Notice and the specific information handbooks we provide you.

    Your right of access - You have the right to ask us for copies of your personal data, known as a 'subject access request'. This can be made via email to tppseniorleadership@gmail.com.

    Your right to rectification - You have the right to ask us to rectify personal data you think is inaccurate, such as an update to personal data. You also have the right to ask us to complete information you think is incomplete.

    Your right to update date - You have the right to ask us to update your personal data.

    Your right to erasure - You have the right to ask us to erase your personal data in certain circumstances.

    Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal data in certain circumstances.

    Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.

    Your right to data portability - You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.

    Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent.

    To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

  • We may update this Privacy Notice from time to time in response to changing legal, regulatory, technical or organisation developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make.

    You can see when this Privacy Notice was last updated by checking the "last updated" date displayed at the top of this Privacy Notice.

  • If you have any concerns about our use of your personal data, you have the right to make a complaint at any time using the contact details at the top of this privacy notice.

    If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

    The ICO’s address:           

    Information Commissioner’s Office
    Wycliffe House
    Water Lane
    Wilmslow
    Cheshire
    SK9 5AF

    Helpline number: 0303 123 1113

    Website: https://www.ico.org.uk/make-a-complaint