Lawful basis

The following is an extract from our Data Protection Policy

For more information, please email

There are six lawful bases for processing data. The Organisation will process different data using four different lawful basis:

  1. The individual has given clear consent for the organisation to process their personal data for a specific purpose – see section 5. Example: for agreement to receive ongoing marketing; for specific access to the patient’s own clinical record
  2. It is necessary for the performance of a contract or to take steps to enter into a contract with the data subject. Example; contracts with clients to provide a service using data supplied by them as data controller
  3. It is necessary for compliance with a legal obligation. Example – Information from accident reports require processing for health and safety records (Health and Safety Law).
  4. It is necessary for the purposes of legitimate interests. Example – Web analytics to assess the number of visitors, posts, page views, reviews and followers in order to optimise future marketing campaigns.

We only process the personal data that we need for our purposes(s), and that we only use the data for those purposes.

Translate »