Accessibility Tools
Make a Referral

Privacy Notice

Updated September 2026 V4

disAbility Cornwall and Isles of Scilly Privacy Notice

disAbility Cornwall & the Isles of Scilly respects your privacy. This notice explains what personal information we collect, why we use it, who we may share it with, how long we keep it and your rights.

1. Who we are

disAbility Cornwall & the Isles of Scilly provides advice, information, support, training and other services and activities. We are the data controller for the personal information covered by this notice.

If you have a question or request about your personal information, contact our Data Protection Officer at or write to:

disAbility Cornwall & IoS

Units 1G/H
Guildford Road Industrial Estate
Hayle
TR27 4QZ

2. Who this notice covers

This notice applies to our clients and people who use our websites. It also applies if you contact us, use our services, apply for a grant or other support, attend training or events, become a member, give us feedback or are referred to us by another organisation.

If you apply to work with us, please see our separate Staff Privacy Policy.

3. What information we collect

We may collect your name, contact details, date of birth and communication preferences. We may also collect information about the advice or support you need, our contact with you, grant or payment details, feedback and information you give us through our websites.

Some of our work involves sensitive information, such as information about your health or disability. This is known as special category data. We only use it when it is necessary and the law allows us to.

We may also use information about criminal offences in limited circumstances where the law allows us to.

4. Why we use your information

We use your information to:

  • respond to enquiries;
  • provide advice, support and other services;
  • manage referrals, grants, membership, training and events;
  • respond to complaints;
  • meet our safeguarding duties;
  • improve our services and websites;
  • keep appropriate records; and
  • meet funding, audit and legal requirements.

The lawful basis we use depends on what we are doing. We may rely on consent, contract, legal obligation, vital interests or legitimate interests.

Our legitimate interests include delivering and improving our services, responding to enquiries, keeping appropriate records and protecting our systems and organisation.

When we use special category data, we also rely on an additional condition allowed by data protection law.

5. Where we get information

Most information comes directly from you.

We may also receive information from local authorities, health and social care organisations, charities and community organisations, referring organisations, family members, carers or representatives when the law allows us to.

This may include your contact details and information about your circumstances, needs or the reason you have been referred to us.

6. Who we share information with

We only share your information when there is an appropriate reason.

We may share it with organisations working with us to provide support, funders or commissioners, IT and communications providers, professional advisers, safeguarding organisations, emergency services, regulators or public authorities.

We do not sell your personal information or share it with other organisations for their own marketing.

We do not routinely transfer personal information outside the UK.

7. Safeguarding and emergencies

We may share information without your consent if:

  • a child or adult may be at risk of abuse, neglect or harm;
  • someone’s life or safety is at risk;
  • the law requires us to share it; or
  • it is necessary to prevent or detect crime.

We only share the information that is necessary.

8. Marketing, websites and cookies

We only send marketing when we have an appropriate lawful basis. You can unsubscribe at any time using the link in our emails or by contacting .

Our websites may use cookies and analytics tools to help them work and to understand how people use them. Where consent is required, we will ask before using non-essential technologies.

9. How long we keep information

We only keep your personal information for as long as we need it. How long we keep it depends on the service involved and any legal, funding, audit or regulatory requirements.

Our retention periods are set out in our Data Retention and Disposal Policy and Schedule.

When we no longer need your information, we securely delete, destroy or anonymise it.

10. Your rights

Depending on the circumstances, you may have the right to:

  • see the personal information we hold about you;
  • correct information that is wrong;
  • ask us to delete your information;
  • restrict or object to how we use it;
  • receive certain information in a portable format; or
  • withdraw your consent where we rely on consent.

These rights do not apply in every situation.

To exercise your rights, contact .

11. Complaints

If you are unhappy with how we have used your personal information, you can make a data protection complaint to our Data Protection Officer at .

We will acknowledge your complaint and investigate it in line with data protection law.

You also have the right to complain to the Information Commissioner’s Office (ICO):

www.ico.org.uk/make-a-complaint
0303 123 1113

12. Our websites and updates

This notice applies to websites operated by us, including:

We may update this notice when our services, websites, technology or legal obligations change.

We handle personal information in line with the UK GDPR, Data Protection Act 2018, relevant changes made by the Data (Use and Access) Act 2025 and, where applicable, PECR.

Hospital Discharge

Self-Referral Form