Conferences 2026/7

Privacy Policy

Introduction

This policy explains how we collect, use and protect your personal data when you visit our event ticket shop, register for an event or otherwise provide personal data to us.

We are EGFR+ Lung Cancer UK, Tower Cottage, Steep Marsh, Petersfield GU32 2BP. We are the data controller for the personal data described in this policy.

If you have any questions about this policy or how we use your personal data, please contact us at contact@egfrpositive.org.uk.

Personal data we collect

We collect, process, store and use personal data when you book a ticket or register to attend one of our events.

This may include:

your name
email address
information about your booking and attendance
dietary requirements and food allergies
accessibility requirements
other support requirements you choose to tell us about

We collect information about dietary, accessibility and other support requirements so that we can make appropriate arrangements for you at the event, including catering and accessibility arrangements.

Some information about accessibility, allergies or other support requirements may reveal information about your health and may therefore be classed as special category personal data under UK data protection law. Where this applies, we will only process the information where we have an appropriate lawful basis and an additional condition for processing special category data. Where appropriate, we will ask for your explicit consent.

You may also be able to register a loved one or support person to attend with you. If you do this, we may collect their name and any dietary, allergy, accessibility or support requirements that are needed for the event.

If you provide personal data about another person, you should make sure they know that you are providing their information to us and have had the opportunity to read this privacy policy.

Please only provide information that is relevant to your attendance or the attendance of the person accompanying you.

All personal data you provide should be accurate and up to date.

You do not need to provide personal data simply to view our event ticket shop. However, some technical information may be collected automatically when you use it, as described below.

When you contact us by email, post or telephone, we may keep a record of that correspondence.

Data we automatically collect

When you visit our event ticket shop, we or organisations providing services on our behalf may automatically collect information about your device and how you use the site.

This may include:

technical information about your device
browser and operating system information
language and time zone settings
IP address or similar online identifiers
information about how you use and navigate the ticket shop

This information may be collected using cookies and similar technologies.

We use this information to operate and improve our event ticket shop, understand how it is being used and support the administration of our events.

Marketing communications

If you choose to receive marketing communications from us, we may use your contact details to send you information including newsletters, surveys, news and information about future events.

We will keep a record of your marketing preferences.

You can stop receiving marketing communications at any time by clicking the unsubscribe link in one of our emails or by contacting us at contact@egfrpositive.org.uk.

Unsubscribing from marketing will not prevent us from contacting you about an event you have registered to attend or other information that is necessary to administer your booking.

Lawful processing of your personal data

We process your personal data where this is necessary to manage your booking and provide the event or related services you have requested.

This may include:

processing your registration
confirming your booking
communicating with you about the event
managing attendance and waiting lists
arranging catering
making accessibility or other support arrangements
answering questions about your booking
dealing with cancellations or changes
administering travel support where applicable

We may also process personal data where this is necessary for our legitimate interests in organising and running our events, providing support to attendees, managing our services, maintaining appropriate records and protecting the charity's interests.

Where information you provide constitutes special category personal data, such as some health, disability or allergy information, we will also identify an appropriate condition under Article 9 of the UK GDPR. Where appropriate, this will be your explicit consent.

If we rely on your explicit consent, you can withdraw that consent at any time by contacting us. Withdrawing consent will not affect processing that took place before you withdrew it.

The ICO confirms that special category information requires both a lawful basis for processing and a separate Article 9 condition. Explicit consent can be used where it is appropriate and must be clear, specific and expressly given. ICO

Information about a loved one or support person

Where you register another person to attend with you, we may process their name and information necessary to support their attendance.

We will use this information only for purposes connected with the event unless they separately choose to receive other communications from us.

Where dietary, accessibility, allergy or other information about that person constitutes special category personal data, we will only process it where the appropriate data protection requirements have been met.

Who do we share your data with?

We may share personal data with organisations that provide services to us where this is necessary to organise or deliver an event.

These may include:

Ticket Tailor or other event registration providers
event venues
caterers
email and communication providers
IT providers
professional advisers, including lawyers

Where it is necessary to meet a dietary, accessibility or support requirement, we may share the minimum amount of information necessary with the relevant venue, caterer or other event supplier.

For example, a venue may need to know that wheelchair access is required or a caterer may need to know about a particular food allergy. We do not need to provide them with more information than is necessary for that purpose.

We may also disclose personal data where we are legally required to do so or where this is necessary to protect the rights, property or safety of EGFR+ Lung Cancer UK or another person.

Where we hold and process your personal data

Some organisations that provide services to us may process personal data outside the UK.

Where personal data is transferred internationally, we will ensure that appropriate protections are in place in accordance with UK data protection law.

This may include transferring information to a country covered by UK adequacy regulations or using approved contractual safeguards.

The ICO requires privacy information to explain international transfers and, where applicable, the safeguards used. ICO

Cookies

A cookie is a small file placed on your device when you visit a website.

Our event ticket shop and the services used to operate it may use cookies and similar technologies to help the site work properly, remember settings and understand how the service is being used.

You can control cookies through your browser settings and, where available, through cookie controls provided on the website.

Some parts of the ticket shop may not work correctly if certain cookies are disabled.

If analytics tools such as Google Analytics are used, they may collect information about how visitors use the ticket shop. Where required, non-essential analytics cookies will only be used in accordance with applicable consent requirements.

Security

We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful access, use, alteration, disclosure, destruction or accidental loss.

No payment information is handled by our ticketing providers.

No system can provide absolute security, but we take reasonable steps to protect the information entrusted to us.

Your rights

Depending on the circumstances, you may have the right to:

ask for a copy of the personal data we hold about you
ask us to correct inaccurate or incomplete information
ask us to delete personal data
ask us to restrict the way we use your personal data
object to certain types of processing
ask for certain information to be transferred to you or another organisation
withdraw consent where we rely on consent

These rights do not apply in exactly the same way in every situation and some are subject to legal exemptions.

To exercise your rights, please contact contact@egfrpositive.org.uk.

If you are unhappy with how we handle your personal data, please contact us first so that we have an opportunity to address your concerns.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

www.ico.org.uk

Links to other websites

Our event ticket shop may contain links to websites operated by other organisations.

If you follow a link to another website, that organisation will be responsible for how it handles your personal data. You should read its privacy information before providing personal information.

Retention

We will not keep personal data for longer than we need it for the purpose for which it was collected.

Information relating to an event booking may normally be retained for up to six months after the event or our last relevant contact with you, unless we have a legal, financial or regulatory reason to retain particular records for longer.

Information about dietary requirements, allergies, accessibility needs and other support requirements will only be retained for as long as reasonably necessary to organise and administer the relevant event and any immediate follow-up. We will then delete or anonymise it unless there is a specific reason why it needs to be retained.

Where you have agreed to receive marketing communications, we may retain the contact information needed for this purpose until you unsubscribe.

The UK GDPR does not prescribe one retention period for all personal data. Organisations should decide and justify retention according to why the information is needed and delete or anonymise it when it is no longer necessary. ICO

Data minimisation

We aim to collect only the information we reasonably need to organise and deliver our events.

In particular, when we ask about dietary, accessibility or support needs, you do not need to provide detailed medical information. Please tell us only what we need to know to make the appropriate arrangements for you.

UK data protection law requires personal data to be adequate, relevant and limited to what is necessary for its purpose. ICO

Changes to this policy

We may update this privacy policy from time to time, for example if the way we organise events or use personal data changes.

Where a change materially affects how we use information already collected, we will provide appropriate information about the change before beginning the new processing.

Privacy information should be kept up to date and people should be told about new uses of their information before those uses begin. ICO