Cancer Research UK logo.
SearchDonate
  • Search

Your rights under UK Data Protection Law

This page explains your rights in relation to the personal information we hold about you, and how you can exercise them.

Under UK data protection law, you have rights over the personal information we hold about you. We’ve summarised these rights below:

Right of Access (Article 15 UK GDPR)

You have the right to request access to the personal data we hold about you. This includes the right to receive a copy of your information, unless legal exceptions apply.

Right to Rectification (Article 16 UK GDPR)

If you believe the personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Please contact us with the relevant details, and we will investigate and make any necessary updates.

Right to Erasure (Article 17 UK GDPR)

You may ask us to delete some or all of your personal information. In certain cases, and subject to legal exceptions, we are required to comply with your request. If we cannot, we will explain why. It is likely that if you have recently donated or registered for an event we will need to retain your personal data.

Right to Restrict Processing (Article 18 UK GDPR)

You can ask us to restrict the processing of your personal information in the following situations:

  • You believe the information is inaccurate.

  • We are not lawfully allowed to use it.

  • You need us to retain it to establish, exercise, or defend a legal claim.

  • You have objected to our use of your information and your rights outweigh our legitimate interests.

Right to Data Portability (Article 20 UK GDPR)

If we process your personal information based on your consent or a contract, and the processing is carried out by automated means, you have the right to receive your data in a machine-readable format or request that we transfer it to another service provider.

Right to Object (Article 21 UK GDPR)

You have the right to object to our use of your personal information:

  • If we are processing it based on our legitimate interests or for scientific/historical research or statistical purposes.

  • If we are using it for direct marketing, we will stop processing your data for this purpose as soon as reasonably possible.

Right to Withdraw Consent

If we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.

Complaints

If you are unhappy with any aspect of how we use your personal information, you have the right to contact us about it. We will handle your complaint in line with the requirements set out by data protection law. We value your feedback as it helps us learn and improve. You can find out more and read our Complaints Policy on our website. You also have the right to lodge a complaint about how we use your information with the Information Commissioner’s Office (ICO), the UK’s data protection regulator. For individuals based in the EEA, please refer to the EU Representative details in the ‘Contact Us’ section.

Exceptions

Please note that exceptions apply to a number of these rights, and not all rights will be applicable in all circumstances. For more details, we recommend consulting the guidance published by the UK’s Information Commissioner’s Office (ICO)

Changes to this privacy policy

We may update this Privacy Policy from time to time. If we make any significant changes to the way we handle your personal information, we will make this clear on the Cancer Research UK website or by contacting you directly.

Visit our main Privacy Policy page