This policy lets you know what personal information Social Action for Health collect about you, how we collect it, what we use it for and on what basis. This includes what you tell us about yourself when you get involved in our projects or receive services we provide.

Individuals have the right to know what personal information we hold and are entitled to request a copy of it, changes, and in some cases ask us to fully delete it.

How do we collect your information?

We may collect personal information:

  • Via face to face in meetings, outreach events, and other project activities;
  • Via email, phone or letters;
  • Via Salesforce, the system we use to support our operational activities and deliver our services;
  • Via online surveys you chose to participate in by invitation;
  • Via other online platforms we use and you chose to subscribe to

What kinds of information do we collect about individuals?

We run a variety of community and health programmes; depending on your interactions with us or the project/service you participate on, the following data may be collected and processed:

Personal information

  • First name
  • Last name
  • Address
  • Phone
  • Email
  • Job title
  • Organisation affiliation

Sensitive information

  • Gender
  • DOB
  • Ethnicity
  • Mental or physical condition
  • Disability
  • Number of children
  • DNA Samples

Sensitive data is always collected with the subjects’ prior consent, and only when strictly required to deliver work commissioned by Government and Health Authorities or Research Institutions on projects fully protected by Ethical Clearance.

How do we use your information and for what purposes?

We are only allowed to use your personal information if we have a lawful reason for doing so. We will use your information if we can satisfy that processing it is necessary:

  • when you consent to it:
  • to provide a service to you;
  • in order for us to comply with a legal or regulatory obligation;
  • to meet contractual obligations with you or institutions that commission our work, or
  • when it is in our ‘legitimate interests’ (i.e. we have an interest to use your information to develop our services to the community as long as it does not prejudice you)

We use information held about you in the following ways:

What we use your information for

Our basis for using your information

To manage our relationship with you:

  • To keep you informed on projects and activities you expressed interest or have previously participated in
  • To invite you to participate in our project or online activities
  • To fulfil administration processes
  • To expand community networks
  • To provide guidance on our services



  • Your consent
  • Provision of the services delivered through our projects
  • Observing contractual obligations with funders and commissioners
  • Compliance with legal and regulatory obligations
  • Our legitimate interest - developing our services and facilitate capacity building in the community

To deliver our services to you, commissioning bodies, and the community: 

  • To fulfil services committed to you
  • To adhere to our obligations set out in agreements or contracts




  • Provision of the services delivered through our projects
  • To report on the outputs of our projects to commissioning bodies, Public Health and Government authorities
  • To share results of our research with academic or research institutions

To run our organisation efficiently and in compliance with regulatory standards: 

  • Corporate governance
  • Strategic planning
  • Financial/Regulatory audits and reporting
  • Employment Law compliance
  • Internal record keeping and business process improvements



  • Compliance with legal and regulatory obligations
  • Our legitimate interest - developing our services to the community and facilitate capacity building in the community

Who do we share your information with?

  • We do not share any of your personal information with commercial enterprises. Your data may be shared with:
  • Organisations acting as partners is specific projects (Subject to the necessary data sharing agreements and securities). 
  • IT providers / hosted IT solution providers acting as Data Processors (Whom are subject to the same data privacy commitments we hold through our service agreements)
  • Social Action for Health’s auditors

Where do we store your personal information?

We use data hosting service providers located in England (Office365/Azure) and Ireland (Amazon Web Services (AWS) and Salesforce) to host the information we collect, and we implement technical safeguards to protect your information.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website or network and any transmission is at your own risk. For example, if you access the internet via an unsecure network. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

What are your rights?

Under data protection law you have certain rights in relation to the personal information that we hold about you. You may exercise these rights at any time by contacting us using the details set out in this policy.

In certain cases, we may not be able to comply with your request for reasons such as our obligations to comply with any legal or regulatory requirements. In the event that we cannot comply with your request, we will also respond to you and tell you why.

Your rights include:

The right to access your personal information
You are entitled to a copy of the personal information we hold about you and certain details of how we use it. Your information will be provided to you electronically, unless otherwise requested.

We will respond to your request within a reasonable period of time, but at the latest within one month of the request (assuming we have any requisite information from you in order to be able to process your request).

The right to rectification
You have the right to have your information rectified if it is inaccurate or incomplete. We aim to ensure that your personal information is accurate, however, please do contact us if you require your information to be updated or amended.

The right to erasure
You have the right to request the deletion or removal of your information. There are, however, specific circumstances where we may be unable to deal with your request, e.g. if we need to retain your information to comply with a legal or regulatory obligation.

The right to restrict processing
You have the right to request that we limit the way we use your information if you have a particular reason for wanting that restriction e.g. in circumstances where you believe that we don’t have the appropriate rights to process your information.

The right to data portability
You have the right to obtain some of your information in a format you can move from one service provider to another. Should you request it, we will provide you with an electronic file of your basic account information

The right to object
You have the right to object to us processing your information e.g. you can ask us to stop sending you communications at any time.


You can withdraw your consent at any time. Please contact us if you want to do so.

How to contact us

You can request access to the personal information we hold about you by writing to us at:

Social Action for Health
Ment House
1C Mentmore Terrace

Alternatively, please email us at [email protected] noting ‘Subject Access Request’ or ‘SAR’ in the subject line of your email.

Notification of Change of Privacy Policy

This Privacy Policy may change from time to time. Please visit this website section periodically in order to keep up to date with the changes in our Privacy Policy. Where possible, we will notify you about significant changes by sending a notice to your primary email address, if you have agreed to receive email messages from us, or by placing a prominent notice on our website and print media.

Emails Terms of Use

Emails aren’t always secure, and they may be intercepted or changed after they’ve been sent. Social Action for Health does not accept liability if this happens. The contents of emails reflect their author's views and not necessarily those of Social Action for Health.

Please do not send Social Action for Health any financial data through email.

The information in emails is confidential, so if you’ve received one by mistake, please delete it without copying, using, or telling anyone about its contents.

Job and volunteer applicants and current and former employees

This Privacy Policy does not apply to personal information that we collect from you if you apply for a job or volunteering opportunity with Social Action for Health or become an employee or volunteer.

You will receive a separate Privacy Statement from us when providing information for these purposes.