The Institute of Cancer Research – Privacy Statement

Overview

As a leading cancer research institute, higher education institution and exempt charity, The Institute of Cancer Research, London, needs to collect and use personal information. We have systems in place to process personal information in accordance with the law which are central to the ICR’s successful operation and to maintaining public confidence in the ICR.

Personal information is defined as information that can identify you as an individual, either on its own or when linked to other information processed by the ICR. 

This privacy statement outlines your rights and associated information about the processing that the ICR undertakes as a Data Controller. In particular, it includes:

• how the ICR may obtain your personal information
• what information we collect
• how we will use that information and for what purpose
• who we share your information with
• how long we will retain your information 
• your rights regarding information we hold about you
• how we use cookies to provide services to you or improve your use of our website

Individual privacy policies and statements

For ease of use, the ICR privacy statement is split into the key operational areas requiring personal information to be processed. Please use the links below to find out more:

• Visitors to our website (cookie policy)
• Fundraising
• People whose information is used in research studies
• Cancer Stories
• Job applicants and ICR current and former staff
• Students and alumni
• Members of our Board of Trustees privacy notice
• Fellows, Members and Associates of the Institute

Your rights

The General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 replace the Data Protection Act 1998 and together form the UK’s Data Protection law.

Data Protection Law sets out individuals’ rights as they pertain to personal information gathered by the ICR. In some cases, particularly research, exemptions to these rights may apply and we will advise you if this is the case.

You have the right to access your personal information. You can find out if we hold any personal information by making a ‘data subject access request’. You can use the Data Subject Access Request Form (PDF) to make a request, although this is not compulsory. If we do hold information about you, we will:

• give you a description of it
• tell you why we are holding it
• tell you where we got it from
• tell you who it could be disclosed to
• provide you a copy of the information in an intelligible form.

You have the right not to be subject to a decision based solely on automated processing, the right to request data portability, the rectification or erasure of personal data, restrict its processing or object to processing.

Some of your information may be transferred to third parties who work together with us or on the ICR’s behalf. These third parties may be within or outside of the United Kingdom (UK). Certain countries outside of the UK may not have laws which protect your privacy to the same extent as the Data Protection Act 2018 (UK GDPR). In the event that your information is transferred outside of the UK or Europe the ICR will take all reasonable steps to protect your privacy.

If you would like further information or have any concerns about the use of your personal information, please email [email protected] or write to: 

The Data Protection Officer

The Institute of Cancer Research

123 Old Brompton Road

London SW7 3RP

You also have the right to lodge a complaint about any use of your personal information with the Information Commissioners’ Office (ICO), UK’s national data protection regulator. 

The Institute of Cancer Research is registered with the Information Commissioner's Office under number Z6775661.

We keep our privacy notice under regular review. This privacy notice was last updated on 23 October 2023.