We, at Thames Valley Air Ambulance (“TVAA”/”We”/”Us”/”Our”), are reliant on the support and generosity of the communities we serve to continue our vital work. 

As a valued stakeholder of TVAA we are committed to protecting your privacy and the personal information you give to us. 

This policy, together with our Terms of Use for the Site and our Cookies policy will provide you with the information you need to know about how we use and protect that personal information.

If you have any questions, please contact us at [email protected]

Who we are
Read more

TVAA is a registered charity in England and Wales 1084910.

Our registered address is: Stokenchurch House, Oxford Road, Stokenchurch, Bucks, HP14 3SX.

This privacy policy relates to all information obtained by TVAA and for which TVAA are the data controller.  TVAA are registered with the Information Commissioner’s Office, registration number Z1250695.

TVAA’s Data Protection Officer, Caroline Darroch, is responsible for answering any questions you may have about this Privacy Policy.  Caroline can be contacted at the above address, by email [email protected] or by phone: 0300 999 0135.

TVAA's purpose
Read more

TVAA’s mission is to push the boundaries of medical intervention, helicopter aviation and on-scene patient care to deliver a unique life-saving service to patients, where and when it is needed the most.

Stakeholders can affect or be affected by the organisation's actions, objectives and policies. Some examples of stakeholders are: employees, volunteers, supporters, suppliers, other emergency services, media, patients, the public.

We take active steps to ensure our stakeholders are aware of the ways in which they can help us achieve our overall purpose.

Why we hold and process personal information
Read more

Personal information is information that can be used to identify you.  We hold and process your personal information for a variety of reasons including:

  • To administer your donation
  • For the provision of health care and treatment
  • To claim gift aid on donations
  • When you sign up to fundraise for us or to take part in an event so we can communicate with you
  • To support community-based fundraising and campaigning
  • To provide supporters with marketing information about our events, fundraising activities and appeals so they are aware of other ways they can support us
  • To ensure we do not send marketing or unwanted information to those who have informed us they do not wish to be contacted
  • For internal record keeping, such as the management of feedback or complaints
  • To understand how we can improve our services, products or information

When processing personal data our approach follows the principles set out by the Data Protection Act:

  • We process personal data lawfully, fairly and in a transparent manner
  • We collect personal data only for specified, explicit and legitimate purposes
  • We process personal data only where it is adequate, relevant and limited to what is necessary for the purpose(s) of processing
  • We keep accurate personal data and take all reasonable steps to ensure that inaccurate personal data is rectified or deleted without delay
  • Kept in a form permitting identification of the data subject for no longer than is necessary for the purpose(s) for which that data is processed
  • Processed in a manner ensuring appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical and organisational measures (integrity and confidentiality)

When and why we will send you personalised marketing messages
Read more

TVAA will only contact you for marketing purposes such as keeping you up to date with Charity activities, or letting you know of ways in which you can support our work, where we have your consent, or we are otherwise allowed to do so.

TVAA will make it easy for you to tell us if you would like to receive marketing communications from us and hear more about our work and the ways in which you would like to receive this information (email, post, SMS and phone).  We will not send marketing material if you tell us you do not wish to receive these communications and there are a variety of ways in which you can let us know how you prefer to be contacted.

How and when we will collect information about you
Read more

TVAA may collect your personal data in the following circumstances: 

a) When you give it to us DIRECTLY

You may give us your personal data directly when you donate, sign up for one of our events, or when you communicate with us.

b) When you give it to us INDIRECTLY

You may give us your information indirectly for example when you sign up to events or contribute to TVAA via fundraising sites like Just Giving.  These independent third parties will pass your data to TVAA where you have indicated that you wish to support us and have given your consent, or it is a necessary part of completing a contract with you.

There will be times when your personal data is collected by an organisation working on our behalf (for example a professional fundraising agency) but as they are acting on our behalf, they cannot use your data for their own purpose.  We remain the data controller and responsible for the security and correct processing of that data.

c) When you access TVAA's Social Media

We might also obtain your personal data through your use of social media such as Facebook, WhatsApp, Twitter or LinkedIn, depending on your settings or the privacy policies of these social media and messaging services. To change your settings on these services, please refer to their privacy notices, which will tell you how to do this. 


Updating your preferences with TVAA will not guarantee that you never see our contents on social media, since the social media site may select you based on other criteria and without your data having been provided by TVAA.

d) When the information is publicly available

Personal data about individuals might also be obtained about those interested in giving major gifts to charities.  In this scenario, TVAA may seek to find out more about these individuals, their interests and motivations for giving and this will take place using publicly available information. This information may include newspaper or other media coverage, open postings on social media sites such as LinkedIn, and data from Companies House.

Use of other publicly available sources, such as the Mailing Preference Service (MPS) or Fundraising Preference Service (FPS), assist us in ensuring we do not send unsolicited mail or marketing material to those who have indicated they do not wish to receive these. 

TVAA will conduct research and retain publicly available data relating to potential supporters for information purposes. 

What information might we collect about you?
Read more

We only collect personal data that is relevant to the type of engagement you will have with us such as:

  • Donations
  • Gift Aid declarations
  • Signing up to an event or activity
  • Requesting our newsletter
  • Sharing your story
  • Information on beneficiaries / legators / executors relevant to a legacy gift
  • Participating in our lottery or raffle
  • Staff and volunteers
  • Observer shifts
  • Your communication preferences and any changes
  • Images, to include CCTV
  • Call recordings
  • Visitor information

The information we request, relevant to your engagement with us, could include:

  • Name
  • Contact details including telephone and email address
  • Bank account / credit card details
  • Images
  • Date of birth
  • Health details, relevant to an event or activity
  • Your motivation for supporting us
  • Deceased charity legators
  • Records of communication (letters, phone calls, emails, financial history and any additional notes – which may contain special category data, meeting notes, interests)

Special Category Data (Sensitive Personal Data)

TVAA may collect special category data, as defined by the General Data Protection Regulation. 

One such example is health data which may be collected in relation to some of our events or activities.  This is required to ensure that we provide appropriate facilities or support to enable you to participate. 

Our HEMS work, relating to our patients, also requires TVAA to collect these categories of data including your mental and physical health, race and ethnic origins and genetics.

TVAA will only collect this information if it is necessary, or with your explicit consent.

All special category data is stored on secured databases with restricted access and deleted when no longer relevant.  Special category data may be shared with third parties but only where we are required to do so or where the data is anonymised to remove any person identifiable information (PII). 

How will TVAA use your information?
Read more

We may use your information in the following ways:

  • To confirm receipt of donations (unless you have asked us not to do this) and to say thank you. We may also send you information about the impact your donation or any other support is making or other ways to get involved and support Thames Valley Air Ambulance
  • To promote the aims and objectives of the Charity
  • In relation to correspondence you have entered into with us whether by letter, email, text, social media or any other means and to contact you about content you provide
  • For internal record keeping, recording your relationship with us
  • To fulfil sales contracts you may have entered into with us
  • To contact you for reasons related to administering any donations or legacies you have made including Gift Aid, if claimed
  • To implement instructions, you may have given us such as withdrawing consent to send marketing information or informing us through the Fundraising Preference Service that you do not wish to receive any marketing information
  • To keep your data up to date – we use Royal Mail’s data on postal address changes to ensure we can maintain contact with you where we believe you are happy to be contacted by post. We also use services which notify us of the recently deceased to avoid any distress that continued communication would cause
  • To use IP addresses to identify the location of users, to block disruptive use and to establish the number of visits from different countries
  • To administer our recruitment and employment processes
  • To administer our case study process
  • To invite you to participate in surveys or research about TVAA or our work (participation is always voluntary)
  • To analyse and improve the activities and content offered by our website and to provide you with the most user-friendly navigation experience. We may also use and disclose information in aggregate (so that no individuals are identified) for marketing and strategic development purposes
  • To clarify or check your preferences if we find that details on our database about you are confusing or we are improving our database

What legal bases do we have for processing your data?
Read more

The law on data protection sets out several reasons that permits us to collect and process your personal data:

  • Consent– when you make a gift or contact us you have the option to ‘tick a box’ to give us consent for marketing purposes. Consent is required for us to contact you by email.  Consent can be given verbally, written or via the website.  Consent is recorded at this time and transferred to our CRM system – any physical copies are scanned and kept on the donor record. An individual has the right to withdraw consent at any time.
  • Legitimate interest– we believe our existing supporters have a legitimate interest to continue receiving updates from us about the impact their support has on keeping us operational and for any further requests to support. For this reason, we don’t require consent to continue to contact our current supporters by post. You can opt-out of this at any time.
  • Legal obligation– for example HMRC requires us to collect information regarding Gift Aid and for the prevention of fraud.
  • Contract – if you are an employee or have any contractual relationship with the charity.

Should you wish to update the information we hold about you or change your contact preferences then please contact us at [email protected] or call 0300 999 0135.

How you can control the information we send you our update your personal information
Read more

Ensuring your personal data is accurate is important for us and we would like to ensure we are able to communicate with you in ways you are happy with as well as being able to provide you with the information you are interested in.

Should you wish to change how we communicate with you or update your details please contact us:

Website:                     www.tvairambulance.org.uk

Email:                          [email protected]

Telephone:                 0300 999 0135

Post:                            Thames Valley Air Ambulance

                                    Ground Floor

                                    Stokenchurch House

                                    Oxford Road



                                    HP14 3SX

You can also opt out of email marketing communications separately:

Email:              you can click on the unsubscribe link provided in all our marketing communications

When can you expect to stop receiving marketing communications?

TVAA will make every effort to meet the following service levels when stakeholders ask

that we do not send them further marketing communications:

email                           48 hours from receipt of request

Telephone                 48 hours from receipt of request

Mail                            28 days from receipt of request

The extended time limit on actioning mail requests is longer due to production times for some mail campaigns.  In most cases we would expect the change to be effective quicker.  During this time period we advise that some mail campaigns may still be received.

Do we use profiling as part of our marketing campaigns?
Read more

Profiling is a common technique used in direct marketing and involves analysing data to improve the targeting of communications. TVAA uses profiling techniques to help ensure our communications are relevant.  Profiling allows us to target our resources effectively, which donors consistently tell us is a key priority for them.  It enables us to raise more funds, sooner, and more cost-effectively, than we otherwise would. The data may have been provided to TVAA by you when responding to our marketing campaigns, or when using our website, or social media sites such as Facebook.

When building a profile, we may analyse geographic, demographic and other information relating to you, as well as your previous responses to our marketing campaigns. We do this to determine whether we believe a marketing campaign might be of interest. Some of the data is provided by external organisations and may be provided at an aggregate level (e.g. by postcode). This helps to maximise the effectiveness of our campaigns and to minimise the wastage that would result from sending marketing information where it is not of interest. 

Will we share your personal data with anyone else?
Read more

TVAA will only use your personal data for the purpose(s) for which it was obtained and will not, under any circumstances, share or sell your personal data with any third party for their own marketing purposes and you will not receive marketing from any other companies, charities or organisations as a result of giving your data to us.


We may need to share your data with our service providers who help to deliver our projects, activities and goods.  These service providers are “data processors” and will only act under our instruction, are subject to pre-contract scrutiny and contractual obligations containing strict data protection clauses.  We will not allow these organisations to use your data for their own purposes or disclose to other third parties without our consent and will take all reasonable care to ensure they keep your data secure always.

Social Media Sites

We may also use your email address and phone number to match to your account on Facebook or other social media sites to show you TVAA content while using these services. We only do this where you have opted in to marketing emails or phone calls and we keep your data secure by encrypting it. No data we hold about you is retained by the third party.

In addition, we may also use your email address and phone number to link to Facebook or other social media sites to identify other users of these sites whom we believe would be interested in TVAA, and we may then show them TVAA content. No data we hold about you is retained by the third party.

There are two ways to prevent this use of your data, you can either update your preferences at TVAA by opting out of the relevant channel of communication or you can do this via the social media site:

Facebook: https://www.facebook.com/help/568137493302217
LinkedIn: https://www.linkedin.com/help/linkedin/answer/62931
Twitter: https://business.twitter.com/en/help/troubleshooting/how-twitter-ads-work.html

Updating your preferences with TVAA will not guarantee that you never see our content on social media, since the social media site may select you based on other criteria and without your data having been provided by TVAA.

Where legally required

TVAA will comply with legal requests where disclosure is required or permitted by law (e.g. government bodies for tax purposes, law enforcement agencies for the prevention and detection of crime or regulators such as Care Quality Commission subject to such bodies providing us with a relevant request in writing).

Your data is only processed outside the European Economic Area (EEA) where we have verified that appropriate standards and safeguards are in place.

Payment transactions
Read more

Thames Valley Air Ambulance is grateful for every penny it receives, and we want to make sure that we provide you with safe avenues to donate.  To ensure that your payment transactions are safe TVAA uses the services of Stripe Payments Europe Ltd.  This service is responsible for any card or online payment transaction you make to us and the organisation may hold data about you.  As a result, we would like to direct you to their privacy policy


How long will we retain your personal data for?
Read more

TVAA will hold your information for specific periods of time following the end of your relationship with us and these retention times will be dependent on the nature of your relationship and our legal obligations.  Information may be held for a period of up to seven years however, in some cases we may be required to retain for a longer or shorter periods.  

Legacy income is vital to the running of the charity. We may retain data you provide to us indefinitely, to carry out legacy administration and communicate effectively with the families of people leaving us legacies. This also enables us to identify and analyse the source of legacy income we receive.

Where you contribute material to us, e.g. user generated content or in response to an event or activity, we will only keep your content for as long as is reasonably required for the purpose(s) for which it was collected unless otherwise stated at the point of generation.

If you request that we stop sending you marketing materials, we will keep a record of your contact details and appropriate information to enable us to comply with your request not to be contacted by us. 

TVAA retain personal data in accordance with their retention policy and register and review these on a regular basis.  Please contact us if you would like to know more about our Data Retention, Archiving and Destruction.

Where do we store your information
Read more

TVAA place great importance on the security of all our supporters’, customers’, employees’ and patients’ data.  We have security measures in place to protect against the loss, misuse and alteration of personal data under our control. Only authorised personnel may access user information and we use secure sockets layer (SSL) software to encrypt financial and personal information you input before it is sent to us.

Your information is stored by us on computers located in the UK and on servers within the EU.  We may also store your information in paper files.

Some of the personal information collected from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by individuals operating outside the EEA who work for us or are working on our behalf. This includes staff engaged in, among other things, the processing of your payment details and the provision of support services.  TVAA will only use services that are covered by the international data protection agreement known as Privacy Shield.  If you would like to receive further information about which services we use that may transfer your data outside the EEA and the security around such services then please contact us at [email protected].

We will always ensure that your data is transferred safely and securely and that our data processors agree, by way of data sharing agreements, to process your data in such a way as to be compliant with GDPR.In cases when we use external websites provided by other organisations such as Twitter, YouTube or Facebook, then we would ask you to consult their privacy policies.

Where we have provided a password enabling you to access specific parts of our websites, it is your responsibility to keep this password confidential.  We advise you not to share your password with anyone.

Your rights
Read more

Under data protection law you have rights you need to be made aware of.  The rights available to you depend on our reason for processing your information.

  • The right to access your personal information

You have the right to ask us for copies of your personal information. This right always applies.  There are some exemptions, which means you may not always receive all the information we process.

  • The right to edit and update your personal information

You have the right to ask us to rectify information you think is inaccurate.  You also have the right to ask us to complete the information you think is incomplete.  This right always applies.

  • The right to erasure

You have the right to ask us to erase your personal information in certain circumstances.

  • The right to restrict processing of your personal information

You have the right to ask us to restrict processing of your information in certain circumstances.

  • The right to data portability

This only applies to information you have given us.  You have the right to ask that we transfer the information you gave us from one organisation to another or give it to you.  The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.

  • The right to object – including automated decision making and profiling

You have the right to object to processing if we are able to process your information because the process forms part of our public tasks, or in our legitimate interests.

You are not required to pay any charge for exercising your rights and we have one month to respond to your request.

If you make a request relating to any of the rights listed above, we will consider each request in accordance with all applicable data protection laws and regulations.

You can make the above requests by emailing [email protected] or by writing to:

The Data Protection Officer

Thames Valley Air Ambulance

Ground Floor

Stokenchurch House

Oxford Road



HP14 3SX


Complaints, disputes, or privacy concerns?
Read more

TVAA are committed to working with you to obtain a fair and rapid resolution to any complaints or disputes relating to privacy matters. 

If you require more information or have any questions or concerns please contact us by email at [email protected]; in writing to Data Protection Officer, Thames Valley Air Ambulance, Ground Floor, Stokenchurch House, Oxford Road, Stokenchurch, Bucks HP14 3SX or calling 0300 999 0135

You also have the right to make a complaint directly to the Information Commissioner’s Office (ICO).  They can be contacted at https://ico.org.uk/global/contact-us/

Posting or sending content that you do not own
Read more

We have the right to disclose your identity to any third party claiming to own any content that you posted.

Providing a patient story
Read more

The inspirational stories from our former patients illustrate to our local community the difference we bring.  By sharing your story with us, you will be helping to raise awareness of our vital service.

We will only share this information if we have obtained the explicit and informed consent of the individual involved or their parent or guardian if they are under the age of 18. 

This information may be made public by us at events, in materials promoting our campaigning and fundraising work, or in documents such as our annual report.

The information provided to us as part of your story will be retained for a period of three years, as explained in our consent documentation, and will always be held securely with restricted access in place.

Patient data
Read more

In order to carry out our work and provide care for patients, TVAA will obtain confidential information.  The records about our patient’s health, treatment and care that we retain may be held in written form (manual records) and/or in secure digital format.

All TVAA staff have a legal duty to keep patient information safe and confidential within UK legislation including GDPR and the Data Protection Act 2018 along with other relevant healthcare regulations.

Patient information will only be shared if others, involved in their care, have a genuine need for it e.g. copies of patient records are handed over to the receiving hospital, so treatment can be continued safely and without delay. 

Patient information may be shared with the Care Quality Commission (CQC), the independent regulator of health and social care in England.  The CQC have powers under the Health & Social Care Act 2008 to access and use information where they consider this is necessary for them to carry out their function as the regulator.  The CQC privacy policy can be found at https://www.cqc.org.uk/about-us/our-policies/privacy-statement#public

We will not disclose your confidential patient information to third parties without your permission unless there are exceptional circumstances such as when the health or safety of others is at risk or where the law requires information to be passed on.

Patients/next of kin will not be contacted for promotion or marketing purposes without explicit consent.

Anyone who receives information from us also has a legal obligation to keep it confidential.

Patient Data Used for Research Purposes

TVAA participate in research studies which may involve confidential patient information gathered directly during the course of our work and information provided from the NHS.  Confidential patient information is information which identifies you and says something about your health care or treatment.  Wherever possible research will be conducted without using your confidential patient information and will use data that does not identify you (anonymised). Information that only identifies you, like your name and address is not considered patient confidential information and may still be used.

You can stop your confidential patient information being used for research and this will not affect your individual care or treatment.  For more information regarding your NHS confidential patient information and opting out of its use for research please visit www.nhs.uk/your-nhs-data-matters.

For opting out of TVAA patient confidential information being used for research purposes please contact [email protected] or [email protected].

Your Health Records

Data Protection legislation allows you to find out what information about you is held both on computer and in certain manual records.  This is your “right of subject access” and applies to your health records.  You are entitled to receive a copy, but you also need to be aware that in certain circumstances, your right to see some detail in your health record might be limited in your own interest or for other reasons.  Your health record might include:

  • Basic details about you e.g. your address and next of kin
  • Notes and reports about your health and any treatment/care you need, have had or may need
  • Details and records about treatment/care you are receiving
  • Results of investigations
  • Relevant information from other health professionals, relatives or those who care for you and know you well
  • Follow up information on our in-hospital care, diagnosis and interventions.

Requests for personal information

All requests for patient personal information from TVAA should be made to: [email protected]

Raising Concerns

TVAA strive to ensure our patients and those we serve receive the best care always.

If you feel there has been a mistake or misunderstanding in the care, we have provided then we would like to hear from you.  We can assist in resolving your concerns and ensure that we learn from any mistakes.

TVAA would like to resolve concerns or queries informally however, if you are unhappy with the treatment or service you have received from us you may wish to make a formal complaint.  Our complaints procedure and policy can be found on our website: https://www.tvairambulance.org.uk/complaints

If TVAA are aware that we have not operated to our high standards and an incident occurs, we will be open and honest following our Duty of Candour ensuring those involved are notified in a timely manner.  A full and thorough investigation will be conducted ensuring patient care and safety are paramount and the same mistake is not made again.

Contacts:        Patient Liaison Manager

                        Caldicott Guardian

                        Senior Information Risk Owner

                        Data Protection Officer

Job applicants
Read more

As part of any recruitment process, TVAA collects and processes personal data relating to job applicants. We are committed to being transparent about how we collect and use that data and to meeting our data protection obligations.

What information do we collect?

We collect a range of information about you. This includes:

  • your name, address and contact details, including email address and telephone number;
  • details of your qualifications, skills, experience and employment history;
  • information about your current level of remuneration, including benefit entitlements;
  • whether or not you have a disability for which TVAA needs to make reasonable adjustments during the recruitment process;
  • information about your entitlement to work in the UK; and
  • images of candidates taken during the recruitment process where we may have an extended recruitment period due to assessment days taking place.

We may collect this information in a variety of ways. For example, data might be contained in application forms, CVs or resumes, obtained from your passport or other identity documents, or collected through interviews or other forms of assessment, including online tests.

We may also collect personal data about you from third parties, such as references supplied by former employers, information from employment background check providers and information from criminal records checks. We will seek information from third parties only once a job offer to you has been made and will inform you that we are doing so.

Data will be stored in a range of different places, including on your application record, in HR management systems and on other IT systems (including email).

Employee data
Read more

TVAA collects and processes personal data relating to its employees to manage the employment relationship. We are committed to being transparent about how we collect and use that data and to meeting our data protection obligations.

What information do we collect?

We collect and process a range of information about you. This includes but is not limited to:

  • your name, address and contact details, including email address and telephone number, date of birth and gender;
  • the terms and conditions of your employment;
  • details of your qualifications, skills, experience and employment history, including start and end dates, with previous employers and with the TVAA;
  • for specific clinical roles, details of HCPC, GMC registration, IHCD or driving competency
  • DVLA checks
  • information about your remuneration, including entitlement to benefits such as pensions or insurance cover;
  • details of your bank account and national insurance number;
  • information about your marital status, next of kin, dependants and emergency contacts;
  • information about your nationality and entitlement to work in the UK;
  • information about your criminal record;
  • details of your roster (days of work and working hours) and attendance at work;
  • details of periods of leave taken by you, including holiday, sickness absence, family leave and sabbaticals, and the reasons for the leave;
  • details of any disciplinary or grievance procedures in which you have been involved, including any warnings issued to you and related correspondence;
  • assessments of your performance, including appraisals, performance reviews and ratings, training you have participated in, performance improvement plans and related correspondence;
  • information about medical or health conditions, including whether you have a disability for which we need to make reasonable adjustments;
  • details of trade union membership;
  • images;
  • CCTV recordings; and
  • Vehicle telematics

TVAA collects this information in a variety of ways. For example, data is collected through application forms, CVs or resumes; obtained from your passport or other identity documents such as your driving licence; from forms completed by you at the start of or during employment (such as benefit nomination forms); from correspondence with you; or through interviews, meetings or other assessments.

In some cases, TVAA collects personal data about you from third parties, such as references supplied by former employers, information from employment background check providers and information from criminal records checks permitted by law.

Data is stored in a range of different places, including in your personnel file, in the Company's HR management systems and in other IT systems (including our email system).

Why do we process personal data?

We need to process data to enter into an employment contract with you and to meet our obligations under your employment contract. For example, we need to process your data to provide you with an employment contract, to pay you in accordance with your employment contract and to administer benefit, pension and insurance entitlements.

In some cases, we need to process data to ensure that we are complying with our legal obligations. For example, we are required to check an employee's entitlement to work in the UK, to deduct tax, to comply with health and safety laws and to enable employees to take periods of leave to which they are entitled. For certain positions, it is necessary to carry out criminal records checks to ensure that individuals are permitted to undertake the role in question.

In other cases, we have a legitimate interest in processing personal data before, during and after the end of the employment relationship. Processing employee data allows us to:

  • run recruitment and promotion processes;
  • maintain accurate and up-to-date employment records and contact details (including details of who to contact in the event of an emergency), and records of employee contractual and statutory rights;
  • operate and keep a record of disciplinary and grievance processes, to ensure acceptable conduct within the workplace;
  • operate and keep a record of employee performance and related processes, to plan for career development, and for succession planning and workforce management purposes;
  • operate and keep a record of absence and absence management procedures, to allow effective workforce management and ensure that employees are receiving the pay or other benefits to which they are entitled;
  • obtain occupational health advice, to ensure we comply with duties in relation to individuals with disabilities, meet our obligations under health and safety law, and ensure that employees are receiving the pay or other benefits to which they are entitled;
  • operate and keep a record of other types of leave (including maternity, paternity, adoption, parental and shared parental leave), to allow effective workforce management, to ensure that we comply with duties in relation to leave entitlement, and to ensure that employees are receiving the pay or other benefits to which they are entitled;
  • ensure effective general HR and business administration;
  • provide references on request for current or former employees;
  • respond to and defend against legal claims.

Where we rely on legitimate interests as a reason for processing data, we have considered whether those interests are overridden by the rights and freedoms of employees or workers and have concluded that they are not.

Some special categories of personal data, such as information about health or medical conditions, is processed to carry out employment law obligations (such as those in relation to employees with disabilities and for health and safety purposes). Biometric data is processed at RAF Benson solely for securing and restricting access to our drug store room.

Who has access to data?

Your information will be shared internally, including with members of the HR and recruitment team, your line manager, Directorate leads and IT staff if access to the data is necessary for performance of their roles.

We share your data with third parties to obtain pre-employment references from other employers, obtain employment background checks from third-party providers and obtain necessary criminal records checks with Disclosure and Barring Service, HR consultancy to support and advise on all aspects of HR and to maintain legal compliance.

TVAA also shares your data with third parties that process data on our behalf and these include but are not limited to provision of the following services:

  • Payroll
  • Benefits
  • Occupational health
  • IT services
  • Time and attendance
  • CCTV
  • HR consultants
  • Legal consultants
  • DBS checks

We may also share your data with third parties in the context of a sale of some or all its business. In those circumstances the data will be subject to confidentiality arrangements.

TVAA will not transfer your data to countries outside the European Economic Area.

How long do we keep employee data for?

We will hold your personal data for the duration of your employment. The periods for which your data is held after the end of employment are set out in our retention policy.

What if you do not provide personal data?

You have some obligations under your employment contract to provide us with data. You are required to report absences from work and may be required to provide information about disciplinary or other matters under the implied duty of good faith. You may also have to provide us with data to exercise your statutory rights, such as in relation to statutory leave entitlements. Failing to provide the data may mean that you are unable to exercise your statutory rights.

Certain information, such as contact details, your right to work in the UK and payment details, must be provided to enable us to enter into a contract of employment with you. If you do not provide other information, this will hinder our ability to administer the rights and obligations arising as a result of the employment relationship efficiently.

Automated decision-making

Employment decisions are not based solely on automated decision-making.

Volunteer data
Read more

Thames Valley Air Ambulance is committed to supporting volunteers and recognises the value-added benefit volunteers bring to the Charity.

During our relationship with you, it will be necessary for us to collect and process your personal data and, in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018, TVAA are committed to being transparent about how we collect and use that information.  This section provides you with information as to what personal information is collected and processed and what your rights are in relation to that processing. 

Why do we process volunteer information?

TVAA will use information about you for the following primary reasons:

  1. To perform the services you have requested, such as processing your volunteer interest, sending you our newsletter and other information about the Charity.
  2. To manage and improve our site.

We may collect information about your interaction with the Site and the services on the Site. This may include information about your computer and, where available, your IP address, operating system and browser type. We reserve the right to perform statistical analysis of user behaviour and characteristics in order to measure interest in and use of the various areas of the Site and to ascertain the number of users that have visited particular web pages. We also keep track of what you do with our newsletters when you receive them for trends and statistics and to evaluate the efficiency of our newsletter and information service.

We may also use your information for detection of fraud and research purposes.

What information we may collect about you

  • Your name, address and contact details including email address and telephone number(s)
  • Details of your qualifications, skills, interests and previous volunteer experience(s)
  • Your photographic image
  • Health information
  • Date of birth
  • Identification documents (i.e. driving license for those driving Charity vehicles)
  • Name, address and contact details (including email) and relationship with nominated referees
  • Whether you have a disability for which TVAA needs to make reasonable adjustments during the recruitment process or whilst volunteering at events

TVAA may collect this information in a variety of ways for example, data might be contained in application forms, obtained from identify documents or from reference/background checks.

Who has access to your data?

Your information may be shared internally for the purposes of the volunteer recruitment process. This includes members of HR, the recruitment team, interviewers involved in the process, Fundraising team and IT staff if access to data is necessary for the performance of roles.

A limited amount of your data (e.g. name, telephone number, email address) may also be shared externally with event organisers or other volunteers to allow for communication about events you may be attending as a volunteer.

What if you do not provide personal data?

You are under no statutory or contractual obligation to provide data to TVAA during the volunteer recruitment process however, if you do not provide the information we may not be able to process your application properly or at all.

How long will TVAA keep your data?

If your application for becoming a volunteer is unsuccessful, TVAA will hold your details on record for a period of 6 months after the end of the process.  At the end of that period or once you withdraw consent, your data is deleted or destroyed.

If your application is successful, then the personal information gathered during recruitment will be held in a secure location with access restricted to only those who require it.  On notification that you no longer wish to be a volunteer for the Charity, your details will be deleted in line with our retention policy.

Changes to this policy
Read more

We keep our privacy policy under regular review to make sure it is up to date and accurate.

V1.4 update includes new sections for Job Applicants, Employee Data, Volunteer Data and Patient Data along with the addition of a section regarding Payment Transactions.