top of page


This Privacy Notice explains how Bone Sarcoma Peer Support (BSPS) collects, uses, stores and handles your personal data. In particular, it explains:

  • The legal basis for processing personal data

  • What personal data we collect

  • How and why we collect your personal data

  • How we share your personal data

  • How we store and protect your personal data

  • Your rights in relation to your personal data

Legal basis
We can only process and use your personal data if there is a legal basis for doing so.

Legitimate interests

The processing of your data is necessary for our legitimate interests.
We have a legitimate interest in collecting, storing and processing personal data to:

  • Match and connect mentors/mentees

  • Promote, administer and evaluate a mentoring service

  • Improve operations

We will use your personal data to purse these legitimate interests in a way that does not materially impact upon your rights, freedom and interests.


We can collect and process your data if you have given clear consent.

What personal data do we collect
The list below sets out the personal data we may collect from you:

  • Name

  • Date of birth

  • Gender

  • Ethnicity

  • Address

  • Contact details, such as telephone number(s) and email address

  • Information about your health, in particular that relating to the diagnosis and treatment of your bone sarcoma

  • Information regarding support needs

  • Other data provided in the process of matching mentors and mentees

  • Communication preferences and Cookies ID

How and why we collect and use your personal data
We collect most of your personal data directly from you. We collect this from you when you show an interest being a mentor or a mentee in our mentoring service. We may also collect information from our website.
We use your data for the following purposes:

  • To communicate with you

  • To create a profile to match mentors and mentees

  • To connect mentors and mentees

  • To promote, administer and evaluate the mentoring service

  • To improve operations

  • For record keeping

  • To comply with our legal obligations

  • For our legitimate interests

  • Where we have been given consent

How we share your personal data
We will not share your personal data with another individual, group or organisation except in the following limited circumstances:

  • Where we are under a legal or regulatory duty to do so

  • Where it is necessary to do so to enforce our contractual rights

  • To assist the police or security services with the prevention or detection of crime

  • Where such disclosure is necessary to protect the safety or security of any persons

  • Otherwise as permitted under applicable law

  • With your agreement

How we store and protect your personal data
Your data will be stored securely. Data stored electronically will be kept in files and accounts that are password protected. All devices used to access data will themselves be password protected. We use Microsoft Office 365, which operates within the EU and we are therefore confident will be complying with GDPR and the relevant data processing legislation.

We have appropriate security measures to prevent personal data from being accidentally lost, or used or accessed unlawfully. We limit access to your personal data to those who have a legitimate need to access it. Those processing your information will do so only in an authorised manner and will keep it confidential. In the unlikely event of a breach, we will notify you and the Information Commissioners Office within 72 hours of discovery of the
We will not hold any personal data longer than is necessary and individuals can request their data be deleted at any time.

Your rights
You have the following rights:

  • The right to request access to personal data we hold about you

  • The right to request a correction of your personal data when incorrect, out of date or incomplete

  • A right to request a restriction to the processing of personal data

  • A right to object to the processing of personal data or the continued processing of personal data

  • A right to request that your data be deleted

We will process any request as soon as reasonably practicable. Please bear in mind when making requests that BSPS is formed entirely of volunteers who carry out their work in addition to other commitments. However, we will aim to deal with any request within 30 days.

If you have a complaint regarding any aspect of your personal data, please email
If you are not satisfied with the outcome of your complaint, you can complain to the Information Commissioner’s Office who may be contacted at or by telephone on 0303 123 1113.

Bone Sarcoma Peer Support
Telephone: 0330 133 4314
Last updated 27 May 2021

bottom of page