Use of your information
What we do with your data
All personal information held by the Royal College of Physicians of London (RCP) will be held in accordance with the UK General Data Protection Regulation 2021 and all other relevant privacy legislation.
The RCP collects data during membership application and registration; through subscription to activities, resources, services, and training; and through partnership activities, resources, services and training.
Why we need to collect and use your data
The RCP maintains information about members and other service users in order to provide membership benefits, educational products, and research services. Information is also retained for monitoring training, research and statistical analysis, in data comparisons to verify qualifications and to prevent fraudulent activity.
The RCP uses information about members and other service users for fundraising, including fundraising research, to further advance the mission of the RCP.
The RCP commits to using your information in accordance with your mailing preferences. Please contact membershipqueries@rcp.ac.uk or log in to your MyRCP account on the website to amend your profile.
Who we share your data with outside the RCP
The RCP shares information across internal departments to improve our communications and services; and with appropriate third parties* in order to improve clinical practice, medical training and our services. The RCP will not sell information about members and other service users to third parties.
*Non-exclusive list: Department of Health; education, CPD and training programmes in higher education and the NHS; examination centres; Federation of Royal Medical Colleges [Academy of Physicians Colleges]; General Medical Council; postgraduate deaneries and overseas equivalents.
The RCP discloses personal details to appropriate suppliers, in order for members and other service users to take advantage of any discounts on products and services offered by the RCP’s partners.
How we protect your data outside the territories covered by EU GDPR
All data sharing outside these territories is covered by full written agreements which include GDPR requirements.
How long we keep your data and why
The RCP collects and holds data on members and other service users in a range of systems, each with their own retention requirements. Further information is available in the full processing statements for individual systems, as below.
Where we got your data from, if not you
The RCP collects and holds data on members and other service users in a range of systems, each with their own data sources. Further information is available in the full processing statements for individual systems and will be provided in response to individual requests, as required.
Your rights
You have the right to access all information which identifies you as a living person, held on RCP systems. You have the right to a copy of your data in a standard format, where technically possible. You also have the right to rectify factual errors in current RCP systems and processes. The above rights apply across all work areas in the RCP. If you wish to exercise these rights, contact the data protection officer: dataprotection@rcp.ac.uk.
The right to restrict processing, stop your data being processed or have your data deleted will vary across RCP work areas, depending on the circumstances. Further information is available in the full processing statements for individual systems and will be provided in response to individual requests, as required.
Where we use automated decision making and how this affects you
The RCP does not use automated decision making in managing either membership or service activities.
Who makes the decisions about using your data, if not the RCP
The RCP works with a range of partners to deliver membership activities, educational services and research programmes. Further information is available in the full processing statements for individual systems and will be provided in response to individual requests, as required.
Who to contact at the RCP and how to complain
If you wish to know more about how we manage privacy at the RCP, or you wish to make a complaint, contact the data protection officer: dataprotection@rcp.ac.uk.
The UK regulator for privacy law is the Information Commissioner's Office (ICO). See their website for further information on your rights.
If the use of your data changes, we will place an updated version on this page. Regularly reviewing this information ensures you are always aware of what data we collect, how we use it and under what circumstances, we will share it with other parties.
Processing statements
RCP clinical programmes and audits:
RCP library, archive, heritage library and museum:
Further information can be provided in response to individual requests, as required.
