Privacy and Cookies

At St John Ambulance we take your privacy very seriously and are committed to protecting the security of your personal information.

This Notice explains how we, St John Ambulance, and our affiliated trading company Support St John Limited may collect and use the information you give us, the conditions under which we may disclose it to others and how we keep it secure.

We may change this Notice from time to time so please check this page occasionally to ensure that you’re happy with any changes. By using our websites, you agree to be bound by this Notice.

St John Ambulance has appointed a Data Protection Officer, who can help you with any queries about the information in this privacy notice: by email - or by post- marked for the attention of the Data Protection Officer at St John Ambulance, 27 St John's Lane, London EC1M 4BU.

This Notice contains the following sections:

Who we are

St John Ambulance® is a registered charity in England and Wales (charity number 1077265-1). We are also a company limited by guarantee (company number 3866129) and have a wholly-owned trading subsidiary, Support St John Limited (company number 1181644), each of which trades as St John Supplies®.

The information in this Privacy Notice relates to personal information which is obtained by the above entities and for which St John Ambulance® is the Data Controller under data protection legislation.

What type of personal information is collected from you

How we collect your personal information

How we use your personal information

Your right to withdraw consent to processing of personal information

Data sharing

We will not sell or rent your information to third parties.

We may have to share your data with third parties, as described below. If we do, you can expect a similar degree of protection in respect of your personal information to that provided by us. We require third parties to respect the security of your data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
We may pass your personal information to our third-party service providers, including contractors and designated agents, and other associated organisations for the purposes of completing tasks on our behalf (for example to process donations and payments, to fundraise, send you St John Ambulance® communications, to supply you with goods and services, to resolve product queries or issues and to assist us with marketing analysis). However, when we use third party service providers, we disclose only the personal information that is reasonably necessary to deliver the service.

We may transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or re-organisation, or if we’re under a legal duty to disclose or share your personal data in order to comply with or enforce any legal obligation or rights or to enforce or apply our terms of use or to protect the rights, property or safety of our supporters and customers. However, we will aim to protect your privacy.

We may share your personal information with our parent charity, The Priory Of England And The Islands Of The Most Venerable Order Of The Hospital Of St. John Of Jerusalem (charity number 1077265) where reasonably necessary.

Data transfers to parties outside the EU

There may be some instances where your personal information is processed or stored outside of the EU. In those instances, we will ensure that appropriate safeguards are in place for that transfer and storage as required by applicable law.

St John Ambulance® operates in the Baliwicks of Guernsey, Jersey and in the Isle of Man, each of which are outside of the EU. Personal information provided to St John Ambulance® may be given to our local offices in those territories and stored in data retrieval systems in the territory, but only when you request information or services relating to our operation in those territories. There is an adequacy decision by the European Commission for these countries, which means that they are deemed to provide an adequate level of protection for your personal information.


How long we keep your personal information for

How we keep your data safe

Changes to your personal information

Your rights in connection with personal information

By law you have the right to:

  • Request access to your personal information. This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
  • Request correction of the personal information we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
  • Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us to continue processing it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
  • Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
  • Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for process it.
  • Request the transfer of your personal information to another party.

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please send a written request to our Data Protection Officer by email- or by post- marked for the attention of the Data Protection Officer at St John Ambulance, 27 St John's Lane, London EC1M 4BU.

We will ask you for information to confirm your identity and, where applicable, to help us search for your personal information. Except in rare cases, we will respond to you within 30 days after we have received any request (including any identification documents requested).

Use of cookies

Organisation contact

Right to make a complaint

Policy last updated May 2022