We describe here why we (NHS Improvement) need your data, how it will be used and who it will be shared with.
How we use personal information is determined by the Data Protection Act 1998, (the General Data Protection Regulation from May 2018), the Human Rights Act 1998, the Freedom of Information Act 2000, relevant health service legislation and the common law duty of confidentiality.NHS Improvement has an appointed data protection officer, who has expert knowledge of data protection law and practices, and who can be contacted at NHSI.Privacy@nhs.net.
What information we collect
You will be asked to submit and share personal information about yourself with NHS Improvement (eg name and email address) to receive or use services on our website. Such services include bulletins, email updates, surveys and website feedback.
We will also collect your personal data when you submit a request under the Freedom of Information Act, make a subject access request under the Data Protection Act or make a complaint that we need to investigate.
When you browse through the information on the NHS Improvement website, it does not store or capture your personal information. We do log your IP address as it is automatically recognised by our web server. We will not use this information for any processing purposes.Your information will only be used by NHS Improvement or contracted parties to NHS Improvement for those purposes/services you choose to use. Your information shall not be disclosed unless we are obliged or permitted by law to do so.
What we do with information we hold
Personal information collected and described above will be held in electronic form. It may be used to respond to you when you contact NHS Improvement or when NHS Improvement considers and investigates a complaint or whistleblowing case, for sending promotional communications about the services you have chosen to receive or for conducting surveys to help improve the services our website offers.
Information shared with other third parties
Personal information collected from you for the purposes of considering and responding to a complaint or whistleblowing case about an NHS trust or NHS Foundation Trust in the South of England may be shared with the NHS England South regional teams.
From 1 October 2017 NHS England and NHS Improvement began to test joint working arrangements for the South East and South West regions. The key aim is to help ensure the most efficient and effective use of NHS resources which means staff from NHS England will be accessing NHS Improvement information and vice versa.Sharing your information across the two organisations for this purpose shall be covered by formal data sharing arrangements in place to govern this pilot.
How long do we retain your information?
All records held by NHS Improvement will be kept for the duration specified by national guidance from the Department of Health, found in the Records management: NHS code of practice for health and social care 2016, supplemented by NHS Improvement’s own retention schedule. In all circumstances, data will be retained in accordance with data protection requirements and kept for no longer than is absolutely necessary. Once data is no longer required it will be destroyed securely.
Transferring your information outside Europe
As part of the services offered to you through your use of this website, the information which you provide to us may be transferred to countries outside the European Union (EU). If we transfer your information outside the EU in this way, we will take appropriate security measures to ensure your privacy rights continue to be protected as outlined in this notice.
- measure how many people are using our website, so we can make it easier and faster to use
- analyse data, anonymously, to help us understand how people interact with our website
The only cookies used on our website are for anonymous analysis of your visit to the site using the Google Analytics service and a cross-site request forgery respectively. These are third party cookies and are not tracked across multiple sites.
|Name||Content and description||Expires|
|_ga||Randomly generated number||2 years|
|_gat||Randomly generated number||2 years|
Cross-site request forgery
|Name||Content and description||Expires|
|csrftoken||Randomly generated string||1 year|
How to control and delete cookies
Alternatively, you may wish to visit About Cookies, which contains comprehensive information on how to do this on a wide variety of browsers. You will also find details on how to delete cookies from your machine as well as more general information about cookies.
If you do not wish for us to anonymously track your visit through Google Analytics, Google publishes a browser add-on that allows you to choose for this information to not be recorded.