Our Privacy Notice & Privacy Notices Relating to Our Services

This privacy notice lets you know what happens to any personal data that you give to us, or any that we may collect from or about you.  It applies to the personal information processed by or on behalf of Norfolk Community Health and Care NHS Trust, NCH&C and is required for compliance to General Data Protection Regulation (GDPR).   

What information do we collect about you?

We only collect information about you for lawful purposes in order for us;

  • to provide the most effective and highest quality clinical care and
  • to assist in the running of this NHS Trust.

This includes management of patient records, communications concerning your clinical and other care, ensuring the quality of your care and the best outcomes by clinical audit and participating in research as well as the management and clinical planning of services both now and for the future.

In some areas of our Trust we ask for consent from you to process your information, for example, in participating in patient experience surveys, asking to use photographs for media or staff training. 

The Trust has a duty to you to protect your information and all our staff are bound in their contracts of employment, and additionally, in the case of healthcare professionals, by accountability to their professional bodies.

How do we maintain the confidentiality and security of your records? 

We are committed to protecting your privacy and will only use information collected lawfully in accordance with:

  • Data Protection Act 2018
  • The General Data Protection Regulations 2016
  • Human Rights Act 1998
  • Common Law Duty of Confidentiality
  • NHS Codes of Confidentiality, Information Security and Records Management

Information held about you, whether on paper or computerised, is protected from unauthorised access. 

All the personal data we process is processed by our staff in the UK however for the purposes of IT hosting and maintenance this information may be located on servers within the European Union.

How is information used?

We use the information given to us by people who use our services to provide them with safe and effective care.  This includes: 

  • processing for the provision of healthcare (direct care) or the management of healthcare systems (invoice validation, commissioner reporting, quality audits – essentially, mandated activity for legal obligations);
  • processing for ensuring high standards of quality and safety of healthcare – which includes research, audit, service improvement and addressing public health/inequalities.
  • processing for archiving purposes, statistical analysis and research in public interest or public duty
  • processing for ‘vital interests’ (safety, safeguarding, public safety)
  • under the direction of a Court or to assist in serious crime or fraud

See Appendix A for a list of organisations we share information with and the legal reasons for doing so.

If you have any questions or concerns about how information is used or where this information is published, or feel you will be put at risk by the disclosure of any of this information, please contact the Head of Information Governance or the Caldicott Guardian on 01603 785879 or IG@nchc.nhs.uk whose role it is to oversee all issues related to the use of patient information within the Trust. 

How long do we hold your information for?

NCH&C hold records in accordance with the Records Management Code of Practice for Health and Social Care 2016.  Appendix 3 of the Code contains the detailed retention schedules and sets out the minimum time that records should be retained.

Data subject rights

The General Data Protection Regulation (2016) gives you the general right to apply to see or to be given a copy of personal data held about you.  For further information please contact the Trust’s Information Governance Officers, on 01603 785879 or email IG@nchc.nhs.uk 

You also have the right to request rectification or erasure of personal data, to restrict or object to the processing and to the right of data portability.  If consent is relied on, you have the right to withdraw consent to processing at any time.   If you wish to do any of these things, please contact the Information Governance team on 01603 785879 or email IG@nchc.nhs.uk 

What should you do if your personal information changes?

Please contact the organisation as soon as any of your details change, this is especially important for changes or address or contact details (such as your mobile phone number).

We may from time to time ask you to confirm that the information we currently hold is accurate and up-to-date.

Data Protection Officer, (DPO)

NCH&C is a public authority and therefore is legally required to appoint a DPO.  The DPO assists with monitoring internal compliance, informing and advising on data protection obligations, providing advice regarding Data Protection Impact Assessments (DPIAs) and acting as a contact point for data subjects and the supervisory authority.  Their contact details are:

Matthew Poole
Data Protection Officer
Norfolk Community Health and Care
Norwich Community Hospital
Bowthorpe Road
Norwich,NR2 3TU
Telephone: 01603 272619, email IG@nchc.nhs.uk 

 Complaints/Appeals

In the event that you believe NCH&C NHS Trust has not complied with the Act, either in responding to a request or in our general processing of your personal information, you should contact the Trust’s Head of Information Governance, NCH&C, Norwich Community Hospital, Bowthorpe Road, Norwich, NR2 3TU.

If you remain unsatisfied you can then contact the Trust’s Senior Information Risk Owner (SIRO), NCH&C, Norwich Community Hospital, Bowthorpe Road, Norwich,NR2 3TU. You also have the right to complain to, appeal to or raise your concerns with the Information Commissioner, Wycliffe House, Water Lane, Wilmslow, Cheshire,SK9 5AF Enquiry Line: 01625 545700 or by e mail to: www.ico.gov.uk 

Further Information

This notice does not give a full explanation of the Law. If it doesn’t answer your questions or you would like more detailed information please contact the Trust’s Head of Information Governance, NCH&C, Norwich Community Hospital, Bowthorpe Road, Norwich, NR2 3TU

Services and Conditions

Getting to your appointment

Our services

Search for the service you have been referred to and find out how to get to your appointment.

Conditions and available services

Conditions

Search for information on your condition and link to the services that can help.

Related Pages

Related Documents

No related documents

Related Sites

Share this page