Privacy Notice for Our Service Users

We collect and keep personal information about you when you use, or come into contact with, our services. Depending on the service you receive, this information may be held electronically (on our computer systems), on paper, or in both formats. 

Healthcare 

To support your healthcare, we collect: 

• Basic information about you, such as your name, address, date of birth, next of kin and GP. 
• Contact details, including your home or mobile telephone number and email address, where you have provided these so we can contact you by phone, email or text message. 
• A record of when we have had contact with you, such as appointments at an outpatient clinic, visits to the Emergency Department (A&E), or hospital admissions. 
• Clinical notes recorded by doctors and other healthcare professionals during your care. These may include your symptoms, allergies, medicines, diagnosis, treatment, and any long-term health conditions, such as diabetes or asthma. 
• Results of tests and investigations, such as blood tests, X-rays and scans. 
• Information from other healthcare professionals involved in your care, or who have referred you to our services, such as your GP. 
• Lifestyle information that may be relevant to your care, for example whether you smoke. 
• Information about your ethnicity, where this may be relevant to your healthcare. 
• Information about your religious beliefs, where this may affect how you wish to be treated or supported. 
• Information provided by other people involved in your care, such as a relative, carer or someone who supports you. 

• Personal information about other people who may be involved in, or affect, your health and social care. This may include relatives, friends, people you live with, people who attend hospital appointments with you, and hospital visitors. 

This information is used to: 

Doctors and other healthcare professionals create and maintain a detailed record of your care. This provides a complete record of your past and current health and helps guide the care and treatment you receive. 

As part of your care, we may carry out routine reviews or check test results. During these reviews, we may: 

• Contact your Clinical Care Team at the Trust if they are managing an existing health condition. 
• Contact your GP if the referral or request came from them. 

• Occasionally contact you, or your nominated representative, directly. 

We are committed to providing high-quality, safe care. We may also use the information we hold about you to help us manage, monitor and improve our services, as well as support the wider NHS. For example, we may use your information to: 

• Provide you with the best possible care. 
• Support decisions about your care and treatment. 
• Make sure your treatment is safe and effective. 
• Work with other professionals involved in your care, such as your GP. 
• Review the care we provide to help ensure it meets high standards. 
• Measure and report on how effective our services are. 
• Investigate complaints, legal claims and incidents. 
• Protect and improve public health. 
• Plan services to meet future patient needs. 
• Support clinical audit. Clinical audit helps us review patient care against agreed standards, identify areas for improvement and monitor whether changes have improved the care we provide. 
• Ensure Trust funds are used appropriately and provide value for money. 
• Educate and train healthcare professionals. 
• Undertake research. Research proposals are reviewed by the appropriate Research Ethics Committee. 
• Produce statistics and reports about our performance. 

You can find out more about our individual services on our website. Many of our services also provide leaflets to explain more about the care and treatment they provide. 

Teaching 

The Trust is a teaching organisation and plays an important role in the education and training of both current and future healthcare professionals. We work with universities, trainees and students to deliver training programmes that help develop the skills and knowledge of our clinical workforce. This supports the delivery of high-quality patient care. 

Staff involved in your care may sometimes be accompanied by students as part of their training. You have the right to refuse the presence of a student, and this will not affect the care you receive. 

Healthcare professionals and students must demonstrate that they have the skills and knowledge required for their role. To do this, they may need to share examples of their work with authorised educational organisations that assess professional competence. Any information used for these purposes will be anonymised so that you cannot be identified. This helps the Trust maintain high professional standards and continue to provide safe and effective care. 

SMS Texting and Call Recording 

When you attend the Trust for an appointment or procedure, we may ask you to confirm your contact details, including your home or mobile telephone number. 

If you provide a contact number, we may use it to send appointment reminders by text message or automated telephone call. We may also contact you to give you the option to confirm or cancel your appointment. 

Keeping your contact details up to date helps us communicate with you about your care and make the best use of appointment and procedure times. 

When you contact the Trust by telephone, calls are routinely recorded for the following purposes: 

• To help prevent crime and misuse, and to protect staff. 
• To make sure staff follow Trust policies and procedures. 
• To support quality assurance and quality control. 
• To support training, monitoring and service improvement. 

NHS Login 

Please note that if you access our service using your NHS login details, the identity verification services are managed by NHS England. NHS England is the controller for any personal information you provided to NHS England to get an NHS login account and verify your identity, and uses that personal information solely for that single purpose. For this personal information, our role is a “processor” only and we must act under the instructions provided by NHS England (as the “controller”) when verifying your identity. To see NHS login’s Privacy Notice and Terms and Conditions, please visit  NHS login Privacy Notice and Terms & Conditions. This restriction does not apply to the personal information you provide to us separately.  

NHS App 

If you view or manage your hospital appointments via the NHS App we share your data with NHS England who operate the NHS App and provide this functionality, known as NHS Wayfinder services.  For more information see the NHS Wayfinder services privacy policy. This privacy policy explains how NHS England and other organisations may use your data for this purpose. 

Digital Technology 

The Trust uses a range of working practices and technologies to help provide safe, effective and high-quality care. Advances in technology mean that we can now use digital tools to support the care we provide. Before any digital technology is introduced, we assess it to ensure it meets the required security and safety standards. 

Digital technology may be used as part of your care in a number of ways, including: 

• Virtual consultations between patients and clinicians using video technology. 
• Virtual Wards, which support patients who might otherwise need to stay in hospital. 
• Digital meetings to discuss your care, such as clinician-to-clinician discussions or Multi-Disciplinary Team (MDT) meetings involving Trust staff and external partners (see ‘Sharing Your Information’). 
• Electronic patient records for all or part of your care. 
• Making your medical information available electronically to the healthcare professionals who need it to provide your treatment. 
• Digital education sessions or classes that you may attend for information or training purposes. 
• Virtual tours of Trust departments. 
• Participation in online meetings or forums. 

• Collecting digital contact details, such as your email address or mobile telephone number, to support digital services that form part of your care (see ‘What We Collect, Why and How It Is Used’). 

We recognise that not everyone can access, or feels comfortable using, digital technology. If you are offered a digital service as part of your care, such as a virtual consultation, and would prefer not to use it, please tell your clinician. Your care will continue through a non-digital option, and the standard of care you receive will not be affected. 

If any part of your care is provided using digital technology, this will be recorded in your patient record. 

Artificial Intelligence 

The Trust may use approved Artificial Intelligence (AI) tools to support healthcare services, improve operational efficiency and enhance patient care. AI refers to computer systems that can perform tasks that would normally require human intelligence, such as understanding language, identifying patterns, summarising information and generating text. 

AI may be used to support a range of activities, including: 

• Supporting administrative and business processes; 
• Generating summaries of meetings, records and documents; 
• Assisting staff to draft communications, reports and other documentation; 
• Supporting operational and service planning activities; 
• Identifying trends, risks and opportunities to improve services; 

Examples of how AI may be used include: 

• Automated transcription and summarisation of clinical consultations or multidisciplinary team meetings; 
• Drafting discharge summaries and clinic letters using information already contained within the patient's health record; 
• Producing meeting notes, action logs and administrative documents; and 
• Supporting staff when drafting emails, reports, policies and other business documents 

The Trust does not use AI to make decisions about your care or treatment on its own. Any information, recommendations or outputs generated by AI are reviewed and considered by appropriately trained staff. All clinical decisions are made or confirmed by qualified healthcare professionals.  

Where personal information is used within AI systems, the Trust will ensure that appropriate safeguards are in place and will only use authorised and approved AI systems. This includes: 

• Assessing AI tools for governance, privacy, security and clinical safety before they are approved for use; 
• Using AI in accordance with UK data protection legislation, NHS requirements and Trust policies; 
• Maintaining appropriate human oversight of AI-assisted activities; 
• Ensuring that only the minimum necessary information is used; 
• Using de-identified, pseudonymised or anonymised information wherever possible and appropriate; 
• Ensuring that personal information is only shared with approved providers where suitable contractual and security controls are in place; and 
• Applying technical and organisational measures to protect confidential and personal information.  

If you would like more information about the Trust's use of AI and how your personal information may be processed, please contact the Information Rights Team using the contact details provided in this Privacy Notice. 

Research 

The Trust is committed to providing high-quality care and supports research that helps improve the care and treatment of patients. Research helps us learn more about health conditions, develop new treatments and improve healthcare services. Today’s research helps shape the care of the future. 

A member of your healthcare team may review your patient record to see whether a clinical trial or research study may be suitable for you. If so, they will discuss the study with you and explain what it involves. You will be given a patient information sheet and will have time to ask questions and talk to family or friends before deciding whether to take part. 

Taking part in research is your choice. If you decide to take part, you will be asked to sign a consent form and will be given a copy to keep. 

Depending on the study, personal information that can identify you may be shared with research organisations such as NHS organisations, universities, charities or commercial companies. If this applies, it will be explained to you as part of the study. Any information shared will only be used for approved research purposes. 

Surveys 

We may occasionally ask for your feedback about the care or treatment you have received. We may do this by sending a survey to your home address. The survey will include a covering letter from the Trust’s Chief Executive or another Senior Director. It may be sent directly by the Trust or by a trusted partner organisation. 

We use the information from these surveys to help improve the care and services we provide. We will not use the information for any other purpose. 

Taking part in these surveys is voluntary, and your responses are anonymous. Choosing whether to complete a survey will not affect the care or treatment you receive now or in the future. 

The Trust is legally required to review patients’ experiences of healthcare each year. To support this, some surveys are managed by national organisations, such as NHS England. In some cases, these organisations may send surveys directly to your home address without contacting you beforehand. 

To do this, the organisation running the survey must apply to the Health Research Authority (HRA) for approval. If the HRA is satisfied that the survey is in the public interest, it may allow the survey to proceed under a legal approval known as Section 251. 

We value your feedback, but we understand that you may not wish to take part in surveys. Trust surveys and nationally managed surveys usually have their own opt-out arrangements. 

If you do not want to receive Trust surveys, please tell a member of staff. They will contact the Patient Experience Team on your behalf. If you wish to opt out of a nationally managed survey, you can usually contact the organisation directly. Information about how to opt out is normally included with the survey. Our staff can also help you find this information. 

You can also choose to opt out at a national level (see the National Data Opt-Out section under Lawful Processing). However, even if you choose not to allow your confidential patient information to be used for research and planning, there are some situations where it may still be used: 

• When required by law If there is a legal requirement to provide the information, such as a court order. 
• When you have given consent If you have agreed for your information to be used, for example as part of a research study. 
• When there is an overriding public interest In exceptional circumstances where it is necessary to protect public safety or health. For example, to help manage and control the spread of infectious diseases. 
• When information that identifies you has been removed Information about your care may still be used for research and planning if details that could identify you have been removed first. 
• When there is a specific exemption In a small number of situations, confidential patient information can still be used. For example, to produce official national statistics, such as the population census. 

Some surveys that have Section 251 approval are exempt from the National Data Opt-Out. Details of surveys and programmes that are exempt can be found here. 

You can opt out by using an online form, post or telephone. All of the information that you need to opt-out can be found on the website, ‘Your NHS Data Matters’. 

Images and Audio 

The Trust uses surveillance systems across its sites, including Closed-Circuit Television (CCTV), Body Worn Video (BWV) and Automatic Number Plate Recognition (ANPR). Images captured by these systems, and audio recorded through BWV, may be used to: 

• Help keep people safe and reduce the risk of crime. 
• Support the Police and the NHS Local Security Management Specialist (LSMS) in preventing, detecting and investigating crime. 
• Help identify and prosecute offenders. 
• Protect Trust buildings, equipment and other assets. 
• Protect patients, staff, visitors and private property. 
• Support traffic management. 
• Support health and safety management. 
• Assist with the investigation of civil claims. 
• Support disciplinary investigations. 

• Help monitor patient safety during clinical procedures. 

Body Worn Video (BWV) is used only by trained Hospital Safety Team Officers (HSTOs). BWV is activated only when an officer believes an incident is taking place or is likely to occur. 

In addition to the purposes listed above, BWV may also be used to: 

• Help reduce incidents of violence and aggression. 
• Support the investigation and prosecution of offences involving violence or disorder. 

• Help protect security staff from malicious or unfounded complaints. 

Automatic Number Plate Recognition (ANPR) is used in some Trust car parks to manage staff access. As vehicles enter and leave Trust premises, the system records vehicle registration numbers. 

In most circumstances, it will be acceptable to disclose images to law enforcement agencies if failure to do so would be likely to prejudice the prevention and detection of crime. 

Direct Care Purposes 

We share information with a range of organisations involved in your care. These organisations may also share information with us. For example, your GP may share information when referring you to one of our healthcare professionals for assessment, treatment or ongoing care. 

Everyone working within the NHS has a legal duty to keep your information secure and confidential. The same duty applies to any organisation or professional who receives information from us. This requirement is included in staff contracts and professional codes of practice. 

If you have any questions about how your information is shared, please speak to the healthcare professional responsible for your care. 

We may share information with partner organisations involved in your care, including: 

• General Practitioners (GPs). 
• Other NHS Trusts and hospitals involved in your treatment. 

• Ambulance services. 

You may also receive support from organisations outside the NHS, such as social care services. To provide safe and joined-up care, we may need to share relevant information with these organisations. We will only do this when it is necessary for your care or when we have your permission. 

This may include sharing information with: 

• Social Care Services. 
• Education Services. 
• Local Authorities. 
• Voluntary sector organisations. 

• Private sector providers working with the NHS. 

You can find further information about our Information Sharing Partners here. 

Indirect Care Purposes 

There are strict legal and regulatory requirements that govern how your information can be used for purposes other than your direct care. 

The Trust may use information it holds about you to: 

• Review the care we provide to help ensure it meets high standards. 
• Plan services to meet the needs of patients now and in the future. 
• Investigate patient enquiries, complaints and legal claims. 
• Ensure the Trust receives the correct payment for the care and treatment provided. 
• Prepare reports and statistics about NHS performance. 

• Support the education and training of healthcare professionals. 

Before we use your information for any of these purposes, we must have a lawful basis for doing so. If there is no legal basis for the processing, we will not use your information in this way. 

For more information, please see the sections ‘Lawful Processing’ and ‘National Data Opt-Out’. 

Confidentiality 

The Trust is mindful of its duties under the Common Law Duty of Confidentiality (CLDC) in relation to health information. To comply with this, it is important that we make you aware of who your information is being shared with, and that you can say ‘no’: 

• ‘The general position is that if information is given in circumstances where it is expected that a duty of confidence applies, that information cannot normally be disclosed without the information provider’s consent’2. 

• ‘In practice, this means that all patient/client information, whether held on paper, computer, visually or audio recorded, or held in the memory of the professional, must not normally be disclosed without the consent of the patient/client’3. 

Occasionally, we may need to disclose information about you to third parties without your permission, for example: 

• There are particular circumstances which can set aside the CLDC. To do this, we need to apply for a ‘Section 251’ under the National Health Service Act 20064. Data protection requirements will still be met.5  
• We may be required to provide information to assist in the investigation of a serious crime. 

• We may need to help protect your or another person’s vital interests (protect someone’s life). 

We need information about you to provide safe and effective healthcare. The information you give us helps us understand your health needs and any medical conditions you may have. 

You can choose not to provide information, or you can ask us not to share it. However, this may affect the care and treatment we are able to provide. 

If you have concerns about sharing information with us, or about us sharing information with other organisations involved in your care, please speak to the healthcare professional responsible for your care. They will discuss your concerns with you and explain how your information is used. 

The Trust will only transfer confidential patient information outside the UK where this is permitted by the UK General Data Protection Regulation (UK GDPR). 

Where personal information is transferred internationally, the Trust will ensure that appropriate safeguards are in place to protect it. This may include approved contractual arrangements and other measures required by data protection law. 

The Trust will only transfer personal information to countries or organisations that can provide an appropriate level of protection for the rights and freedoms of individuals. 

Where required, we will ask for your consent before transferring your information.

The length of time we keep your information depends on the type of information it is.  

We follow the Records Management Code of Practice for Health and Social Care 2021 which provides guidance on managing records and sets out how long different types of information should be kept.  

The Code is based on legal requirements and professional best practice. We keep records for at least the minimum retention period required. 

Healthcare 

Healthcare records are kept for a minimum of 8 years after discharge from the Trust or your last appointment or attendance. 

Research 

If you take part in a research study, the length of time we keep the related records will depend on the study. This will be explained to you before you decide whether to take part.  

Images and Audio 

Images and audio recordings are kept for a minimum of 31 days. They may be kept for longer if they are needed as part of an ongoing investigation or legal proceedings.

We can only process your information when we have a lawful reason to do so. 

To provide healthcare, we use information such as your name, address and date of birth. This is known as personal data. Before we can process personal data, we must meet one of the lawful bases set out in Article 6 of the UK GDPR. 

As a public authority providing healthcare services in the public interest, the Trust relies on the following legal basis: 

• Article 6(1)(e) – “Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.” 

Some types of information, including health information, are classed as special category data. The processing of special category data is prohibited unless an additional condition under Article 9 of the UK GDPR is met. 

Special category data includes information about: 

• Racial or ethnic origin; 
• Political opinions; 
• Religious or philosophical beliefs; 
• Trade union membership; 
• Genetic data; 
• Biometric data (where used to uniquely identify an individual); 
• Health; and 

• Sex life or sexual orientation. 

The Trust can process special category data because providing healthcare is one of its core functions. We rely on the following condition: 

• Article 9(2)(h) – “Processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services.” 

Depending on the purpose for which your information is being used, other legal bases and conditions may apply. Examples include: 

• To support safeguarding of children and vulnerable adults - Article 6(1)(e) and Article 9(2)(b) 
• To protect an individual's vital interests (for example, to save someone's life) - Article 6(1)(d) and Article 9(2)(c) 
• To support research - Article 6(1)(e) and Article 9(2)(j) 
• To comply with a legal obligation - Article 6(1)(c) and Article 9(2)(h) 
• For image recording that is not directly related to healthcare, such as CCTV, Body Worn Video (BWV) and Automatic Number Plate Recognition (ANPR) - Article 6(1)(f) 

• Where consent is required - In some circumstances, we may ask for your consent to process your information if no other legal basis applies. If this is the case, we will clearly explain how your information will be used and ask for your agreement before processing takes place. - Article 6(1)(a) and Article 9(2)(a) 

This version keeps all regulatory references and legal citations while improving readability, reducing repetition, and using clearer plain-English explanations.

Whenever you use a health or care service, important information about you is collected in a patient record for that service. Collecting this information helps to ensure you get the best possible care and treatment. 

The National Data Opt-Out allows you to choose whether or not your confidential patient information is used for purposes beyond your direct care for instance to help with: 

• Improving the quality and standards of care provided. 
• Research into the development of new treatments. 
• Preventing illness and diseases. 
• Monitoring safety. 

• Planning services. 

Confidential patient information is when two types of information from your health records are joined together such as: 

• Something that can identify you. 
• Something about your health care or treatment. 

Most of the time, anonymised data is used for research and planning so that you cannot be identified, in which case your confidential patient information isn’t needed. 

You can choose to opt-out and can also make a choice for someone else, like your children if they are under the age of 13. Your choice will only apply to the health and care system in England. 

How do I opt-out? 

If you decide to opt out, your choice is applied to your NHS number by NHS Digital. This is not something that we can do for you here at the Trust.  

You can opt out by using an online form, post or telephone. All of the information that you need to opt-out can be found on the website, ‘Your NHS Data Matters’ . 

On this web page you will: 

• See what is meant by confidential patient information. 
• Find examples of when confidential patient information is used for individual care and examples of when it is used for purposes beyond individual care. 
• Find out more about the benefits of sharing data. 
• Understand more about who uses the data. 
• Find out how your data is protected. 
• Be able to access the system to view, set or change your opt-out setting. 
• Find the contact telephone number if you want to know any more or to set/change your opt-out by phone. 
• See the situations where the opt-out will not apply. 

You can also find out more about how patient information is used at: 

• https://www.hra.nhs.uk/information-about-patients/ (which covers health and care research); and 

• https://understandingpatientdata.org.uk/what-you-need-know (which covers how and why patient information is used, the safeguards and how decisions are made) 

You can change your mind about your choice at any time. 

What is the Trust doing to uphold my choice? 

The Trust has developed a process using the guidance offered by NHS Digital so that we can identify the circumstances in which your choice to opt-out must be upheld. This process has been written into a formal Trust Policy.  

What if I do not want to opt-out? 

If you’re happy with your confidential patient information being used for research and planning, you do not need to do anything. 

Please be assured that any choice you make will not impact your individual care provided to you by the Trust. 

In general, the UK GDPR gives individuals a number of rights over how their personal information is used. The way these rights apply in practice depends on: 

• The legal basis being used to process the information. 
• Whether any legal restrictions apply. These restrictions may be used where they are considered a necessary and proportionate measure in a democratic society to protect matters such as:  
  • National or public security; 
  • Defence; and 

  • The prevention, investigation and detection of crime. 

This means that, in certain circumstances, some rights may be limited where there is a lawful and justified reason for doing so. 

The rights available to you are: 

• The right to be informed – We must tell you how we collect, use and share your information. We provide this information in a variety of ways, including: 
  • Online, such as through this Privacy Notice; 
  • Discussions with your healthcare professional; 
  • Posters; 
  • Leaflets; and 
  • Information included in letters and other correspondence. 
• The right of access – You can ask to see, or receive a copy of, the information we hold about you. 
• The right to rectification – You can ask us to correct information that is inaccurate or incomplete. If we agree that the information is incorrect, we will update it. Please note that we may hold information that you disagree with, but which is not considered inaccurate, such as a clinical opinion recorded by a healthcare professional. In these circumstances, we may agree to add a statement to your record explaining your concerns, but we would not alter the original information. 
• The right to erasure – Also known as the "right to be forgotten", this right allows individuals to request the deletion of their personal data where there is no overriding legal reason for it to be retained. In practice, this right is unlikely to apply to health records or staff records because there are usually strong legal and regulatory reasons for these records to be kept. 
• The right to restrict processing – You can ask us to temporarily stop using your personal data without deleting it. This is most likely to apply while a request for rectification, erasure or an objection to processing is being considered. 
• The right to data portability – This right allows you to obtain and reuse your personal data across different services. It enables personal data to be copied or transferred from one IT system to another safely and securely, without affecting its usability. This right only applies where processing is based on consent or a contract and is carried out by automated means. 
• The right to object – You have the right to object to the processing of your personal data in certain circumstances. Please also refer to the section "Consequences of Failing to Provide Data" for further information. 
• The right not to be subject to automated decision-making, including profiling – The Trust does not make decisions about your care or treatment solely through automated processing. Decisions about your healthcare are made by qualified health professionals. 

• The right to be informed about certain data breaches – You have the right to be told if a personal data breach occurs that is likely to result in a high risk to your rights and freedoms. 

Exercising Your Rights 

There are some umbrella provisions to describe what we do if you make a request to exercise your rights6: 

• We always check the identity of a person making a request before we act upon it. We need to establish that a request is genuine, either from you or your agreed representative. 
• We aim to act upon requests as soon as possible and usually within one month. Occasionally we may need more time, for example, if a request is complex. This can extend the response time by up to a further two months. If we need more time, we will contact you as soon as possible and within month one to explain the reasons for the delay. 
• If you make your request by electronic means, we will aim to respond in the same way unless you request otherwise. Please be aware that this may not always be possible 
• We may refuse a request; not provide everything you have requested or not do everything that you have asked of us. If this happens, we will: 
  • Tell you as soon as possible and within one month. 
  • Outline our reasons for not taking the action you have requested. 
  • Explain how you can make a complaint if you are unhappy with our decision. We would always ask that you come back to us in the first instance, either informally or via our Trust’s complaints procedure, to try to resolve the situation. We will also provide you with information about how to complain to our supervisory authority, the Information Commissioner’s Office (ICO). 
• If we have disclosed your data to a third party (e.g. your GP) and we then rectify, restrict or erase your data7, (if applicable) we will: 
  • Inform the third party of the decision, unless it is impossible or would involve a disproportionate effort to do so (in which case we would explain the reasons).  
  • Tell you to whom we disclosed your data. 
• We will normally undertake our duties regarding your rights without charging a fee but occasionally we may consider that it is appropriate to do so. If so, we will tell you as soon as possible, within one month, and before undertaking any related activity that has been requested. 
• If you want to exercise any of the rights described or would like any additional information, please contact the Data Access Team; please see the ‘Contact Us’ section below. 

Your information and your rights are important to us, and our Data Access Team are here to help. If you wish to exercise any of your UK GDPR rights or would like further information, please contact the Data Access Team. 

By post: Information Rights Team 
Medical Records 1st Floor Offices 
Blackpool Teaching Hospitals  
Whinney Heys Road 
Blackpool 
FY3 8NR 

By email: bfwh.information.rights@nhs.net 

By telephone: (01253 958105 / 956802 / 952474 / 958104 

Our Trust has appointed a Data Protection Officer (DPO)8. They are tasked with monitoring how the Trust protects and uses your information. Contact them at:  

By post: address as above 

By email: bfwh.dataprotection.officer@nhs.net 

By telephone: (01253) 953057