Privacy notice

Under Data Protection legislation people have the right to be informed about the way in which we use, share and store their personal information.  The purpose of this privacy notice is to tell you what to expect when we collect personal information. 

Devon Partnership NHS Trust who are accountable for the Devon Wellbeing Hub website is registered with the Information Commissioner’s Office as a Data Controller with registration number Z7558715.

Our Data Protection Officer can be contacted by email to dpt.saferinformation@nhs.net or by post addressed to “Data Protection Officer, Devon Partnership Trust, Trust Headquarters, Wonford House, Dryden Road, Exeter, EX2 5AF”

 

Your personal information as a user of our services

 

National Data Opt-out Programme

NHS Digital is developing a new system to support the national data opt-out which will give patients more control over how identifiable health and care information is used. The system will offer patients and the public the opportunity to make an informed choice about whether they wish their personally identifiable data to be used just for their individual care and treatment or also used for research and planning purposes. Find out more or use the NHS app.

 

Keeping information about you

Any personal information we hold about you is processed in carrying out the public task of providing healthcare and for the purposes of “…provision of health or social care of treatment or the management of health or social care systems and services…” in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

We keep records about your health and any treatment and care you receive. This helps us ensure you get the best treatment and management of your healthcare. The records may be written down, or held on a computer.

Our main electronic system for recording your care and treatment is CareNotes, but other systems may be used depending on the service you are receiving.

Records held will include both personal information and 'special category' information, which is how the law defines more sensitive information about your healthcare.

We are likely to hold:

• Your personal details including, name, address, email address, date of birth, NHS number and next-of-kin contacts and details of your GP
• We may also hold details of your marital status, occupation, overseas status, place of birth and preferred name or former name(s).

Sensitive personal information we may hold will include:

• Details of contact we have had with you, such as clinic visits and appointments
• Notes, correspondence and reports about your health and your treatment and care
• Details of your medical conditions and diagnoses, results of investigations
• Details of care and treatment received and any future care you may need
•  Relevant information from other health or social care professionals, relatives or those who care for you and know you well
• Other personal information such as smoking status and any disabilities including any learning disability
• Your religion and ethnic origin
• Whether or not you are, or have been, subject to any protection orders for example under the Mental Health Act or Court of Protection or are or have been the subject of any safeguarding procedures.

 

Using your records to help you and support your care

We use the records to help plan and guide your care.  They help to ensure:

• All staff involved in your care have accurate and up to date information to assess and advise on the most appropriate care and support for you.
• Staff have the information they need to be able to assess and improve the quality and type of care you receive
• A single electronic care record enables your care team to work more effectively. Doctors, nurses and other health professionals working with you have accurate and up-to-date information
• Appropriate information is available if you see another health professional, or are referred to a specialist or another part of the NHS, or other health or social care provider.
• We can investigate your concerns, if you need to complain.
• We can remind you about appointments and send you correspondence and information about your care.
• Support the funding of your care for example with commissioning organisations.

 

Other ways in which we may use your information

Your information may also be used to help:

• Look after the health of the general public and support health research and development
• Review NHS accounts and services
• Investigate complaints, legal claims and other incidents and report any such events when we are required to do so by law
• Develop  and improve services  and the overall performance of the Trust
• Prepare statistics on NHS performance to meet the needs of the population or for the Department of Health or other regulatory bodies
• Review the care we provide by way of ensuring it is of the highest standard and quality
• Teach and train health professionals
• Review your suitability for research study or clinical trial so that we can tell you about health research opportunities you might be interested in
• Work with other organisation such as universities, community safety units and research institutions.

Information used for statistical purposes is anonymous. We take stringent measures to ensure individuals cannot be identified. Where information is used for purposes such as service improvement we will anonymise or pseudonymise your personal information wherever possible to protect your confidentiality unless there is a legal basis that permits or requires us to use it.  We will only use or share the minimum information necessary.

 

How we share your data with third parties

We work in close partnership with a number of organisations in order to provide the best support and care possible.

We may need to share relevent personal information with other NHS organisations and other non-NHS organisations contracted to provide health or social care services in order to support your healthcare needs. For example we may share information with NHS England, General Practitioners (GPs), ambulance or transport services or private care homes or social care providers. We are required by law to share information with other bodies such as with the Care Quality Commission for inspection purposes.

There may be occasions when we are required by law or a specific court order to share information. This includes exceptional circumstances where we may be required to share information to the police for the purposes of prevention, investigation and detection of crime or with appropriate authorities where there is an overriding public interest to prevent abuse or serious harm to you or to others. Where there is cause to do this the Trust will always do its best to notify you of sharing information and share only the minimum information required for the purpose.

We work closely with other organisations to support the health and safety of people who use our services and members of the public. We also support initiatives and studies to better understand healthcare demands in Devon by working in collaboration with these organisations. In the Resources section to the right you will find a list of partners with which we have agreements. We only share information if there is a legal basis to do so or when the information is anonymised so individuals cannot be identified. All agreements are subject to checks and appropriate sign-off by Devon Partnership NHS Trust.

We will hold your information in confidence and it will only be used for the purposes explained to you. We will only share information where current legislation permits or requires it and will ensure so far as we are able to that any information will be shared  securely and  held securely  and will ensure so far as possible that any such third party will hold information in accordance with current legislation and protect your confidentiality.

Find out more information about sharing information with NHS England in relation to Flu and COVID-19

 

Devon and Cornwall Shared Care Record

It is crucial for clinical services across Devon, to have access to the right information at the right time to provide safe healthcare to those who need it. Healthcare services provided in Devon fall under different trusts who process the information and ensure it is secure and protected. This means that this information is readily available to services provided by other NHS trusts, unless it is requested or there are approved sharing mechanisms in place. 
As part of the NHS long-term plan, organisations are encouraged to utilise technology and work together collaboratively. The Devon and Cornwall Shared Care record will allow clinicians where appropriate, to access the patient information and care plans wherever they are working to optimise the care they are providing. 
Devon Partnership NHS Trust as part of an Integrated Care System in Devon is contributing to a Devon and Cornwall Care Record so information is available at the point of care. The trust has been involved and followed best practices to ensure the information is safe, secure, and only accessed on a need to know basis. More information is available on the Devon and Cornwall Care record website.

 

How we protect your personal data

Devon Partnership NHS Trust takes all necessary measures to protect your information. Data security measures are in place for all the Trust’s existing services and at the heart of all new initiatives going forward. Our processes are robust and we will continue to improve and maintain our security to protect the information of the people who use our services and staff and keep up with evolving information standards.

Everyone working for the NHS has a legal duty to keep sensitive information secure and confidential. This extends to any suppliers working with Devon Partnership Trust who may come into contact with our information.  Any supplier must demonstrate the same high standard of security expected from the NHS before engaging in any services.

We will also from time to time ask you to confirm the information about you is up-to-date.

The information we secure is generated from:

• Visitors to our website
• People who receive health and/or social care from the Trust
• People who make a Subject Access Request
• People who raise a concern or make a complaint
• People who want to receive general information and contact from the Trust or make a Freedom of Information request
• Job applicants and our current and former employees
• People who email us or send a letter
• Charity and membership involvement.

 

How long we keep your personal data

All of Devon Partnership NHS Trust records are maintained and destroyed in accordance with the NHS Retention Schedule. The schedule sets out the appropriate length of time the type of record is retained for. We do not keep records for any longer than is necessary.

Once the retention period is met, or the Trust has decided the record is no longer required, it is confidentially shredded and destroyed.

 

Privacy notice for the website

Links within this site to other websites are not covered by this privacy notice. 

 

Information collection from the website and use

This website uses cookies, some of which may store information about you. You can manage what cookies are allowed. See the Cookie Policy for more information.

 

Feedback

You can send us your feedback, comment on policies, strategies or other issues relating to the Trust by contacting us. If you send an email or contact us asking for information, we may need to contact other NHS departments or external organisations to find that information. If your question is technical, we may need to pass it to our IT Department.

 

National Data Opt-out Programme

NHS Digital is developing a new system to support the national data opt-out which will give patients more control over how identifiable health and care information is used. The system will offer patients and the public the opportunity to make an informed choice about whether they wish their personally identifiable data to be used just for their individual care and treatment or also used for research and planning purposes. To find out more click here or use the NHS app.

 

Site usage information

Session cookies

Cookies are pieces of data created when you visit a website. The cookies our website uses are "session cookies", which means that your "preferences" are stored temporarily while you move around the site. You can set your computer not to accept cookies. However, if you do this, you may not be able to use some site features because we need to record your preferences in order to give you the information you need during your visit.
 
Session cookies are deleted when you leave the site. They do not contain any personal information about you, and do not hold any information about which sites you visited before the Trust's.

Log files

Log files allow us to record visitors' use of the site. They enable us to make changes to the layout of the site and to the information in it, based on the way that visitors move around it.
 
Log files do not contain any personal information or information about which other sites you have visited. 

What happens when I move to another site?
Devon Wellbeing Hub website contains links to other websites, which include those of NHS and government departments and of other organisations. This privacy policy applies only the Devon Wellbeing Hub site, so you should always be aware when you are moving to another site and read the privacy statement of any site which collects personal information.

We do not pass on any personal information you have given us to any other site.