Privacy Policy

Introduction

We are committed to protecting and respecting your privacy. The following Privacy Policy applies to the Work Well Website, which is owned by South London and Maudsley NHS Foundation Trust “SLaM” and sets out how your personal data is handled by us. We strongly recommend that you take some time to read this policy carefully to understand how we treat your personal data.

SLaM is committed to ensuring that the data you provide is stored and protected at all times.  We take the privacy of our website users very seriously and all personal data is treated as confidential.

This policy was last reviewed and updated in August 2018.

What personal information do we collect?

Information that  Work Well collects?  Why we hold this information
Name To address you properly and to identify you when the team makes contact
Telephone Number We only hold this information if you provide it for the team to contact you.
Email Address Email address is required as an alternative method of contact. We will hold this information for the purposes of making contact.  If you opt in to receiving newsletters and updates from Work Well then the email address you have provided will also be used to send these to you.

Work well may use this information to:

Communicate with you

We use your information to send you communications about our service or to let you know about any changes to our terms of service or privacy policy. We also use your information to respond to you if you contact us.

Improvement and development

From time to time we may conduct surveys to better understand how to improve features.

How is your information shared?

South London and Maudsley NHS Foundation Trust, as Data Controller, will not share your data with anyone without your explicit consent, unless the law permits us to do so.

We share data only with our authorised Data Processors, who must act at all times on our instructions as the Data Controller under the Data Protection Act 2018. Our data processors are outlined below:

Data Processors What data they process and why
Flywheel Flywheel is the WordPress host provider for the website.  Flywheel host the website and do not retain any data – although data is sent via their protocol.  Flywheel’s security policy can be found here

Before you submit any information, it will be made clear to you why we are asking for specific information, and it is up to you whether you provide it. The trust does not and will never sell any data.

Cookies

This website uses cookies. Cookies are small text files that save and retrieve information about your visit, such as how you entered and navigated the website and what information was of interest to you. A cookie does not allow access to your personal information, we use cookies to tailor the website to customer preference.

If you are uncomfortable with the use of cookies, you can disable this on your electronic device by changing the settings in the ‘Preferences’ or ‘Options’ menu on your internet browser.

How long do we retain your personal data for?

Your personal data will be held and processed for the purposes of the team making contact with you.  We will securely hold the data in line with the NHS retention schedule to ensure we can respond to any future queries or complaints and to comply with legal and regulatory requirements.

Security

Is your information safe?

The data you provide on the website will be sent securely in an encrypted format. The data you provided on the website will be sent to a dedicated SLaM email address which is monitored by only staff from the wellbeing team.

We will only use the information you have provided to us so that a member of the Work Well team can contact you to provide you with more details about the services they provide.

Your rights

Right to Access

 

You have the right to request access to your personal data which we hold.  You can do this by submitting an information request, free of charge, to the data protection office: dataprotectionoffice@slam.nhs.uk
Right to Rectification

 

If you believe that any of your personal data is inaccurate or incomplete you have the right to ask for this to be corrected.  To do so please put your request in writing to workwell@slam.nhs.uk

 

Right to Erasure (Right to be forgotten)

 

In some circumstances, you may ask us to erase your data which we hold.  However, there are some situations whereby we would be unable to erase your data, such as when we need to comply with regulatory requirements.

For more information please contact informationgovernance@slam.nhs.uk

 

Right to Restriction of Processing If certain conditions apply, you have the right to restrict the processing of your information.  Which includes:

–          When you contest it as being inaccurate

–          If you object to data being processed we then need to decide if it was necessary for a legitimate interest

–          When processing your data has been unlawful but you decide against erasing your data

–          If we no longer need your data for the original purpose it was obtained, but you require us to hold it to establish, exercise or defend a legal claim.

For more information please contact informationgovernance@slam.nhs.uk

Right of Portability

 

In certain circumstance you have the right to move, copy or transfer your personal data to another organisation.  This works slightly differently to your rights of access as you may be entitled to the same amount of information under the right of portability as you would be entitled to under the right of access.

For more information please contact informationgovernance@slam.nhs.uk

Right to Object

 

You have the right to object to us processing your data unless we can demonstrate legitimate grounds for processing your data or for if the processing of your data is for the establishment or defense of a legal claim

For more information please contact informationgovernance@slam.nhs.uk

How do we respond to legal requests?

We may be required under law to share your information if there is a legal request which we must comply with such as a search warrant or court order.

How will we notify you of changes to this policy?

We may amend this policy in the future to ensure it is kept up to date with legal requirements.  We will notify you when we make any changes to this policy and invite you to review

How to contact us with questions or concerns

If you have any additional questions regarding this policy, please feel free to contact us at:

workwell@slam.nhs.uk

Work Well
South London and Maudsley NHS Foundation Trust
Maudsley Hospital
London
SE5 8AZ