Skip to main content

Full privacy notice

We collect, process and hold personal data relating to you to:

  • provide services regarding the continuity of healthcare of our citizens, including assessment, diagnosis and treatment of physical and mental ill-health
  • monitor and get feedback on how we provide our services to you to identify areas of improvement
  • fulfill reporting obligations with regulatory bodies, such as Welsh Government and NHS Wales/England
  • undertake research and for statistical purposes

We process your data under one or more of the following lawful bases:

  • you have given your explicit consent
  • it is necessary for the performance of a contract to do so
  • we have a legal obligation to process in accordance with:
    • National Health Service Act 1977 and (Wales) Act 2006
    • Public Records Act 1958
    • Access to Health Records Act 1990
    • Health & Social Care Act 2012
    • Social Services and Well-being (Wales) Act 2014
    • Mental Health Act 2007 and Mental Capacity Act 2005
  • processing is necessary to protect the vital interests of a data subject or another person
  • for the provision of healthcare treatment or the management of healthcare systems and services
  • for reasons of substantial public interest in the area of public health
  • in relation to the establishment, exercise or defence of legal claims Where we have used consent as the legal basis for processing your information, you have the right to withdraw your consent at any time.