This website is operated by East Suffolk and North Essex NHS Foundation Trust. This privacy notice explains who we are, what information we collect from you, how we store this, how long we retain it, and with whom and for which legal purpose we may share it.
Who we are
East Suffolk and North Essex NHS Foundation Trust (ESNEFT) serves the geographical area of East Suffolk and North Essex with a population of more than 700,000. We are two acute hospitals (Colchester Hospital and Ipswich Hospital), but we are also responsible for and/or utilise the following community services:
- Aldeburgh Community Hospital
- Felixstowe General Hospital
- Bluebird Lodge
- Hartismere Place
- Foot and Ankle Service
- Community Nursing Services (East Suffolk)
- Clacton and Harwich Community Hospitals
- Halstead Hospital
- North East Essex and Suffolk Pathology Services (NEESPS)
Striving for excellence in everything we do is the focus of all our work within the Trust. We are the largest employer in East Anglia, with more than 10,000 whole time equivalent staff. Our new Trust aims to invest in infrastructure, bring down waiting times, recruit more staff and save on running costs. Our Trust is registered with the Information Commissioner’s Office (ICO) to process personal and special categories of information under the General Data Protection Regulation 2016/679 and our registration number is Z6601302.
The personal information we collect and use
We collect the following personal information that you provide to us:
Some examples of when we collect this information include:
When registering for an account
How we use your personal information
We collect information about our users for the following purposes:
Send push notifications when the site is updated, to those who are subscribed to.
Understand who is using the site, what their role is and which GP practice they are from.
Tailor the content of the site
Who your information may be shared with
We may share your information with:
Law enforcement agencies in connection with any investigation to help prevent unlawful activity
We will not share your personal information with any other 3rd parties.
We would like to send your information about clinical and operational updated from ESNEFT which may be of interest to you. Such information could be sent by email.
We will ask whether you would like us to send you push notifications on the first occasion that you provide any relevant contact information (i.e. signing up). If you do not opt in to receive such notifications form us you can opt out at any time (see ‘What rights do you have? Below for more information). If you have any queries about how to opt out, or if you are receiving messages you do not want you can contact us using the details provided below.
Whether personal information has to be provided by you, and if so why
The provision of the following information is required from you:
This is to enable us to do the following:
Name – for identification and communication
GP practice- to track usage in each GP practice
Job role – to understand who is using the site in GP practices
Email – to send email verification and email notifications if opted in
We will inform you at the point of collecting information from you, whether you are required to provide the information to us.
How long your personal information will be kept
We will hold your personal information for the following periods:
All information will be held whilst the account is active. Information will be held indefinitely unless the account is deleted or until you request removal from the database.
Reasons we can collect and use your personal information
We rely on the following as the lawful basis on which we collect and use your personal information:
The legitimate interests relied upon are as follows:
To provide information which can be used to improve the communication from ESNEFT to primary care colleagues.
The information is used for audience analysis, usage reporting and performance indicators.
Data will be collected and used by ESNEFT.
Consequence of our use of your personal information
The consequence to you of our use of your personal information is:
We will use the personal information provided to send email notifications, if opted in.
Keeping your information secure
We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We will also use technological and organisation measures to keep your information secure.
While we will use all reasonable efforts to secure your personal data, in using the site you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that are transferred from you or to you via the internet. If you have any particular concerns about your information, please contact us using the details below.
Transfers of your information out of the EEA
We will not transfer your personal information outside of the EEA at any time.
What rights do you have?
Under the General Data Protection Regulation you have a number of importance rights free of charge. In summary, those include rights to:
- Fair processing of information and transparency over how we use your personal information
- Access to your personal information and to certain other supplementary information that this Privacy Notice is already designed to address
- Require us to correct any mistakes in your information which we hold
- Require the erasure of personal information concerning you in certain situations
- Receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations
- Object at any time to processing of personal information concerning you for direct marketing
- Object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
- Object in certain other situation to our continues processing of your personal information
- Otherwise restrict our processing of your personal information in certain circumstances
- Claim compensation for damages caused by our breach of any data protection laws
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individual’s rights under the General Data Protection Regulations (https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/)
If you would like to exercise any of these rights please:
- Email, call or write to us
- Let us have enough information to identify you
- Let us have proof of your identity
- Let us know the information to which your request relates
Please note when selecting to opt out of push notification there may be some period after selecting to unsubscribe in which emails may still be received while your request is being processed.
Do you need extra help?
If you would like this policy in another format (i.e. audio, large print) please contact us using the details below.
Posting a news updates onto the website.
If you have any questions about this policy or the information we hold about you, please contact us by:
Post: Engagement Team, Trust Offices, Colchester Hospital, Turner Road, Colchester, Essex, CO4 5JL
Telephone: 01206 747474
Calls will be answered at the following times:
Mon – Fri 0900 – 1700
We may record calls for training and quality purposes.