Privacy notice

When you visit our website, we may collect and process the following types of information:

• Personal information
  This includes your IP address.
• Technical data
  Information such as your browser type, and version, time zone setting, browser plug-in types, operating system, and platform.
• Usage data
  Details of your visits to our website, including traffic data, location data, weblogs, and other communication data. 

How we collect data

• We collect your data automatically when you visit the website.

We collect data in the following ways:

• Data is collected automatically,
• Your IP address.
• In each case, in accordance with this Privacy Notice

Data that is collected automatically

To the extent that you access the website, we will collect your data automatically, for example:

• We automatically collect some information about your visit to the website. This information helps us to make improvements to website content and navigation, and includes your IP address, the date, times and frequency with which you access the website and the way you use and interact with its content.
• We will collect your data automatically via cookies, in line with the cookie settings on your browser. For more information about cookies, and how we use them on the website, see cookies.

We use the information we collect for the following purposes:

• Website improvement
  We use tracking tools like Google Analytics to monitor visitor interactions, recording metrics such as page views, user demographics, and session duration to identify the most visited pages on our site. By analysing this data, we can optimise content, layout, and navigation.
• Security
  To enhance the security of our website and help protect it against fraud.
• Legal compliance
  To comply with our legal obligations.

We process your personal data under the following legal bases:

• Legitimate interests
  To improve our services and enhance the security of our website.
• Legal obligations
  To comply with our legal obligations, such as reporting to regulatory bodies.

We may share your information with the following, in accordance with this privacy notice:

• Website service provider
  Who perform services on our behalf, such as website hosting and maintenance.
• Regulatory authorities
  Where we are required to do so by law or regulation.

We will retain your personal information only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

You have the following rights regarding your personal data:

• Access
  You can request a copy of the personal data we hold about you.
• Correction
  You can ask us to correct any inaccuracies in your personal data.
• Deletion
  You can request that we delete your personal data in certain circumstances.
• Objection
  You can object to the processing of your personal data where we are relying on a legitimate interest.
• Restriction
  You can request that we restrict the processing of your personal data in certain circumstances.
• Data portability
  You can request the transfer of your personal data to another party.

If you wish to exercise any of these rights, or suspect any misuse of data, please email: cdda-tr.communications@nhs.net 

Our website uses cookies to distinguish you from other users and to improve your experience on our site. 

This website may, from time to time, provide links to other websites. We have no control over such websites and are not responsible for the content of these websites. This Privacy Notice does not extend to your use of such websites. You are advised to read the Privacy Notice or statement of other websites prior to using them.

Detailed information can be obtained from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems. Get Safe Online is supported by HM Government and leading businesses.

If you have any questions about this privacy notice, please contact: cdda-tr.communications@nhs.net 

We may update this Privacy Notice from time to time. This Privacy Notice was last updated on 06/11/2024.

In this Privacy Notice, the following definitions are used:

Data
Collectively all information that you submit to County Durham and Darlington NHS Foundation Trust (CDDFT) via the website. This definition incorporates, where applicable, the definitions provided in the Data Protection Laws;

Cookies
A small text file placed on your computer by this website when you visit certain parts of the website and/or when you use certain features of the website. Details of the cookies used by this website are set out in the clause below (Cookies);

Data Protection Laws
Any applicable law relating to the processing of personal data, including but not limited to the UK GDPR, and any national implementing and supplementary laws, regulations and secondary legislation;

UK GDPR
The UK General Data Protection 2018 Regulation;

County Durham and Darlington NHS Foundation Trust (CDDFT), we or us
CDDFT whose registered address is at County Durham and Darlington NHS Foundation Trust, Hollyhurst Road, Darlington, DL3 6HX; 

UK and EU Cookie Law
The Privacy and Electronic Communications (EC Directive) Regulations 2003 as amended by the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011 and the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2018;

User or you
Any third party that accesses the website and is not either (i) employed by CDDFT and acting in the course of their employment or (ii) engaged as a consultant or otherwise providing services to CDDFT and accessing the website in connection with the provision of such services; and

Website
The website that you are currently using, www.cddft.nhs.uk, and any sub-domains of this site unless expressly excluded by their own terms and conditions.

In this Privacy Notice, unless the context requires a different interpretation:

• The singular includes the plural and vice versa;
• References to sub-clauses, clauses, schedules or appendices are to sub-clauses, clauses, schedules or appendices of this Privacy Notice;
• A reference to a person includes firms, companies, government entities, trusts and partnerships;
• “including” is understood to mean “including without limitation”;
• Reference to any statutory provision includes any modification or amendment of it;
• The headings and sub-headings do not form part of this Notice.