Privacy notice

When you visit our website, we may collect and process the following types of information:

• Personal information
  This may include your name, email address, and other contact details if you fill out any forms or contact us directly through the website.
• Technical data
  Information such as your IP address, browser type, and version, time zone setting, browser plug-in types, operating system, and platform.
• Usage data
  Details of your visits to our website, including traffic data, location data, weblogs, and other communication data.

We use the information we collect for the following purposes:

• To provide services
  To respond to your inquiries or process your requests made through the website.
• Website improvement
  To analyse and improve the functionality of our website.
• Security
  To ensure the security of our website and protect it against fraud.
• Legal compliance
  To comply with our legal obligations, including maintaining records for legal or regulatory purposes.

We process your personal data under the following legal bases:

• Consent 
  Where you have provided explicit consent to receive communications or marketing from us.
• Legitimate interests
  To improve our services and ensure the security of our website.
• Legal obligations
  To comply with our legal obligations, such as reporting to regulatory bodies.

Our website uses cookies to distinguish you from other users and to improve your experience on our site. 

We do not sell or rent your personal data to third parties. We may share your information with:

• Service providers
  Who perform services on our behalf, such as website hosting and maintenance.
• Regulatory authorities
  Where we are required to do so by law or regulation.

We will retain your personal information only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

You have the following rights regarding your personal data:

• Access
  You can request a copy of the personal data we hold about you.
• Correction
  You can ask us to correct any inaccuracies in your personal data.
• Deletion
  You can request that we delete your personal data in certain circumstances.
• Objection
  You can object to the processing of your personal data where we are relying on a legitimate interest.
• Restriction
  You can request that we restrict the processing of your personal data in certain circumstances.
• Data portability
  You can request the transfer of your personal data to another party.

If you wish to exercise any of these rights, please contact us at the details provided below.

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it from unauthorised access, loss, or disclosure

If you have any questions about this privacy notice or how we handle your personal data, please contact: Data Protection Officer, County Durham and Darlington NHS Foundation Trust, Hollyhurst Road, Darlington, DL3 6HX.

• We may update this privacy notice from time to time. Any changes will be posted on this page, and where appropriate, notified to you by email.
• You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe that we have not complied with your data protection rights.
• This privacy notice is designed to comply with the GDPR and the Data Protection Act 2018, ensuring transparency in how CDDFT handles personal data collected via its website.