Your privacy is important to us. This privacy policy covers what we collect and how we use, disclose, transfer and store your information.
The following is to explain your rights and give you the information you are entitled to under the General Data Protection Regulation (GDPR) and Data Protection Act 2018 (DPA 2018).
Thornacre manages the moderation of comments posted by consumers of NHS Services in England, Wales and Scotland.
Whilst we have access to Email Addresses, User names and IP addresses captured by NHS systems as part of their Ratings and Reviews Service, we do not export or store this data outside of the NHS Platform.
Your personal data is collected during the data user registration process for posting the comment and will be held in accordance with the GDPRUK and DPA 2018 as per NHS requirements. Thornacre will have access to your personal data but will not store it outside of the authorised NHS Platforms.
The legal basis in data protection legislation for processing your personal data is that it is "necessary for the performance of a task carried out in the public interest". Your personal data will be stored on NHS owned systems for as long as is necessary by us and NHS England to provide appropriate moderation services.
Your data will not be disclosed to any further third party except unless where lawfully instructed by NHS Digital to do so.
How long will we access your personal data?
We will only access your personal data at the point of moderation or review of the content you posted.
Your rights, e.g. access, rectification, erasure
The data we review contains your personal data, and you have
considerable say over what happens to it. You have the right:
• To see what data we hold about you.
• To ask us to stop using your data but keep it on record.
• To have all or some of your data corrected.
• To ask us to delete your data (although this means you will no
longer be able to access the available data, service, tool or
application).
• To object to the processing of your data in certain
circumstances and
• To lodge a complaint with the independent Information
Commissioner (ICO) if you think we are not handling your data
fairly or in accordance with the law. You can contact the ICO at
https://ico.org.uk/ or telephone 0303 123 1113.
Your personal data will on be stored by NHS Digital, and not by Thornacre.
Data Controller: NHS Digital / NHS England Data Processor: Thornacre Engineeing Ltd
Whilst any queries should be raised with the Controller (NHS England), please feel free to forward any data protection queries to:
The Data Protection Officer
parag@thornacre.com