1. Data Controller
The data controller for this website is Oxford Health NHS Foundation Trust (OHFT). OHFT is registered with the Information Commissioner’s Office (ICO) under registration number Z1411013.
2. Google Analytics, YouTube and Cookies
This website uses standard Google Analytics to enhance user experience and collect anonymous usage statistics. Google Analytics cookies:
- Store information such as visit time, referral source, and repeat visits.
- Do not collect personal data like names or addresses.
- Can be disabled without affecting site functionality. Learn more about opting out: https://tools.google.com/dlpage/gaoptout
YouTube cookies:
- Keep statistics of what YouTube videos the user has seen.
- Estimate the user’s bandwidth on pages with embedded YouTube videos.
3. Contact for Patients and the Public
We welcome involvement from patients, carers, and the public in our research. If you wish to participate in Patient and Public Involvement (PPI) activities, your personal details will be used solely for that purpose and will not be shared. You may unsubscribe or request removal at any time by contacting the OH BRC PPI team.
4. OHFT Trust Privacy Notice for Patients
Information About You and How We Use It
When you engage with OHFT services, information about your health, treatment, and background may be recorded to support your care. This data forms part of your health record and is securely stored on systems such as OPAS G2.
How Your Records Are Used to Help You
Your records ensure continuity of care and allow clinical teams including healthcare professionals, support staff, and students to collaborate effectively. All staff are bound by confidentiality laws and monitored by OHFT’s Caldicott Guardian.
How Your Records Help Us
We use anonymised data to improve services, conduct research, and support public health initiatives. This helps us deliver better care and contribute to medical advancements.
Sharing Your Information
Your personal health information may be shared with other NHS organisations or research partners when necessary for your care or with your consent. We ensure all data sharing complies with legal and ethical standards.
Your Information Rights
You have the right to:
- Be informed about how your data is used.
- Access your data.
- Request corrections.
- Object to processing.
- Request data deletion (where applicable).
Accessing Your Health Record (Subject Access Request)
You can request access to your health record by submitting a Subject Access Request. Details on how to do this are available on the OHFT website: https://www.oxfordhealth.nhs.uk/privacy
Data Security Measures
Oxford Health NHS Foundation Trust takes data security seriously and implements robust measures to protect your personal information. These include:
- Encryption: All data transmitted via the website is encrypted using HTTPS protocols
- Access Controls: Only authorised personnel have access to personal data, governed by role-based permissions
- Secure Storage: Patient records and other sensitive data are stored on secure servers with regular backups and monitoring
- Audit Trails: All access to patient data is logged and reviewed to ensure compliance
- Training: Staff receive regular training on data protection, confidentiality, and cybersecurity.
- Incident Response: OHFT has a formal process for managing data breaches, including notification procedures and mitigation strategies.