Privacy notice for Access Intelligent Care Platform (AICP)

Who we are

We are Shropshire Community Health NHS Trust. The Trust provides a range of community-based health services for adults and children in Shropshire, Telford and Wrekin, and some services to people in surrounding areas. The Trust is registered with the Information Commissioner’s Office (registration number Z2709115)

Our legal basis for processing your personal and special category information

As a healthcare provider the lawful basis for processing your personal information is:

• to process this data in the performance of a task carried out in the public interest or in the exercise of the data controller’s official authority

The lawful basis for processing special category data (for example sensitive information such as your health information) is:

• preventative medicine; and/or
• to enable the provision of health or social care or treatment or the management of health of social care systems and services

What personal information we collect about you and how do we obtain it

The personal information we collect might include name, address, DOB, NHS number, health conditions, appointments, care and treatments you receive from the NHS. This will be collected when you access any of our services e.g. a stay in hospital, attendance at a clinic, or other community domiciliary appointment.

Why we collect your personal information and what do we do with it

Your information is collected to enable us to provide and manage your health and social care needs. We keep full and accurate records about the healthcare and treatment you receive as one of our patients.

Who we share your personal information with and why

We may use AICP to share your relevant personal information with MPFT if you are being cared for by both SCHT and MPFT at the same time. This is known as sharing for “Direct Care” purposes. It ensures NHS staff directly involved in your care can see up to date information about you, so you receive high quality health and social care.

How we keep your information safe and maintain your records

All staff working in the Trust can only access information when authorised to do so, when there is a legitimate reason or on a need-to-know basis. They are trained to handle your information correctly, protect your privacy and keep your information secure. We do not keep your records for longer than necessary. Records are retained in accordance with the Department of Health and Social Care guidance and at the end of the life cycle records are destroyed in a safe manner.

What are your data protection rights?

Under the data protection legislation, you have the right to request access and receive a copy of your personal information by contacting the Trust as the data controller.

You can also contact us to raise any concerns regarding the handling of your information, for example, you may feel the information needs to be rectified or you may have an objection to how it is being used or shared.

Further Information

Please visit our Trust website: Managing your records and Your Data Matters to the NHS

If you have concerns

If you have queries or concerns you can contact:
Data Protection Officer (IG Dept)
Shropshire Community Health NHS Trust
Ground Floor, Mount McKinley,
Shrewsbury Business Park,
Anchorage Ave,
Shrewsbury SY2 6FG
Email: shropcom.IGQ@infreemation.co.uk

You can also raise concerns to the ICO:
Information Commissioner’s Office Wycliffe House,
Water Lane, Wilmslow,
Cheshire SK9 5AF
www.ico.org.uk