Overview:

When you use the Pathways Web application (the 'service'), we collect information about how you used, how you reached and how you leave the service. This policy defines how your information is used.

Information we may collect, and how we use it:

We ask you for personal information so we can understand who is using the service. For this, we will collect your name, email address, your job title and the organisation that you work for. This information is used to create your account, to support the forgotten password functionality and to facilitate user access audit of the service. This information may also allow us to improve the service for future users. The information is collected by NHS Digital who provide the service.

We collect the following anonymous information:

We collect part of your IP address, the website you came from, details of which version of web browser you used and information on how you used the site (using cookies and page tagging techniques). This information helps us to improve the service.

We store your information for up to 8 years in accordance with the NHS Digital data retention policy.

Keeping your data secure:

We do not require you to provide sensitive personal data. We only collect data that is necessary for the operation of this service. We store your data on secure servers in accordance with NHS Digital security policies.

Data sharing:

Your personal data will not be shared with other organisations.

Legal powers:

We may pass on your personal information if we have a legal obligation to do so. In the event of a claim against us from you as a user, we and other third parties, such as solicitors acting on our behalf, may need to look at this information.

Other than the circumstances outlined above we will not share personal information with other third parties without your consent.

Article 6 of the General Data Protection Regulation gives the service a lawful basis to process personal data.

Further information:

NHS Digital, 7 and 8 Wellington Place, Leeds, West Yorkshire, LS1 4AP is the Data Controller for the service under the Data Protection Act 2018. You can contact NHS Digital’s Data Protection Officer at the same address.

We will process your data in line with the Data Protection Act 2018.

You can:

• find out what information we hold about you, ask us to correct it if it’s wrong, or delete it by emailing nhs.pathways@nhs.net (for our Data Protection Officer contact enquiries@nhsdigital.nhs.uk)
• contact the Information Commissioner’s Office, Wycliffe House Water Lane, Wilmslow SK9 5AF www.ico.org.uk if you want to make a complaint about how we have managed your data

Links to other websites:

This privacy policy only applies to this website. It does not cover external websites that we link to.

If you go to another website from this one, please read the privacy policy on that website to find out what it does with your information.