Privacy Notice


Privacy Notice for Safe To Move

This privacy notice explains how Humber and North Yorkshire Health and Care Partnership (“we”, “us”, “our”) collects and uses personal data when you use the Safe To Move website.

Who we are

Humber and North Yorkshire Health and Care Partnership is the data controller for the Safe To Move website.

What information we collect

The Safe To Move website is designed to minimise the collection of personal data.

We may collect:

  1. A patient identifer (optional), entered by the user on the summary screen. This will be deleted 30 days from entry.
  2. Technical information (such as browser type and usage data) to support website performance and improvement

No additional identifiable patient data is required to use the website.

How we use this information

If provided, the patient name is used solely to:

  1. Help users identify who a generated summary relates to
  2. Display within outputs such as printed summaries, PDFs, or emails

We do not use this information for automated decision-making or profiling.

Lawful basis for processing

We process personal data under:

  1. Article 6(1)(e) UK GDPR – Public task
  2. Article 9(2)(h) UK GDPR – Health or social care purposes

Users entering personal data are responsible for ensuring they have an appropriate lawful basis under their organisation’s policies.

How we store and protect data

  1. Patient identifiers are stored using industry-standard encryption at rest and will be deleted 30 days after entry.
  2. Access is restricted to authorised administrators with a legitimate need
  3. We apply appropriate technical and organisational security controls to protect against unauthorised access, loss, or misuse

Emailing and exporting information

The website allows users to generate outputs (including PDFs and emails).

When using these features:

  1. Users are responsible for ensuring that any personal data is shared appropriately
  2. Email should only be used in accordance with organisational policies and secure communication guidance
  3. We do not control how exported or emailed data is handled once it leaves the system

How long we keep data

We retain personal data only for as long as necessary to support the operation and improvement of the website.

Retention periods are under review and will be defined as part of ongoing website governance.

Sharing your information

We do not share personal data with third parties, except where required by law.

Your data protection rights

Under UK data protection law, individuals have rights including:

  1. Access to their data
  2. Correction of inaccurate data
  3. Erasure (where applicable)
  4. Restriction of processing

To exercise these rights, please contact us.

Contact details

Humber and North Yorkshire Health and Care Partnership at hnyicb.falls-app@nhs.net

Complaints

You can raise concerns with:

Information Commissioner's Office https://www.ico.org.uk

Changes to this notice

We may update this privacy notice as the website develops.

Date

Last updated: 21st April 2026