Please ensure that you have read the following information about the service and how your information will be used. The Royal Wolverhampton NHS Trust (RWT) is the Data Controller for your information.
Please note that you are asked to ensure your registered mobile phone number is up to date. If you believe it may not be up to date, then please contact the Patient Access Team on 01902 307999 or any Trust reception area who can amend this information for you.
Why are we collecting your data and what data items will we process?
People are increasingly using technology in almost every aspect of their lives. Here at The Royal Wolverhampton NHS Trust we are keen to provide a similar level of service, using technology to allow more control over hospital appointments.
To support this we are in the process of implementing the use of a patient portal called myRWT which will be accessible via a mobile web app.
An invitation to register with the portal will be sent to those patients who have registered a personal mobile number with the organisation and once registered you will be able to:- see details relating to outpatient appointments
- view your appointment letters
- add appointments to your personal calendar
- elect to go “paperless” (It is possible that you will still receive some letters by post)
- your name
- mobile phone numbers
- email address
- IP address
- date of birth
- password details, answers to security questions (for example your mother's maiden name), or both
- any other information you may give us when you write to us or contact us in other ways
- any other information provided to us by a health professional
How we will use this data and what is the legal basis for processing the data?
The data collected at a previous attendance or from a referral received from your general practitioner or other healthcare provider will be used to:- Invite you to register with the myRWT patient via your mobile phone
- Notify you of future appointments and any subsequent changes
- Maintain or update personal information within the myRWT portal
- providing your information to the health professionals you have booked appointment(s) with;
- processing appointments, orders, registrations and enquiries;
- allowing you to participate in interactive features of our service, including access to the health professionals' appointment booking system;
- sending appointment reminders
- confirming any appointment which you may be required to do directly to the health professional by text message or other means
- monitoring compliance with our terms and conditions.
We collect information from you at the point of contact you make with the Royal Wolverhampton NHS Trust and its services to you as a health care provider. Therefore the legal basis under the General Data Protection Regulation (GDPR) 2016 for us to initially collect information from you is as follows.
6(1)(e) ‘...for the performance of a task carried out...in the exercise of official authority...- As a NHS organisation, we are legally required under the NHS Act 2006 to process personal data about you to support the delivery of your care. This also extends to communicating with you about any treatment you have received or about to receive from the Trust.
- As a NHS organisation, we are authorised to process any health data to assist with your treatment.
However, as the data subject, should you wish to sign up to the myRWT app, then it is your choice to do so and therefore you are consenting to using this service. Therefore the legal basis for us to process your data once set up on the myRWT app is as follows:
6(1)(a) ‘...the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
9(2)(a) the data subject has given explicit consent to the processing of those personal (special category) data for one or more specified purposes...’
Who will we share your data with outside of those in this programme?
The data we collect will be shared with a company called Zesty for the purposes of managing your appointment. Zesty provide the myRWT app, under a contract with RWT and are therefore a processor.
Zesty will use the information we collected from you at a previous attendance or from a referral received via your general practitioner to generate an invitation to register with the myRWT patient portal.
If you choose to set up an account Zesty will continue to use your information to support the functionality of the myRWT patient portal which will enable you to access details of some of your hospital appointments with the Royal Wolverhampton NHS Trust.
Please note that if you access our service using your NHS login details, the identity verification services are managed by NHS England. NHS England is the controller for any personal information you provided to NHS England to get an NHS login account and verify your identity, and uses that personal information solely for that single purpose. For this personal information, our role is a “processor” only and we must act under the instructions provided by NHS England (as the “controller”) when verifying your identity. Please see NHS England’s Privacy Notice and Terms and Conditions This restriction does not apply to the personal information you provide to us separately.
How long will we process your data for?
All our records are destroyed in accordance with the NHS Retention Schedule, which sets out the appropriate length of time each type of NHS records is retained. We do not keep your records for longer than necessary.
All records are destroyed confidentially once their retention period has been met, and the Trust has made the decision that the records are no longer required. For more information please see the Record Management Code for Practice for Health and Social Care 2016, retention schedules
What are your rights and how to enforce them?
You have the right to request a copy of any information held by the Trust as well as any supplementary information. If you believe your information may be inaccurate or incomplete you can make a request to have your information reviewed and corrected in certain circumstances. Please contact rwh-tr.healthrecordsaccess@nhs.net.
If you choose to sign up for the service but change your mind and want to close the account this can be managed via the myRWT patient portal.
You also have the right to have your information held by Zesty deleted if you chose to de register.
What are my options to opt-out from this data processing?
- You can opt out from the MyRWT Patient Portal by replying ‘STOP’ to any text message that you receive relating to the Portal. You may still receive text messages from the Trust for other purposes e.g. appointment reminders if you opt out through this method.
- You can also choose to delete your account within the portal itself by choosing ‘Delete Your Account’ from the Account section of the Portal, if you change your mind and wish to opt out after registering.
Where do I go if I want further information?
For further information on this processing or the uses of your data, in the first instance contact the Head of Patient Access via Switchboard on 01902 307 999.
If you still have concerns or wish to speak to someone independently about the use of your data under this initiative you can contact the Trust’s Data Security and Protection Team on the following address rwh-tr.IG-Enquiries@nhs.net.
