Microsoft Office 365 Apps Privacy Notice

Privacy Notice: Use of Personal Data in Microsoft Office 365 Apps (SharePoint, Forms, etc)

As part of our commitment to protecting your privacy, this notice explains how your personal data may be collected, used, and safeguarded when using Microsoft Office 365 Apps (SharePoint, Forms, etc) within Birmingham Community Healthcare NHS Foundation Trust (the Trust).

What data we collect

We may collect personal data from both patients and employees, including:

• Patients: name, contact details, NHS number, medical history, and any other relevant information related to your care.
• Employees: name, contact details, job role, and other relevant employment information.

 

How we use your data

Your personal data may be used for the following purposes:

• Patients: to support the delivery of healthcare services, manage medical records, respond to enquiries and ensure continuity of care.
• Employees: to manage employment records, internal communication, training and administrative purposes.
• Both patients' and employees' data may be processed to ensure compliance with legal obligations and wider NHS policies.

 

How we share your data

Your data will only be shared with authorised Trust staff or trusted third parties directly involved in your care or employment. We do not share your information externally without your consent, unless required by law.

 

Data security

We ensure that all personal data is encrypted and protected with strict access controls. Only authorised personnel can access data stored on Microsoft Office 365 Apps (SharePoint, Forms, etc) and all data transfers are carried out securely.

 

Your rights

You have the right to:

• Access the personal data we hold about you.
• Request corrections or deletion of your data where appropriate.
• Object to how your data is being processed in certain circumstances.

 

Retention

Your personal data will be retained according to Trust records management policies, ensuring it is kept only for as long as necessary for the provision of care or other legitimate purposes.

 

 

Contact us

If you have any questions or concerns about how we use your personal data, or if you wish to exercise your rights, please contact:

Data Protection Officer (DPO)
Birmingham Community Healthcare NHS Foundation Trust
Michael Morgan-Bullock
Email: bchc.dpo@nhs.net
Address: Data Protection Officer, Information Governance Departmentt, Birmingham Community Healthcare NHS Foundation Trust, 3 Priestley Wharf, Holt Street, Birmingham, B7 4BN

 

 

Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Website: https://ico.org.uk
Phone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF