Privacy notice
South Tyneside and Sunderland NHS Foundation Trust (STSFT) is registered as a data controller. Its registration number is ZA513650.
This privacy notice explains how we use and share your information. We will continually review and update this Privacy Notice to reflect changes in our services and feedback from service users, as well as to comply with changes in the law.
You can download full versions of our privacy notices by clicking on the links below:
As a patient, relative or carer, we need your information to be able to identify you and to ensure that we can give you the correct treatment. We need to keep a record of the treatment you have had and who has helped you.
The information we keep about you helps all the staff in the hospital or in the community who provide your care to ensure that you get the best possible care and treatment.
We will hold:
- Your name
- Your date of birth
- Your current and previous addresses
- The name and address of your nearest relative
- Information about your health problems
- Other information about you and your family and who you live with
- Your occupation
- What is important to you
We keep your information in both paper records and on computers.
The law requires us to keep your information for set amounts of time after we have finished seeing you. This will be dependent upon the treatment you have had.
If you are an adult when we start seeing you, we will keep your information for 8 years from the date we last see you.
We keep records of pregnancy for 25 years after the birth of the last child.
If you are a child/young person, then we will keep your information until you reach the age of 25
Some records are kept longer than this depending upon what they are about. Please ask if you are unsure how long we will keep your records.
We will share your information will all those who will provide you with care, including;
- Doctors
- Nurses
- Other hospitals
- Ambulance services
- Social workers
- Teachers
- Local councils
- Voluntary services
- Nursing homes
- Integrated Care Boards
- NHS England
We will always try to tell you who we will be sharing your information with. In the North East we use the Great North Care Record (GNCR) to share your information. Further information on the GNCR can be found here: https://
We will use your information in a way that follows data protection laws and Trust policies and procedures.
Everyone working for the NHS must keep your information secure and only look at it when they are providing you with care and treatment.
We make sure that paper records are kept locked away when not in use.
We make sure that our computers do not let anyone see information about you unless they are the staff that are helping you.
We protect your information by following data protection laws:
- UK General Data Protection Regulation (UKGDPR)
- Data Protection Act (DPA) 2018
We also follow the 10 National Data Guardian (NDG) standards for data security. These standards are designed to protect sensitive data, and also protect critical services which may be affected by a disruption to critical IT systems (such as in the event of a cyber attack).
You can have a copy of the information we hold about you. There is no charge for the first copy we give you and we will give it to you within 30 days where we can.
If you have a lot of records, we may take a little longer but we will always tell you about this.
To ask for a copy, please contact:
If you live in Sunderland
Access and Disclosure Team
Medical Records Department
South Tyneside and Sunderland NHS Foundation Trust
Sunderland Royal Hospital
Kayll Road
Sunderland
SR4 7TP
Or email: stsft.srhaccesstomedicalrecords@nhs.net
If you live in South Tyneside or Gateshead or wish to access records for Sunderland Community Services
Access and Disclosure Team
Medical Records Department
Ingham Wing
South Tyneside and Sunderland NHS Foundation Trust
Harton Lane
South Shields
NE34 0PL
Or email: stsft.
You can ask for a copy of all of the information that we hold on you. If we believe that certain information in the your record might cause serious harm to your physical or mental health or to that of another person they may not give you that piece of information.
We must make sure that the information in your records is correct. If the information is factually wrong then we will change or remove it. However, if it is factually correct but you don’t agree with it, we will not change it but we will ensure that the fact you disagree with it is recorded.
The law requires us to keep records about you and the treatment we have given you.
We can only delete or destroy these records if:
- they have reached the end of the period that we have to keep them for
- the record is factually wrong
- we shouldn’t have collected the information in the first place
You can ask us not to use your records for some things, like training or research and we will not use them.
You can ask us not to share your records with others who would care for you. This may impact on the care that they can give you. Unless it is essential to share the information, we will not share it.
If you have any questions about how we use your information please speak to the doctors,nurses or other staff caring for you.
You can also contact our Data Protection Officer or Caldicott Guardian. Their details are below:
Data Protection Officer
Our Data Protection Officer (DPO) is responsible for making sure we follow Data Protection law. The DPO is the person to contact if you:
- would like to know more about how we use your information
- need information in any accessible format or language
- if you do not want to have your information used in any of the ways described.
Their contact details are:
James Carroll
Data Protection Officer
South Tyneside and Sunderland NHS Foundation Trust
Trust Headquarters
Sunderland Royal Hospital
Kayall Road
Sunderland
SR4 7TP
Or email: stsft.
Caldicott Guardian
The Caldicott Guardian is the person who makes the final decision on how, what, when and why we will use your personal information..
Our Caldicott Guardian is Dr Lawrence Gnanaraj. He is also Associate Medical Director.
Independent advice
If you need independent advice about data protection, privacy and information-sharing issues, or if you want to make a complaint you can contact the Information Commissioner:
The Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Phone: 08456 30 60 60
Website: www.
Cookies
Cookies are small text files that websites put on your computer when you visit them.
They help websites work better and can also give useful information to the people who run the site.
Some cookies are needed for this website to work, like the ones that help you use our accessibility toolbar. These cookies usually disappear when you close your browser. You can learn more in the “Necessary cookies” section.
We also use other cookies, like Google Analytics, to help us collect information and make the website better. You can choose not to allow these cookies. You can learn more in the “Additional cookies” section.
You can read more about cookies on the Information Commissioner's Office website.
Necessary cookies
The following cookies are necessary to our site functioning.
| Cookie | Purpose | Expiry |
|---|---|---|
| cookieconsent_status | Persistently records your option regarding additional cookies. | 1 year |
Necessary accessibility cookies
The following necessary cookies allow the functions within our accessibility toolbar to work optimally.
| Cookie | Purpose | Expiry |
|---|---|---|
| accessibility-controls | Records option regarding additional cookies. | End of browsing session |
| saveFontSize | Allows the website (CMS) to record the user’s font size selection. | End of browsing session |
| contrast-mode | Allows the website (CMS) to record the user’s contrast mode selection. | End of browsing session |
| googtrans | Allows the language of page content to be changed and records the language selected. | End of browsing session |
We use some third‑party cookies for things like analytics and media.
If you don't allow these extra cookies, some media from other websites like YouTube videos or Google Maps might not load on this site.
Analytics cookies
To help us make the website better, we use Google Analytics to see how visitors use the site.
You can read more about how Google Analytics uses data on Google’s website.
You can choose not to use Google Analytics by saying no to additional cookies on our site, or by using the Google Analytics Opt‑out Browser Add‑on.
These are some of the cookies we use:
| What is the cookie? | What do we use it for? | How long do they last? |
|---|---|---|
| _ga | Distinguishes user for Google Analytics. | 2 years |
| _gid | Distinguishes user for Google Analytics. | 1 day |
| _gat | Throttles request rate for Google Analytics. | 1 minute |
| _ga_{ID} | Persists session state for newer versions of Google Analytics. | 2 years |
| _gat_gtag_UA_{ID} | Persists session state for older versions of Google Analytics. | 1 minute |
| __utma | Distinguishes user and session for Google Analytics. | 2 years |
| __utmb | Determines new session or visit for Google Analytics. | 30 minutes |
| __utmc | Determines new session or visit for Google Analytics. | End of browsing session |
| __utmz | Stores traffic source for Google Analytics. |
6 months |
Embed cookies
Sometimes we show content on our site from YouTube, Google Maps or Vimeo. These tools use third‑party cookies. We use privacy‑friendly settings so that as few cookies as possible need your consent.
Any extra cookies that are still needed and the videos or maps that use them will not appear unless you choose “Accept additional cookies.”
| What is the cookie? | Where does it come from? | What do we use it for? | How long does it last? |
|---|---|---|---|
| CONSENT | YouTube (.youtube-nocookie.com) | Google cookie tracking consent with analytics and/or ad integration. | 2 years |
| CONSENT | Google Maps (.google.com) | Google cookie tracking consent with analytics and/or ad integration. | 2 years |
| __cf_bm | Vimeo (.vimeo.com) | Vimeo ClouldFlare layer which filters out requests from bots. | 30 minutes |
Captcha cookies
We use Google reCAPTCHA to check that you are a real person when you send information through the website. Most of the time, you will only see it on pages that have forms.
| What is the cookie? | Where does it comes from? | What is the url? | What do we use it for? | How long does it last? |
|---|---|---|---|---|
|
_GRECAPTCHA |
/recaptcha |
Provides risk analysis to Google spam protection. |
6 months |