Privacy notice

South Tyneside and Sunderland NHS Foundation Trust (STSFT) is registered as a data controller. Its registration number is ZA513650.

This privacy notice explains how we use and share your information. We will continually review and update this Privacy Notice to reflect changes in our services and feedback from service users, as well as to comply with changes in the law.

You can download full versions of our privacy notices by clicking on the links below: 

As a patient, relative or carer, we need your information to be able to identify you and to ensure that we can give you the correct treatment. We need to keep a record of the treatment you have had and who has helped you.

The information we keep about you helps all the staff in the hospital or in the community who provide your care to ensure that you get the best possible care and treatment.

We will hold:

  • Your name
  • Your date of birth
  • Your current and previous addresses
  • The name and address of your nearest relative
  • Information about your health problems
  • Other information about you and your family and who you live with
  • Your occupation
  • What is important to you

We keep your information in both paper records and on computers.

The law requires us to keep your information for set amounts of time after we have finished seeing you. This will be dependent upon the treatment you have had.

If you are an adult when we start seeing you, we will keep your information for 8 years from the date we last see you.

We keep records of pregnancy for 25 years after the birth of the last child.

If you are a child/young person, then we will keep your information until you reach the age of 25

Some records are kept longer than this depending upon what they are about. Please ask if you are unsure how long we will keep your records.

We will share your information will all those who will provide you with care, including;

  • Doctors
  • Nurses
  • Other hospitals
  • Ambulance services
  • Social workers
  • Teachers
  • Local councils
  • Voluntary services
  • Nursing homes
  • Integrated Care Boards
  • NHS England

We will always try to tell you who we will be sharing your information with. In the North East we use the Great North Care Record (GNCR) to share your information. Further information on the GNCR can be found here: https://www.greatnorthcarerecord.org.uk

We will use your information in a way that follows data protection laws and Trust policies and procedures. 

Everyone working for the NHS must keep your information secure and only look at it when they are providing you with care and treatment. 

We make sure that paper records are kept locked away when not in use.

We make sure that our computers do not let anyone see information about you unless they are the staff that are helping you.

We protect your information by following data protection laws:

  • UK General Data Protection Regulation (UKGDPR)
  • Data Protection Act (DPA) 2018

We also follow the 10 National Data Guardian (NDG) standards for data security. These standards are designed to protect sensitive data, and also protect critical services which may be affected by a disruption to critical IT systems (such as in the event of a cyber attack).  

You can have a copy of the information we hold about you. There is no charge for the first copy we give you and we will give it to you within 30 days where we can.

If you have a lot of records, we may take a little longer but we will always tell you about this.

To ask for a copy, please contact:

If you live in Sunderland

 

Access and Disclosure Team

Medical Records Department 

South Tyneside and Sunderland NHS Foundation Trust 

Sunderland Royal Hospital 

Kayll Road 

Sunderland 

SR4 7TP 

Or email: stsft.srhaccesstomedicalrecords@nhs.net 

 

If you live in South Tyneside or Gateshead or wish to access records for Sunderland Community Services

Access and Disclosure Team 

Medical Records Department 

Ingham Wing 

South Tyneside and Sunderland NHS Foundation Trust 

Harton Lane 

South Shields 

NE34 0PL 

Or email: stsft.stdhaccesstomedicalrecords@nhs.net 

You can ask for a copy of all of the information that we hold on you. If we believe that certain information in the your record might cause serious harm to your physical or mental health or to that of another person they may not give you that piece of information.

We must make sure that the information in your records is correct. If the information is factually wrong then we will change or remove it. However, if it is factually correct but you don’t agree with it, we will not change it but we will ensure that the fact you disagree with it is recorded.

The law requires us to keep records about you and the treatment we have given you.

We can only delete or destroy these records if:

  • they have reached the end of the period that we have to keep them for
  • the record is factually wrong
  • we shouldn’t have collected the information in the first place

You can ask us not to use your records for some things, like training or research and we will not use them.

You can ask us not to share your records with others who would care for you. This may impact on the care that they can give you. Unless it is essential to share the information, we will not share it.

If you have any questions about how we use your information please speak to the doctors,nurses or other staff caring for you.

You can also contact our Data Protection Officer or Caldicott Guardian. Their details are below:

Data Protection Officer

Our Data Protection Officer (DPO) is responsible for making sure we follow Data Protection law.  The DPO is the person to contact if you:

  • would like to know more about how we use your information
  • need information in any accessible format or language
  • if you do not want to have your information used in any of the ways described.

Their contact details are:

James Carroll
Data Protection Officer
South Tyneside and Sunderland NHS Foundation Trust
Trust Headquarters
Sunderland Royal Hospital
Kayall Road
Sunderland
SR4 7TP

Or email: stsft.dpo@nhs.net 

 
Caldicott Guardian

The Caldicott Guardian is the person who makes the final decision on how, what, when and why we will use your personal information.. 

Our Caldicott Guardian is Dr Lawrence Gnanaraj. He is also Associate Medical Director.  

 
Independent advice

If you need independent advice about data protection, privacy and information-sharing issues, or if you want to make a complaint you can contact the Information Commissioner:

The Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Phone: 08456 30 60 60 

Website: www.ico.org.uk

 

Cookies

Cookies are small text files that websites put on your computer when you visit them.

They help websites work better and can also give useful information to the people who run the site.

Some cookies are needed for this website to work, like the ones that help you use our accessibility toolbar. These cookies usually disappear when you close your browser. You can learn more in the “Necessary cookies” section.

We also use other cookies, like Google Analytics, to help us collect information and make the website better. You can choose not to allow these cookies. You can learn more in the “Additional cookies” section.

You can read more about cookies on the Information Commissioner's Office website. 

Necessary cookies 

The following cookies are necessary to our site functioning.

Cookie Purpose Expiry
cookieconsent_status  Persistently records your option regarding additional cookies.  1 year

Necessary accessibility cookies 

The following necessary cookies allow the functions within our accessibility toolbar to work optimally.

Cookie Purpose Expiry
accessibility-controls  Records option regarding additional cookies.  End of browsing session 
saveFontSize  Allows the website (CMS) to record the user’s font size selection.  End of browsing session 
contrast-mode  Allows the website (CMS) to record the user’s contrast mode selection.  End of browsing session 
googtrans  Allows the language of page content to be changed and records the language selected.  End of browsing session 

 

         
         

We use some third‑party cookies for things like analytics and media.

If you don't allow these extra cookies, some media from other websites like YouTube videos or Google Maps might not load on this site.

Analytics cookies 

To help us make the website better, we use Google Analytics to see how visitors use the site.

You can read more about how Google Analytics uses data on Google’s website.

You can choose not to use Google Analytics by saying no to additional cookies on our site, or by using the Google Analytics Opt‑out Browser Add‑on.

These are some of the cookies we use: 

What is the cookie? What do we use it for? How long do they last?
_ga  Distinguishes user for Google Analytics.  2 years
_gid  Distinguishes user for Google Analytics.  1 day
_gat  Throttles request rate for Google Analytics.  1 minute
_ga_{ID}  Persists session state for newer versions of Google Analytics.  2 years
_gat_gtag_UA_{ID}  Persists session state for older versions of Google Analytics.  1 minute
__utma  Distinguishes user and session for Google Analytics.  2 years
__utmb  Determines new session or visit for Google Analytics.  30 minutes
__utmc  Determines new session or visit for Google Analytics.  End of browsing session 
__utmz  Stores traffic source for Google Analytics. 

6 months

 
Embed cookies 

Sometimes we show content on our site from YouTube, Google Maps or Vimeo. These tools use third‑party cookies. We use privacy‑friendly settings so that as few cookies as possible need your consent.

Any extra cookies that are still needed and the videos or maps that use them will not appear unless you choose “Accept additional cookies.”

What is the cookie?  Where does it come from? What do we use it for? How long does it last?
CONSENT YouTube (.youtube-nocookie.com)  Google cookie tracking consent with analytics and/or ad integration.  2 years
CONSENT Google Maps (.google.com)  Google cookie tracking consent with analytics and/or ad integration.  2 years
__cf_bm  Vimeo (.vimeo.com)  Vimeo ClouldFlare layer which filters out requests from bots.  30 minutes
 
Captcha cookies 

We use Google reCAPTCHA to check that you are a real person when you send information through the website. Most of the time, you will only see it on pages that have forms.

What is the cookie? Where does it comes from? What is the url? What do we use it for? How long does it last?

_GRECAPTCHA
_grecaptcha

Google

/recaptcha

Provides risk analysis to Google spam protection.

6 months