Terms and conditions
Terms and conditions
Privacy policy for My Health My Way website
This privacy policy explains how we use any personal information we collect about you when you use the website.
Contents:
1. What information do we collect about you?
2. How will we use the information about you?
3. Who can access my information?
4. How long do we retain your information for?
5. How do we use cookies?
6. Your data protection rights
7. How to contact us
What information do we collect about you?
When you use the My Health My Way site, we collect some personal information. This includes:
· Your first name
· Your email address
· Your organisation
· Your age
· Your gender
· Your IP address
We also collect some sensitive information. This includes:
· Your ethnicity
· If you consider yourself to have a disability
· If you have caring responsibilities
· Health data (your mental wellbeing, your diet, your physical activity levels, if you smoke, your alcohol consumption, your sleep quality)
· Items you bookmark in your wellbeing library
· The number of action plans you create, submit and the wellbeing topic you create an action plan for (no other data is collected from any other action plan steps)
We also collect anonymous information, including:
· Information about your computer or device (e.g., device and browser type)
· Information about how you use our website (e.g., which pages you have viewed, the time you viewed them, what you clicked on, and your geographical location based on your IP address)
How will we use the information about you?
We use the personal and sensitive information you provide for the following purposes:
1. To ensure that the website is being tested by a representative sample of the Integrated Care System workforce
2. To tailor the content you see in the site so it’s more relevant to you
3. We will use your email address to occasionally remind you to update your wellbeing log, update your action plan, or to inform you of new site features and content. You can opt out of receiving email notifications at any time in ‘Your Account’ section.
We use anonymous information collected to improve the content and functionality of the website.
The purposes for which we use your data described above are justified by UK data protection law.
The lawful basis on which we are able to process your personal and sensitive data: We only do this where we have your explicit consent, obtained from you when you register to use the site.
Who can access my information?
Hertfordshire and West Essex Integrated Care System (as the data controller) and Moore-Wilson New Media Ltd. (as the data processor) abide by strict data protection policies. Moore-Wilson New Media Ltd is the digital agency that have developed and host this website.
Your personal, sensitive, and anonymous data can be accessed by Hertfordshire and West Essex Integrated Care System, Hertfordshire County Council’s Public Health Team and by Moore-Wilson New Media Ltd data team.
Any personal or sensitive information you provide can be accessed by Hertfordshire and West Essex Integrated Care System and Hertfordshire County Council’s Public Health Team for evaluation purposes only. Your personal and sensitive data can be accessed by Moore-Wilson New Media Ltd data team for website management purposes only.
No identifiable personal or sensitive information you provide on the site is shared with any third party beyond Hertfordshire County Council’s Public Health Team. Any other data collected from the site cannot be accessed by any other third party, any other organisation/employer, or their occupational health or HR teams.
Anonymous information is shared with Google. Google collects information through our use of Google Analytics on our website. Google uses this information, including IP addresses and information from cookies, for a number of purposes, such as improving its Google Analytics service. Information is shared with Google on an aggregated and anonymised basis. To find out more about what information Google collects, how it uses this information and how to control the information sent to Google, please see the following page: https://www.google.com/policies/privacy/partners/
You can opt out of Google Analytics by installing the browser plugin here: https://tools.google.com/dlpage/gaoptout
How long do we retain your information for?
Hertfordshire and West Essex Integrated Care System and Hertfordshire County Council’s Public Health Team retain personal and sensitive data collected on registration and from use of the website for evaluation purposes only to monitor uptake and use of the website. No information that makes it possible to identify you is shared with any other third party. Your data will be retained for the lifetime of the website. If the website ceases to exist, all identifiable user data will be destroyed. Anonymous data may be kept indefinitely.
How do we use cookies?
Cookies are data files which are sent from a website to a browser to record information about users for various purposes.
We use cookies on our website, including functional, analytical and marketing cookies. You can reject some or all of the cookies we use on or via our website by changing your browser settings but doing so can impair your ability to use our website or some or all of its features. For further information about cookies, including how to change your browser settings, please visit www.allaboutcookies.org.
Details of the cookies we use
The table below explains the cookies we use, why we use them and how long they last.
Cookie Name | Provider | Category | Duration | Purpose |
adOtr | stackpath.com | HTTP Cookie | Session | Used in order to detect spam and improve the website's security. Does not store visitor specific data. |
PRLST | stackpath.com | HTTP Cookie | Session | Used in order to detect spam and improve the website's security. Does not store visitor specific data. |
sp_lit | stackpath.com | HTTP Cookie | 1 day | Used in order to detect spam and improve the website's security. Does not store visitor specific data. |
spcsrf | stackpath.com | HTTP Cookie | 1 day | Ensures visitor browsing-security by preventing cross-site request forgery. This cookie is essential for the security of the website and visitor. |
SPSE | stackpath.com | HTTP Cookie | Session | Ensures visitor browsing-security by preventing cross-site request forgery. This cookie is essential for the security of the website and visitor. |
SPSI | stackpath.com | HTTP Cookie | Session | Sets a unique ID for the session. This allows the website to obtain data on visitor behaviour for statistical purposes. |
UTGv2 | stackpath.com | HTTP Cookie | 179 days | Used in order to detect spam and improve the website's security. Does not store visitor specific data. |
sbtsck | stackpath.com | HTTP Cookie | 1 day | Captcha related cookie |
SPC | stackpath.com | HTTP Cookie | 4 days | Captcha/handshake related cookie |
wellbeing_hub_session | www.myhealthmyway.info | Session | 1 day | This keeps the user logged in between page views. Essential for the site to operate. |
XSRF-TOKEN | www.myhealthmyway.info | HTTP Cookie | 1 day | This is a security cookie that prevents malicious sites from performing actions they shouldn't. |
Your data protection rights
You have a number of rights over the data we collect and hold about you.
· You have the right to be informed about what information we hold about you and how we use it.
· You have the right to request copies of any information the Council holds about you by making a subject access request.
· If information we hold about you is factually inaccurate you have the right to have it corrected.
· You have the right to object to the way we are using your data.
· You have the right to request that your data is deleted. However, we may be unable to delete your data if there is a need for us to keep it. In this case you will receive an explanation of why we need to keep the data.
· You can also request that we stop using your data while we consider a request to have it corrected or deleted. There may be some circumstances in which we are unable to do this however we will provide an explanation if this is the case.
· In certain circumstances you may also request data we hold about you in a format that allows it to be transferred to another organisation.
· In the event that decisions are taken using automated processes you have the right to request that these decisions are reviewed by a member of staff and to challenge these decisions.
How to contact us
For any queries, please email academy.hwe@nhs.net
If you would like to request copies of your data for any other queries in relation to data which the Council holds about you, please contact the Data Protection Team.
Data Protection Team
Hertfordshire County Council
County Hall
Pegs Lane
Hertford
SG13 8DQ
Tel: 01992 588099
Email: data.protection@hertfordshire.co.uk
You can also contact our Data Protection Officer at dataprotection.officer@hertfordshire.gov.uk or in writing to the address above.
If you are unhappy with the way that Hertfordshire County Council has used your data or with the way we have responded to a request you also have the right to contact the Information Commissioner’s Office www.ico.org.uk .