☰
  • Safe & Effective
  • Kind & Caring
  • Exceeding Expectation
myRWT App Privacy Notice
Why are we collecting your data and what data items will we process?
How we will use this data and what is the legal basis for processing the data?
Who will we share your data with outside of those in this programme?
How long will we process your data for?
What are your rights and how to enforce them?
Where do I go if I want further information?

Data Controller: myRWT App Privacy Notice

Please ensure that you have read the following information about the service and how your information will be used. The Royal Wolverhampton NHS Trust (RWT) is the Data Controller for your information.

Please note that you are asked to ensure your registered mobile phone number is up-to-date, if you believe it may not be up-to-date, then please contact the Patient Access Team on 01902 307999 or any Trust reception area who can amend this information for you.

People are increasingly using technology in almost every aspect of their lives. Here at The Royal Wolverhampton NHS Trust we are keen to provide a similar level of service, using technology to allow more control over hospital appointments.  

To support this we are in the process of implementing the use of a patient portal called myRWT which will be accessible via a mobile web “app”.   

An invitation to register with the portal will be sent to those patients who have registered a personal mobile number with the organisation and once registered you will be able to:

  • see details relating to outpatient appointments 
  • view your appointment letters 
  • add appointments to your personal calendar
  • elect to go “paperless” (It is possible that you will still receive some letters by post)

Data items we will process:

  • your name
  • mobile phone numbers;
  • email address;
  • IP address;
  • date of birth;
  • password details, answers to security questions (for example your mother's maiden name) or both;
  • any other information you may give us when you write to us or contact us in other ways; and
  • any other information provided to us by a health professional.

Return to top

How we will use this data and what is the legal basis for processing the data?


The data collected at a previous attendance or from a referral received from your general practitioner or other healthcare provider will be used to:

  • Invite you to register with the myRWT patient via your mobile phone

If you choose to register an account with the myRWT Portal you information will be used to:

  • Notify you of future appointments and any subsequent changes 
  • Maintain or up-to-date personal information within the myRWT portal 

Collected personal data will be used for:

  • providing your information to the health professionals you have booked appointment(s) with;
  • processing appointments, orders, registrations and enquiries;
  • allowing you to participate in interactive features of our service, including access to the health professionals' appointment booking system;
  • sending appointment reminders
  • confirming any appointment which you may be required to do directly to the health professional by text message or other means; and
  • Monitoring compliance with our terms and conditions.

We collect information from you at the point of contact you make with the Royal Wolverhampton NHS Trust and its services to you as a health care provider. Therefore the legal basis under the General Data Protection Regulation (GDPR) 2016 for us to initially collect information from you is as follows;

6(1)(e) ‘...for the performance of a task carried out...in the exercise of official authority...

  • As a NHS organisation, we are legally required under the NHS Act 2006 to process personal data about you to support the delivery of your care. This also extends to communicating with you about any treatment you have received or about to receive from the Trust. 

9(2)(h) ‘...processing (special category data) is necessary for the purposes of preventive or occupational medicine...’

  • As a NHS organisation, we are authorised to process any health data to assist with your treatment. 

However, as the data subject, should you wish to sign up to the myRWT app, then it is your choice to do so and therefore you are consenting to using this service. Therefore the legal basis for us to process your data once set up on the myRWT app is as follows;  

6(1)(a) ‘...the data subject has given consent to the processing of his or her personal data for one or more specific purposes;

9(2)(a) the data subject has given explicit consent to the processing of those personal (special category) data for one or more specified purposes...’;

Return to top

Who will we share your data with outside of those in this programme?

The data we collect will be shared with a company called Zesty for the purposes of managing your appointment. Zesty provide the myRWT app, under a contact with RWT and are therefore a processor.   

Zesty will use the information we collected from you at a previous attendance or from a referral received via your general practitioner to generate an invitation to register with the myRWT patient portal.

If you choose to set up an account Zesty will continue to use your information to support the functionality of the myRWT patient portal which will enable you to access details of some of their hospital appointments with the Royal Wolverhampton NHS Trust.


Return to top

How long will we process your data for?

All our records are destroyed in accordance with the NHS Retention Schedule, which sets out the appropriate length of time each type of NHS records is retained. We do not keep your records for longer than necessary.

All records are destroyed confidentially once their retention period has been met, and the Trust has made the decision that the records are no longer required. For more information please see the Record Management Code for Practice for Health and Social Care 2016, retention schedules.


Return to top

What are your rights and how to enforce them?

You have the right to request a copy of any information held by the Trust as well as any supplementary information.   If you believe your information may be inaccurate or incomplete you can make a request to have your information reviewed and corrected in certain circumstances. Please contact rwh-tr.healthrecordsaccess@nhs.net. 

If you choose to sign up for the service but change your mind and want to close the account this can be managed via the myRWT patient portal.  

You also have the right to have your information by Zesty deleted is you chose to de register.


Return to top

Where do I go if I want further information?

For further information on this processing or the uses of your data, in the first instance contact the Head of Patient Access.

If you still have concerns or which to speak to someone independently about the use of your data under this initiative you can contact the Trusts Data Security and Protection Team on the following address rwh-tr.IG-Enquiries@nhs.net


Return to top

A Teaching Trust of the University of Birmingham