Please ensure that you have read the following information about the service and how your information will be used. The Royal Wolverhampton NHS Trust (RWT) is the Data Controller for your information.

Please note that you are asked to ensure your registered mobile phone number is up-to-date, if you believe it may not be up-to-date, then please contact the Patient Access Team on 01902 307999 or any Trust reception area who can amend this information for you.

  Why are we collecting your data and what data items will we process?

People are increasingly using technology in almost every aspect of their lives. Here at The Royal Wolverhampton NHS Trust we are keen to provide a similar level of service, using technology to allow more control over hospital appointments.  

To support this we are in the process of implementing the use of a patient portal called myRWT which will be accessible via a mobile web “app”.   

• see details relating to outpatient appointments 
• view your appointment letters 
• add appointments to your personal calendar
• elect to go “paperless” (It is possible that you will still receive some letters by post)

• your name
• mobile phone numbers;
• email address;
• IP address;
• date of birth;
• password details, answers to security questions (for example your mother's maiden name) or both;
• any other information you may give us when you write to us or contact us in other ways; and
• any other information provided to us by a health professional.

  How we will use this data and what is the legal basis for processing the data?

• Invite you to register with the myRWT patient via your mobile phone

• Notify you of future appointments and any subsequent changes 
• Maintain or up-to-date personal information within the myRWT portal 

• providing your information to the health professionals you have booked appointment(s) with;
• processing appointments, orders, registrations and enquiries;
• allowing you to participate in interactive features of our service, including access to the health professionals' appointment booking system;
• sending appointment reminders
• confirming any appointment which you may be required to do directly to the health professional by text message or other means; and
• Monitoring compliance with our terms and conditions.

We collect information from you at the point of contact you make with the Royal Wolverhampton NHS Trust and its services to you as a health care provider. Therefore the legal basis under the General Data Protection Regulation (GDPR) 2016 for us to initially collect information from you is as follows;

• As a NHS organisation, we are legally required under the NHS Act 2006 to process personal data about you to support the delivery of your care. This also extends to communicating with you about any treatment you have received or about to receive from the Trust. 

• As a NHS organisation, we are authorised to process any health data to assist with your treatment. 

However, as the data subject, should you wish to sign up to the myRWT app, then it is your choice to do so and therefore you are consenting to using this service. Therefore the legal basis for us to process your data once set up on the myRWT app is as follows:

6(1)(a) ‘...the data subject has given consent to the processing of his or her personal data for one or more specific purposes;

9(2)(a) the data subject has given explicit consent to the processing of those personal (special category) data for one or more specified purposes...’

  Who will we share your data with outside of those in this programme?

The data we collect will be shared with a company called Zesty for the purposes of managing your appointment. Zesty provide the myRWT app, under a contact with RWT and are therefore a processor.   

Zesty will use the information we collected from you at a previous attendance or from a referral received via your general practitioner to generate an invitation to register with the myRWT patient portal.

If you choose to set up an account Zesty will continue to use your information to support the functionality of the myRWT patient portal which will enable you to access details of some of their hospital appointments with the Royal Wolverhampton NHS Trust.

  How long will we process your data for?

All our records are destroyed in accordance with the NHS Retention Schedule, which sets out the appropriate length of time each type of NHS records is retained. We do not keep your records for longer than necessary.

All records are destroyed confidentially once their retention period has been met, and the Trust has made the decision that the records are no longer required. For more information please see the Record Management Code for Practice for Health and Social Care 2016, retention schedules

  What are your rights and how to enforce them?

You have the right to request a copy of any information held by the Trust as well as any supplementary information. If you believe your information may be inaccurate or incomplete you can make a request to have your information reviewed and corrected in certain circumstances. Please contact rwh-tr.healthrecordsaccess@nhs.net.

If you choose to sign up for the service but change your mind and want to close the account this can be managed via the myRWT patient portal.

You also have the right to have your information by Zesty deleted is you chose to de register.

   Where do I go if I want further information?

For further information on this processing or the uses of your data, in the first instance contact the Head of Patient Access.

If you still have concerns or which to speak to someone independently about the use of your data under this initiative you can contact the Trusts Data Security and Protection Team on the following address rwh-tr.IG-Enquiries@nhs.net