Privacy policy

Who we are

National Health Sector is published by TADGT DIGITAL SOLUTIONS Limited, a company registered in England and Wales. TADGT DIGITAL SOLUTIONS Limited is the data controller for personal data processed through this website. You can contact us about privacy at privacy@nationalhealthsector.co.uk.

The personal data we collect

We keep data collection to the minimum we need to run the publication.

• Newsletter subscribers. Your email address, the date you subscribed and basic delivery statistics such as whether an email was opened.
• Contact and enquiry forms. Your name, email address and the content of your message.
• Newsroom accounts. For staff and contributors, an email address and authentication data used to sign in.
• Technical data. Server logs including IP address, browser type, pages requested and timestamps, used for security and diagnostics.
• Analytics data. Aggregated information about how pages are used, only where you have consented to analytics cookies.

How we use your data and our lawful bases

• To send our newsletters. Lawful basis: consent, which you give when you subscribe and can withdraw at any time.
• To answer your enquiries. Lawful basis: legitimate interests in responding to people who contact us.
• To publish journalism. Lawful basis: legitimate interests, supported by the journalism provisions in the Data Protection Act 2018.
• To keep the site secure and working. Lawful basis: legitimate interests in the security and integrity of our service.
• To understand how the site is used. Lawful basis: consent for analytics cookies.

Cookies

We use a small number of cookies and similar technologies. Full detail, including categories and how to change your choices, is on our cookies page.

Who we share data with

We do not sell personal data. We share it only with service providers who process it on our instructions, including our hosting and database provider, our email delivery provider and our analytics provider. Each is bound by a written processing agreement. We may also disclose data where we are legally required to do so.

International transfers

Some providers may process data outside the United Kingdom. Where that happens we rely on UK adequacy regulations or on the International Data Transfer Addendum to the European Commission standard contractual clauses, together with appropriate technical safeguards.

How long we keep data

• Newsletter records: until you unsubscribe, then up to 12 months in a suppression list.
• Enquiry correspondence: up to 24 months after the matter is closed.
• Server logs: up to 12 months.
• Newsroom accounts: for as long as the account is active.

Your rights under UK GDPR

You have the right to:

• be informed about how your data is used;
• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have data erased where there is no continuing reason to keep it;
• restrict or object to processing, including profiling;
• data portability, where processing is based on consent;
• withdraw consent at any time, without affecting earlier processing.

Some rights are limited where personal data is processed for journalism. To exercise a right, email privacy@nationalhealthsector.co.uk. We respond within one month.

Complaints

If you are unhappy with how we have handled your data, please contact us first. You can also complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

Security

Data is held in access controlled systems, encrypted in transit, and reachable only by people who need it. Newsroom access requires authentication and role based permissions.

Changes to this policy

We update this policy when our processing changes. The date at the top of the page shows when it was last revised.