Skip to content

Privacy Policy

Leicester, Leicestershire and Rutland (LLR) Staff Mental Health and Wellbeing Hub (SMHWB) are committed to protecting your privacy, in accordance with the Data Protection Act 1998 and will not use any information we may hold about you for any purpose other than that for which it was collected. This site only collects your data in order to contact you regarding the campaign you have signed up for.

LLR SMHWB Hub will not distribute personal information collected in this way to any third party, other than in limited cases where it is bound by law to do so.

LLR SMHWB Hub may analyse statistical trends based on responses to forms etc. to help to improve services; however, this analysis will not include identifiable personal information.

How we use your personal information

We need to be able to provide you with health and social care services. In order to do this, we need to be able to collect information about you. This is in accordance with the statutory obligations under the NHS Act 2006. Health and Social Care Act 2012 and Data Protection Act 2018.

The information that we collect is used for medical purposes that include: arranging initial appointments for our wellbeing service

We collect your personal and sensitive information so that your care team has access to accurate and up-to-date information to support you with your treatment.

The Data Protection Law

The General Data Protection Regulation (GDPR) allows and regulates the processing of personal data. This includes where health and social care data are processed by a public authority, such as Leicestershire Partnership NHS Trust.

Mental health and wellbeing data is special category data, which requires special protection and is subject to additional controls.

Public providers of health and social care are expected to:

1. Demonstrate satisfaction of conditions set out in Article 6 of the GDPR

2. Satisfy a condition under Article 9 of the GDPR when processing special categories of data, for example, data concerning health

Under Article 6, processing is permitted where it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Article 6(1) (e)). Commercial suppliers that work on behalf of the NHS (e.g., technology third-party suppliers to NHS Trusts), or private sections of public providers may also rely upon an alternative lawful basis. For example, where processing is necessary for the purposes of their ‘legitimate interests’ (Article 6(1)(f)).

Article 9(2) sets out the circumstances in which the processing of special categories of data, including data concerning health, which is otherwise prohibited, may take place. NHS Trusts as public bodies with healthcare provision as their statutory purpose, may process personal data where necessary to fulfil their public healthcare provision function, provided that they satisfy one of the following conditions:

9(2)(h) – Necessary for the purposes of preventative or occupational medicine, for assessing the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or management of health or social care systems and services on the basis of Union or Member State law or a contract with a health professional.

Article 9 allows for the processing of a special category of personal data for health research where processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) based on Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide suitable and specific measures to safeguard the fundamental rights and the interests of the data subject. (Article 9(2)(j)).

This means that where it is necessary to process special categories of data, such as data concerning health, for research purposes, then that processing is permitted by the GDPR (under Article 9(2)(j)).

What information do we collect about you?


Your name, date of birth.

Contact details

Your address, telephone number, email address (if provided).

Support contact details

Names, contacts details of carers, relevant close relatives, next of kin, representatives.

Further information

  • Information Governance Team, please email: [email protected]
  • Health Records Team, please email: [email protected]
  • Information Commissioner’s Office
  • Telephone: 0303 123 1114
  • Website: