Privacy policy
This policy explains how Online NHS Trust collects, uses and protects your personal data when you use this website, and the rights you have over your information.
Last updated: 29 May 2026.
Who we are
Online NHS Trust is the data controller for the personal data collected through this website. This means we are responsible for deciding how and why your personal data is used. You can find our contact details in the how to contact us section below.
What personal data we collect
This is an informational website. We do not ask you to create an account, and we do not provide clinical or care services through this site. We collect personal data in the following limited ways.
Information we collect automatically
When you visit this website, our hosting provider automatically records technical information needed to deliver the site and keep it secure. This can include your IP address, the date and time of your visit, the pages you view, and basic information about your browser and device.
Cookies
For full details of the cookies we use and to change your choice at any time, see our cookies page.
Information you give us directly
If you contact us by email or by post, we will receive whatever information you choose to include, such as your name, your contact details and the content of your message. Please do not send us sensitive personal information, such as details about your health, as this website is not a way to access care.
Why we collect it and how we use it
We use the personal data described above to:
- operate, maintain and secure this website
- understand how the website is used so we can improve it
- respond to enquiries and correspondence you send us
- remember your cookie preferences
We do not sell your personal data, and we do not use it for advertising.
Our lawful basis
Under the UK General Data Protection Regulation (UK GDPR) we must have a lawful basis for using your personal data. The basis we rely on depends on the activity:
- Legitimate interests — for keeping the website running and secure, and for responding to enquiries you send us.
- Public task — for providing public information about our organisation as an NHS body.
Who we share data with
We do not share your personal data with any other organisations except where we are required to do so by law.
How we store and protect your data
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. This website is served over a secure (HTTPS) connection. Access to any correspondence you send us is limited to staff who need it to respond to you.
How long we keep it
We only keep personal data for as long as we need it. Server logs are kept for a limited period and then deleted or anonymised. Correspondence is kept only for as long as needed to deal with your enquiry and to meet our legal and records-management obligations.
Your rights under UK GDPR
You have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct data that is inaccurate or incomplete
- ask us to delete your data in certain circumstances
- ask us to restrict or object to how we use your data
- withdraw your consent at any time where we rely on consent
To exercise any of these rights, please contact us using the details below. We will respond within one month.
How to contact us
If you have any questions about this policy, or you want to exercise your rights, you can contact us by emailing onlinetrust.info@nhs.net or by writing to:
Online NHS Trust
Wellington House
133-155 Waterloo Road
London
SE1 8UG
Complaints
If you are unhappy with how we have handled your personal data, you can complain to the Information Commissioner's Office (ICO), the UK's independent regulator for data protection. You can find out how to do this at ico.org.uk.
Changes to this policy
We may update this policy from time to time. Any changes will be published on this page, and the "last updated" date at the top will be revised.