Last Updated: 19/12/2025
1. Introduction
The North West, North Wales and The Isle of Man Congenital Heart Disease (CHD) Network (“the Network”) is committed to protecting the privacy and security of your personal information. This policy explains how we collect, use, and safeguard the data of website visitors, patients, and healthcare professionals in accordance with the UK General Data Protection Regulation (UK GDPR).
2. Who We Are (Data Controller)
The Network is an Operational Delivery Network (ODN) hosted by Alder Hey Children’s NHS Foundation Trust.
-
Data Controller: Alder Hey Children’s NHS Foundation Trust.
-
Contact: Information Governance Department, Alder Hey Children’s Hospital, Eaton Road, Liverpool, L12 2AP.
-
Email: info.gov@alderhey.nhs.uk
3. Information We Collect
We may collect and process the following types of information:
-
Website Usage Data: We use cookies to collect information about how you use our website, including your IP address, browser type, and pages visited (see our Cookies section).
-
Contact Information: If you contact us via email or our “Contact Us” forms, we collect your name, email address, and any information you provide in your message.
-
Special Category (Health) Data: The Network does not collect patient medical records directly through this website. However, we process pseudonymised clinical data for governance, audit, and mortality reporting as part of our NHS mandate.
4. Lawful Basis for Processing
Under UK GDPR, we process your data based on:
-
Public Task (Article 6(1)(e)): Processing is necessary for the performance of a task carried out in the public interest—specifically, the delivery and improvement of NHS congenital heart disease services.
-
Healthcare Purposes (Article 9(2)(h)): For processing health-related data for clinical audits and management of health systems.
-
Consent (Article 6(1)(a)): Where you have explicitly signed up for a newsletter or joined a voluntary participation group.
5. How We Use Your Information
-
To provide you with information about CHD services in the North West region.
-
To respond to enquiries or feedback.
-
To improve the website’s functionality and user experience.
-
To manage clinical governance and ensure the safety of CHD services across the Network.
6. Sharing Your Information
We do not sell or rent your personal data. We may share information with:
-
Network Partners: Other NHS Trusts within the Network (e.g., Manchester University NHS FT, Liverpool Heart and Chest Hospital) for the purposes of clinical audit and service improvement.
-
NHS England: For national reporting and meeting service standards.
-
Service Providers: Trusted third parties who host our website or manage our email communications (subject to strict data processing agreements).
7. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. Communication via the Network’s dedicated email (northwestchdnetwork@alderhey.nhs.uk) is accredited to NHS secure standards (DCB1596).
8. Your Rights
Under data protection law, you have rights including:
-
Access: The right to ask us for copies of your personal information.
-
Rectification: The right to ask us to correct information you think is inaccurate.
-
Erasure: The right to ask us to erase your personal information in certain circumstances.
-
Object to Processing: The right to object to the processing of your personal data.
To exercise these rights, please contact the Alder Hey Information Governance Team at the address provided in Section 2.
9. National Data Opt-Out
The NHS “National Data Opt-Out” allows patients to choose whether their confidential patient information is used for research and planning. To find out more or to register your choice, visit www.nhs.uk/your-nhs-data-matters.
10. Cookies
This website uses “cookies” (small text files) to help the site provide a better user experience. We use cookies to track visitor statistics via Google Analytics. You can choose to refuse cookies through your browser settings, though some parts of the site may not function correctly as a result.
11. How to Complain
If you have any concerns about our use of your personal information, you can make a complaint to us at info.gov@alderhey.nhs.uk. You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data: https://ico.org.uk/.





