Equipment Provision Services Privacy Notice

Equipment Provision Services Privacy Notice

This Privacy Notice explains how Birmingham Community Healthcare NHS Foundation Trust (BCHC) processes personal data when providing specialist equipment and related services to service users. This Notice should be read in conjunction with the Trust’s overarching Privacy Notice.

 

Data Controller

The Trust is the Data Controller for all personal data provided to West Midlands Specialist Rehabilitation Services. We determine the purposes and means of processing personal data for the delivery of equipment and associated support.

 

Data Processors

The Trust works with a range of specialist equipment suppliers who act as data processors by supporting the delivery, installation, maintenance and repair of equipment for service users. These suppliers include providers of:

• Wheelchairs, posture and mobility equipment.
• Environmental Control (EC) systems.
• Augmentative and Alternative Communication (ACC) devices.
• Prosthetics and orthotics equipment.
• Related specialist clinical or technical support services.

All suppliers are required to process personal data only on the Trust’s instructions and to apply appropriate technical and organisational measures to protect personal information, in line with UK data protection law and NHS information governance requirements. The Trust maintains a current register of these suppliers, which is available on request from the Information Governance Team.

Data Collected

We process the minimum amount of personal data required for the safe and effective provision of equipment. This may include:

• Identity Data: name, date of birth, NHS number.
• Contact Data: address, telephone number, email address.
• Health Data: relevant clinical information needed to assess equipment suitability or ensure safe use.
• Service information: details of equipment supplied, repairs, maintenance or training provided.

 

Purpose of Data Processing

• Assessing equipment needs.
• Ordering, delivering, installing and configuring equipment.
• Servicing, maintaining and repairing equipment.
• Providing training to service users, families, carers or educational settings.
• Ensuring equipment meets clinical, safety and regulatory standards.

 

Legal Basis

The Trust processes personal data under:

• Article 6(1)(e) UK GDPR - processing is necessary for the performance of a task carried out in the public interest.
• Article 9(2)(h) UK GDPR - processing is necessary for health and social care purposes and the management of healthcare systems.

 

Data Sharing

To enable the provision, delivery and maintenance of equipment, the Trust shares only the minimum personal data required with relevant suppliers. This may include:

• Your name.
• Contact details.
• Equipment information.
• Information needed to ensure safe installation, configuration or repair.

Health information, such as NHS number, is shared only where strictly necessary to ensure clinical safety and appropriate equipment use.

Data Security and Transfers

All personal data is stored, accessed and shared in accordance with data protection law and NHS information governance standards. Data processed by external suppliers on behalf of the Trust is subject to ongoing IG oversight and processed only within the United Kingdom.

Your Rights

You have rights in relation to your personal data, including the right to access, rectify, restrict or object to processing in certain circumstances. More information is available in the Trust’s main Privacy Notice.

 

Contact Information

If you would like more information about how we process your personal data, or if you wish to exercise your data protection rights, you can contact our Data Protection Officer (DPO):

Michael Morgan-Bullock, Head of Legal Services and Information Governance:

• Email: bchc.dpo@nhs.net
• Post: Data Protection Officer, Birmingham Community Healthcare NHS Foundation Trust, 3 Priestley Wharf, Holt St, Birmingham, B7 4BN.

 

Right to Complain

You also have the right to raise concerns with the Information Commissioner’s Office (ICO):

• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
• Helpline number: 0303 123 1113
• Website: https://ico.org.uk