6B operates the NHS Tech Register and is responsible for how personal information collected through this website is used. This policy explains what we collect, why we collect it, and the choices and rights available to you.
Information we collect
You can browse the register without creating an account. We may collect:
- Likes and follows: likes use a random browser identifier stored in a cookie for up to one year. If you follow a record, we store your email address, followed records, confirmation and unsubscribe status, and delivery progress to send grouped daily updates. Your email address is not displayed publicly. Confirm your email to start updates, and use the links in any follow email to stop one follow or all updates.
- Suggestions and correspondence: when you suggest a change, we collect the information you enter, including your name, email address, the suggested change, and any supporting information you provide.
- Search selections: when you select an organisation or technology from the site search, its name is stored so we can identify popular results and improve the register. Popular organisation and technology names may be shown to other visitors.
- Unsuccessful searches: when a search returns no results, we store the search term so we can understand what information visitors are looking for and improve the register.
- Technical information: our hosting and security systems may record information such as your IP address, browser type, device information, requested pages, referring page, and the date and time of a request in server logs.
- Analytics information: we use Google Analytics 4 to understand how people find and use the register. If you consent to analytics, it may collect information such as pages visited, approximate location, device and browser details, interactions, and visit duration.
How and why we use information
We use this information to operate and secure the website, respond to suggestions, check and improve register data, understand which information visitors find useful, diagnose problems, and improve the service.
We rely on our legitimate interests in operating, securing, maintaining, and improving the NHS Tech Register when we process suggestions, search terms, and technical logs. Where Google Analytics uses non-essential cookies or similar technologies, we will rely on your consent.
Cookies and Google Analytics
The site uses strictly necessary cookies for functions such as security, session handling, remembering your cookie preferences, and remembering information needed to process a request. These cookies are required for the website to work and cannot be switched off through the consent tool.
Our cookie-consent tool prevents Google Analytics from setting or accessing analytics cookies unless you choose to accept them. Refusing analytics cookies will not prevent you from using the register. You can use the consent tool to change or withdraw your choice at any time.
With your consent, Google Analytics 4 uses first-party cookies, commonly named _ga and _ga_<container-id>, to distinguish users and maintain session information. These cookies have a lifetime of up to two years. User-level and event-level Analytics data is retained for no longer than 14 months. Google may retain aggregated reports for longer.
Who we share information with
We may share information with service providers that help us host, secure, maintain, and operate the website or deliver follow confirmation emails, daily follow updates, and administrative suggestion-summary emails. They may only use the information as needed to provide those services. We may also disclose information where required by law or where necessary to establish, exercise, or defend legal rights.
If you consent to analytics, analytics information is shared with Google as our analytics provider. Google may process information outside the UK. Where required, appropriate safeguards for international transfers are used, such as approved contractual clauses or an applicable adequacy mechanism. We do not sell personal information.
How long we keep information
We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, including responding to and evidencing register suggestions, maintaining security, resolving disputes, and meeting legal obligations. Search terms, suggestion records, and technical logs are periodically reviewed and deleted or anonymised when they are no longer needed. Google Analytics retention is described above.
Your data protection rights
Depending on the circumstances, you may have rights to ask for access to your personal information, correction of inaccurate information, deletion, restriction of processing, or transfer of information you provided. You may also object to processing based on legitimate interests.
You have the right to object to our use of your personal information where we rely on legitimate interests. Where processing is based on consent, you can withdraw that consent at any time without affecting earlier lawful processing.
To exercise a right or ask a privacy question, email info@6b.health. We may need to confirm your identity before completing a request.
Complaints
Please contact us on email (info@6b.health) or by telephone (0113 350 1290) if you have a concern so we can try to resolve it.
Links to other websites
The register contains links to websites operated by NHS organisations, technology suppliers, 6B, and other third parties. Their own privacy policies apply when you visit them, and we are not responsible for how those websites handle your information.
Changes to this policy
We may update this policy when the website or our use of personal information changes. The latest version and its update date will always appear on this page.