6B operates the NHS Tech Register and is responsible for how personal information collected through this website is used. This policy explains what we collect, why we collect it, and the choices and rights available to you.
Information we collect
You can browse the register without creating an account. We may collect:
- Suggestions and correspondence: when you suggest a change, we collect the information you enter, including your name, email address, the suggested change, and any supporting information you provide.
- Search terms: searches submitted through the site search are stored so we can identify popular searches and improve the register. Popular search terms may be shown to other visitors. Please do not include personal or confidential information in a search.
- Technical information: our hosting and security systems may record information such as your IP address, browser type, device information, requested pages, referring page, and the date and time of a request in server logs.
- Analytics information: we use Google Analytics 4 to understand how people find and use the register. If you consent to analytics, it may collect information such as pages visited, approximate location, device and browser details, interactions, and visit duration.
How and why we use information
We use this information to operate and secure the website, respond to suggestions, check and improve register data, understand which information visitors find useful, diagnose problems, and improve the service.
We rely on our legitimate interests in operating, securing, maintaining, and improving the NHS Tech Register when we process suggestions, search terms, and technical logs. Where Google Analytics uses non-essential cookies or similar technologies, we will rely on your consent.
Cookies and Google Analytics
The site uses strictly necessary cookies for functions such as security, session handling, remembering your cookie preferences, and remembering information needed to process a request. These cookies are required for the website to work and cannot be switched off through the consent tool.
Our cookie-consent tool prevents Google Analytics from setting or accessing analytics cookies unless you choose to accept them. Refusing analytics cookies will not prevent you from using the register. You can use the consent tool to change or withdraw your choice at any time.
With your consent, Google Analytics 4 uses first-party cookies, commonly named _ga and _ga_<container-id>, to distinguish users and maintain session information. These cookies have a lifetime of up to two years. User-level and event-level Analytics data is retained for no longer than 14 months. Google may retain aggregated reports for longer.
Who we share information with
We may share information with service providers that help us host, secure, maintain, and operate the website or deliver suggestion emails. They may only use the information as needed to provide those services. We may also disclose information where required by law or where necessary to establish, exercise, or defend legal rights.
If you consent to analytics, analytics information is shared with Google as our analytics provider. Google may process information outside the UK. Where required, appropriate safeguards for international transfers are used, such as approved contractual clauses or an applicable adequacy mechanism. We do not sell personal information.
How long we keep information
We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, including responding to and evidencing register suggestions, maintaining security, resolving disputes, and meeting legal obligations. Search terms, suggestion emails, and technical logs are periodically reviewed and deleted or anonymised when they are no longer needed. Google Analytics retention is described above.
Your data protection rights
Depending on the circumstances, you may have rights to ask for access to your personal information, correction of inaccurate information, deletion, restriction of processing, or transfer of information you provided. You may also object to processing based on legitimate interests.
You have the right to object to our use of your personal information where we rely on legitimate interests. Where processing is based on consent, you can withdraw that consent at any time without affecting earlier lawful processing.
To exercise a right or ask a privacy question, email info@6b.health. We may need to confirm your identity before completing a request.
Complaints
Please contact us on email (info@6b.health) or by telephone (0113 350 1290) if you have a concern so we can try to resolve it.
Links to other websites
The register contains links to websites operated by NHS organisations, technology suppliers, 6B, and other third parties. Their own privacy policies apply when you visit them, and we are not responsible for how those websites handle your information.
Changes to this policy
We may update this policy when the website or our use of personal information changes. The latest version and its update date will always appear on this page.