Privacy policy

What we do/who we are
Waltham Forest CCG is a collaborative of the WEL Clinical Commissioning Groups.

The collaboration comprises of NHS Newham CCG, NHS Waltham Forest CCG and NHS Tower Hamlets CCG. These organisations are responsible for commissioning high quality health care services across East London.

What is a privacy notice?
The EU General Data Protection Regulation (GDPR) requires that Controllers provide certain information to people whose information (personal data) they hold and use. A privacy notice is one way of providing this information.

A privacy notice should identify who the Controller is, including contact details for the Data Protection Officer. It should also explain the purposes for which personal data are collected and used, how the data are used and disclosed, how long the data is kept, and the Controller’s legal basis for processing.

Why we collect information about you
As an NHS organisation, the WEL CCG’s operate at a number of different levels in regards to processing of personal data. There are a number of legal reasons why we need to collect and use your personal information.

Generally we collect and use personal information where:

  • it is necessary to perform our statutory duties
  • it is necessary to protect someone in an emergency
  • it is required by law
  • it is necessary for employment purposes
  • it is necessary to deliver health or social care services
  • you have made your information publicly available
  • it is necessary for legal cases
  • it is necessary to protect public health
  • it is necessary for archiving, research or statistical purposes
  • you, or your local representative, have given consent
  • you have entered into a contract with us

Your rights
Data Protection laws provide individuals with the right to know what information is held about them by an organisation and how it is used.

These include the right to:

  1. Be informed why, where and how we use your information.
  2. Ask for access to your information (see below).
  3. Ask for information to be corrected if inaccurate or incomplete.
  4. Ask for your information to be deleted or removed where there is no need for us to continue processing it.
  5. Ask us to restrict the use of your information.
  6. Object to how your information is used.
  7. Challenge any decisions made without human intervention (automated decision making).

The WEL Clinical Commissioning Groups have an obligation to uphold individual’s rights unless there is a lawful justification not to.

Oversight and responsibility
The three WEL CCG’s are supported by a number of key roles within the organisation led by the Senior Information Risk Owner, who is accountable for information risk management within the organisation; The Caldicott Guardian who advises the organisation on specific issues relating to the use of patient confidential data and the Data Protection Officer who provides advice and support to the organisation on Data Protection compliance and monitoring obligation. These roles have oversight of the handling of information within the WEL CCG’s or any third party organisations we may contract with.

For more information on these roles, please click here.

How we use your information:

Privacy Notices
Please select the information that is relevant to you from the list below for full details on how your information is used.

National Data Opt-out
The WEL CCGs use information to plan and develop services, these are usually anonymised information which does not identify individuals, however in some cases; departments like Safeguarding, Continuing Health care and Long Term Conditions hold patient identifiable information. If you do not want your information to be used by the CCG, you can express your wish by using either of the options below.

Using the online service
Patients can set their own opt-out choice by visiting using any internet enabled device. So that the service can confirm their identity, they will need to provide:

  • their NHS number, or their postcode (as registered with their GP practice)
  • their mobile phone number or email address provided previously at a GP practice or other NHS service

The online service is available 24 hours a day, 7 days a week.

Using the telephone service
Patients can set their own opt-out choice by calling 0300 303 5678.

Calling this number should cost no more than calls to a normal landline number.

The telephone service is available 9am to 5pm, Monday to Friday, apart from on English bank or public holidays

Using 'print-and-post'

If a patient is unable to use the online or telephone service, or would prefer not to, they can compete a paper form and post it.

The form can be downloaded from or requested by calling the telephone service on 0300 303 5678.  

Relevant links to associated documents or organisations:
If you would like to find out more information on the wider health and care system approach to using personal information or other useful information, please click on the following links: 

Further Information

If you would like to know more about how NHS Waltham Forest CCG uses your information please use the Contact Us section of our website or contact the Data Protection Officer directly. The full CCG Privacy Note can be downloaded on the right hand side of this webpage.