Privacy Policy


As with other organisations we are required to comply with the EU General Data Protection Regulation (GDPR) which came into force on the 25 May 2018.

We have always been careful with your personal data and under GDPR we have a legal duty to protect any personal information we collect from you. We do not pass on your details to any third parties or other organisations and will only use the data collected for the intention that it was agreed to used for.


Your rights under GDPR

Under GDPR, you have rights as an individual which you can exercise in relation to the information we hold about you. These are;

  • a right of access to a copy of the information comprised in their personal data;
  • a right to object to processing that is likely to cause or is causing damage or distress;
  • a right to prevent processing for direct marketing;
  • a right to object to decisions being taken by automated means;
  • a right in certain circumstances to have inaccurate personal data rectified, blocked, erased or destroyed; and
  • a right to claim compensation for damages caused by a breach of the Act.
Visitors to our websites

When someone visits they are visiting our Health Board website that is hosted on NHS Wales servers that are managed by the NHS Wales Informatics Service, their privacy policy can be found here - To extract analytics from this website we use a basic ‘Cascade’ system that does not identify any personal data. 

We collect two kinds of electronic information direct from visitors to this website; feedback and email subscription details, this information is stored on NHS Wales servers.

When someone visits they are visiting our engagement website that is hosted by WIX and their privacy policy is available here We collect two kinds of electronic information direct from visitors to the ‘engagement’ website; feedback and email subscription details to the ‘Get Involved’ newsletter.  The ‘sign-up/ registration form’ for the ‘Get Involved’ newsletter is a re-directed page hosted on our Health Board website and therefore the personal date for those that have subscribed to this newsletter is stored on NHS servers as opposed to WIX.

To extract analytics from this website we use Google Analytics which is a web analytics system that is provided by Google Inc.Google Analytics uses 'cookies' and JavaScript code to help analyse user activity on websites. The information generated about your use of the website (including your anonymised IP address) will be transmitted to and stored on Google servers in the United States. 

Google will use this information to produce user activity reports for this website. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
Google will not associate your IP address with any other data previously held. You may refuse the use of cookies by selecting the appropriate settings on your browser. Please note that if cookies are disabled, you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
Read Google's Privacy Policy and Google's Terms of Service for detailed information.



Cookies are pieces of data created when you visit a website. Our site uses cookies to store information while you move around the site. You can set your computer not to accept cookies. However, if you do this, you may not be able to use some site features because we need to record your preferences in order to give you the information you need during your visit.

Our cookies do not contain any personal information about you and do not hold any information about which sites you visited before you came here.


How to Disable Cookies

To change your cookie settings:

• Internet Explorer

• Go to ‘Tools’ on the menu bar > Select ‘Internet Options’ > Select ‘Privacy’ > Disable / restrict cookies


• Go to ‘Tools’ on the menu bar > Select ‘Options’ > Select ‘Privacy’ > Disable / restrict cookies


• Please note that the above settings may differ depending on the browser version.


On occasion we use Mailchimp which is a third party provider to compile an email subscription database (list of email addresses) and also to create and design newsletters. We will notify you of this at the point of subscribing to a newsletter that is created using this software. Mailchimp’s privacy policy can be found here -


Consultations and online survey tools e.g. Smart Survey

We collect information volunteered by members of the public using an online survey tool hosted by Smart Survey, who acts as data processor for Betsi Cadwaladr University Health Board and only process personal information in line with our instructions. Smart Survey hosts in the United States, but has issued assurances that they meet GDPR standards, which can be seen in their Privacy Policy


Social media

We use a third party provider, Hootsuite to manage our social media interactions. If you send us a private or direct message via social media the message will be stored by Hootsuite for three months. It will not be shared with any other organisations.


Email policy

A copy of our email procedure document which describes in detail how Betsi Cadwaladr University Health Board will implement its IM&T Security Policy here -


Links to other websites

This privacy policy does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.


Changes to this privacy Policy

If this privacy policy changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties.

This privacy policy was last updated on the 25 May 2018. 


Complaints or queries

Betsi Cadwaladr University Health Board tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.


How to contact us

Data Protection Officer

Betsi Cadwaladr University Health Board

Block 5, Carlton Court

St Asaph

LL17 0JG


If you are a Welsh resident who has received treatment by an NHS care provider in England, your information will be shared back into NHS Wales in order to verify and combine with your information held in Wales. That information will be used by the Health Board/Trust to identify you and validate what care was provided.

For information about other ways that we collect and use personal information please refer to the links below:

Privacy information about how we process information about our employees here

Privacy information about how we process patient information and data here

Your Information Your Rights Leaflet

Your Information Your Rights Leaflet (Cymraeg)

Your Information Your Rights Poster

Your Information Your Rights Poster (Cymraeg)