Skip to main content

Privacy Policy

NHS Wales Privacy Notice

All privacy notices are subject to review, and updated as and when required.

For information about other ways that we collect and use personal information please refer to the links below:

Artificial Intelligence

Betsi Cadwaladr University Health Board (BCUHB) may use your personal information in Artificial Intelligence (AI) systems to provide you with individual care. AI can help a health professional reach a decision about your care, for example, diagnosing a condition you have or helping you choose a treatment option. In these cases, your consent to the use of your data is implied as part of your direct care. Decisions will not be made by the AI system. Health professionals will always provide advice, and allow you to make the final decision on the care and treatment you receive.

AI-based technologies may use algorithms which allow the technology to learn using data. This is a purpose beyond your individual care, because the data is not being directly used for your own care, but instead the care of many others in the future. For example, lots of images of skin growths (moles) and information about whether or not they are cancerous can be used to train a system to assist in the detection of cancer. For purposes such as these, data may be taken from your health and care records and accessed by developers working in collaboration with the NHS. Only the specific information needed for training algorithms will be used, and wherever possible, identifying information such as your name and address will be removed completely, or replaced with a code to protect your confidentiality.

As part of your care, either attending as an outpatient or as part of an inpatient stay, you may have  radiology imaging (X-ray, CT scan, MRI, ultrasound, etc.) or a procedure in radiology. We may use AI to help us analyse or process these image(s). Your images will continue to be viewed by a clinician as they are now, but the use of AI helps us to speed up imaging results and/or improve their accuracy.

For further information, please contact

Other Privacy Notices

Other notices not relating to the website, on how we as a Health Board process and share your information and data elsewhere for example COVID-19 notices relating to TTP and research, are published in their own section of this website here. 

This website's Privacy Notice

All public bodies are required to comply with the Data Protection Act 2018 and the UK General Data Protection Regulation (GDPR).

Under Data Protection legislation we have a legal duty to protect your personal information. We do not pass on your details to any third parties or other organisations unless we have a legal basis to do so.

Your rights under UK GDPR

Under UK GDPR, you have rights as an individual which you can exercise, and which we must consider, in relation to the information we hold about you. These include:

  • a right to be informed about how your personal data is processed;
  • a right of access to a copy of your personal information;
  • a right, in certain circumstances, to have inaccurate personal data rectified or erased;
  • a right, in certain circumstances, to restrict processing;
  • a right to object to processing your personal information

Visitors to our websites

When someone visits they are visiting our Health Board website, hosted on NHS Wales servers that are managed by Digital Health and Care Wales (DHCW), their privacy policy can be found here on their website.

We collect two kinds of electronic information direct from visitors to this website; feedback and email subscription details, this information is stored on NHS Wales servers.

Google will use this information to produce user activity reports for this website. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
Google will not associate your IP address with any other data previously held. You may refuse the use of cookies by selecting the appropriate settings on your browser. Please note that if cookies are disabled, you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
Read Google's Privacy Policy and Google's Terms of Service for detailed information.


Cookies are pieces of data created when you visit a website. Our site uses cookies to store information while you move around the site. You can set your computer not to accept cookies. However, if you do this, you may not be able to use some site features because we need to record your preferences in order to give you the information you need during your visit.

Our cookies do not contain any personal information about you and do not hold any information about which sites you visited before you came here. Further details of how we use cookies can be found here.

How to Disable Cookies

To change your cookie settings:

Internet Explorer

• Go to ‘Tools’ on the menu bar > Select ‘Internet Options’ > Select ‘Privacy’ > Disable / restrict cookies


• Go to ‘Tools’ on the menu bar > Select ‘Options’ > Select ‘Privacy’ > Disable / restrict cookies


• Please note that the above settings may differ depending on the browser version.

Consultations and online survey tools e.g. Smart Survey

We collect information volunteered by members of the public using an online survey tool hosted by Smart Survey, who acts as data processor for Betsi Cadwaladr University Health Board and only process personal information in line with our instructions. Smart Survey host the data in the United States, but they have issued assurances that they meet UK GDPR standards, which can be seen in their Privacy Policy

Links to other websites

This privacy policy does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.


We wish to advise you that the Health Board monitors e-mail, as permitted by the relevant Telecommunications Regulations, in order to protect its technology infrastructure from "virus" infection and to ensure that relevant UK and international law is adhered to by the sender and by the Health Board.

Betsi Cadwaladr University Health Board – E-mail Notice (2010)

E-mail sent from Betsi Cadwaladr University Health Board (the Health Board) is confidential and intended solely for the use of the individual(s) to whom it is addressed. If you are not an intended recipient, be advised that you will have received the e-mail message in error and that any use, dissemination, forwarding, printing, or copying of Health Board e-mail is strictly prohibited.  May we ask you to inform the sender of the incorrect delivery by way of the Reply option in the e-mail message.

Any views or opinions presented are to be understood as those of the author and do not necessarily represent those of the Health Board.

E-mail messages and any attached files will have been checked with virus detection software before transmission.  However, recipients must carry out their own virus checks before opening any attachment.  The Health Board accepts no liability for any loss or damage which may be caused by software viruses.

Please be aware also that, under the terms of the Freedom of Information Act 2000, Betsi Cadwaladr University Health Board, as a public authority, may be asked to make available the content of any e-mails or correspondence received.

For further information, please follow the link to Freedom of Information on this Health Board’s website:

How to contact us

Data Protection Officer
Betsi Cadwaladr University Health Board
Wrexham Maelor Hospital
Croesnewydd Road
LL13 7TD 

If you are a Welsh resident who has received treatment by an NHS care provider in England, your information will be shared back into NHS Wales in order to verify and combine with your information held in Wales. That information will be used by the Health Board to identify you and validate what care was provided.