Transparency data

Privacy Notice for Neighbourhood health

Published 4 August 2026

This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR). 

The Cabinet Office and Public Digital are Joint Controllers of your personal data. The Cabinet Office will act as your primary contact point for any queries or rights requests relating to this processing activity. 

YOUR DATA 

Purpose

The purpose(s) for which we are processing your personal data is(are): 

Research on how health services are experienced by both local residents and service providers in order to explore how we can adapt these services to better serve these groups.

The research will explore user experience in services and support related to health and wellbeing.  We will carry out the following research activities:

• Interviewing
• Holding focus groups and workshops
• Surveying
• Observing in different settings

We will provide you with specific information on the different types of research activities prior to your involvement.

Audio from sessions may be recorded with your permission. These recordings will be used to either create or correct transcriptions. Transcriptions will be reviewed to remove names and any data or information that is unrelated to the research purpose. Notes may also be taken and treated in a similar manner to transcriptions.

The data collected from the research will be analysed and used to develop an in-depth understanding of the health care pathways available to local residents, how individuals do or do not interact with them, and any gaps that there appear to be. 

Outputs from this research will be fully anonymised reports about our findings, which will be shared across relevant organisations (such as, the local city council and interacting health providers). Findings from this research are expected to be used to inform interventions taking place in an area and drive improvements to the ways a service is offered to residents.

The data

In order to arrange participation we will process the following personal data: 

• Name
• Email address or other contact details

As part of your participation, where you choose to provide this information, we may also process:

• Date of birth
• Physical address or other general location related information
• Employment details (job titles, roles, years of experience, and similar)
• Age
• Opinions you express relating to services
• Health information that you choose to discuss
• Ethnicity/ Race data relating to interactions and experiences with services
• Other information that you choose to provide in discussions relating to health services, such as political opinions, information on criminal convictions, or other personal data
• Audio recordings and session transcriptions

Legal basis of processing 

The legal basis for processing your personal data is that you have provided opt-in consent.

Sensitive personal data is personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
The legal basis for processing your sensitive personal data, or personal data relating to criminal allegations of convictions, will be that you have given explicit consent (art. 9(2)(a) UK GDPR)

Recipients

Your personal data will be shared by us between the Cabinet Office and Public Digital as Joint Controllers. Both parties will undertake engagement activities such as interviews and focus groups, and both parties will analyse the data and develop the anonymised reporting.

As your personal data will be stored on our IT infrastructure it will also be shared with our data processors who provide email, and document management and storage services. 

Anonymised findings report which will aggregate findings for a number of interviews and which will not contain your personal data, will be shared with local city council, interacting health providers, and other organisations involved in healthcare service provision. Anonymised information will also be shared with Oxford University who are evaluating the research activity.

Retention 

Personal data will be kept for 2 years, unless it is no longer required and can be deleted sooner.

Any audio recordings will be deleted once transcripts are created or verified (within weeks). Transcripts will be pseudonymised as soon as possible after creation. This means removal of direct identifiers such as names, but indirectly identifiable information such as descriptions of individual experiences may remain. The transcripts will be kept for 2 years to support analysis and anonymised reporting

YOUR RIGHTS 

You have the right to request information about how your personal data are processed, and to request a copy of that personal data. 

You have the right to request that any inaccuracies in your personal data are rectified without delay. 

You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement. 

You have the right to request that your personal data are erased if there is no longer a justification for them to be processed. 

You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted. 

You have the right to withdraw consent to the processing of your personal data at any time
You have the right to request a copy of any personal data you have provided, and for this to be provided in a structured, commonly used and machine-readable format

INTERNATIONAL TRANSFERS 

As your personal data is stored on the Cabinet Office’s Corporate IT infrastructure, and shared with our data processors, it may be transferred and stored securely outside the UK. Where that is the case it will be subject to equivalent legal protection through an adequacy decision, reliance on Standard Contractual Clauses, or reliance on a UK International Data Transfer Agreement.

COMPLAINTS 

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator.  The Information Commissioner can be contacted at: 

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

or 0303 123 1113, or icocasework@ico.org.uk. 

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts. 

CONTACT DETAILS 

The Cabinet Office and Public Digital are Joint Controllers for your data.

The Cabinet Office is acting as primary contact for this processing activity and is the primary point of contact for queries or Subject Access Requests. The Cabinet Office contact details for are:

Cabinet Office
70 Whitehall
London
SW1A 2AS

or 0207 276 1234, or you can use this webform. 

The contact details for the data controller’s Data Protection Officer are: dpo@cabinetoffice.gov.uk. 

You can contact the Public Digital Data Protection Officer at data-protection-officer@public.digital

You can contact Public Digital at contact@public.digital