Skip to content
Menu

Your Privacy and Data Protection

Who we are

Derby and Derbyshire Talking Therapies is delivered on behalf of the NHS by Vita Health Group and Everyturn Mental Health.

This Privacy Notice explains how we collect, use, and store your personal data, how we protect it, and the rights you have over your information. It also outlines how you can contact us with any concerns or questions.

What personal data we collect

To provide our service, we collect personal and sensitive information such as:

  • Name, date of birth, address, contact details
  • GP and referral information
  • Health conditions and treatment history
  • Demographic data (e.g. ethnicity, gender)
  • Session notes and clinical assessments
  • Emergency contact details

This information helps us deliver safe, appropriate care tailored to your needs.

Why we collect and use your information

We collect your data to:

  • Identify and contact you appropriately
  • Assess your needs and deliver treatment
  • Ensure continuity of care
  • Meet NHS service delivery and reporting requirements
  • Investigate complaints or incidents

We process this information in line with UK GDPR and the Data Protection Act, under lawful bases such as consent, contract, legal obligation, legitimate interest, and public interest in health.

NHS Digital and IAPT Data

We securely share anonymised data with NHS Digital for national reporting through the Improving Access to Psychological Therapies (IAPT) dataset. This data helps evaluate and improve NHS mental health services but does not identify individual service users.

You can find more information here:
www.nhs.uk/your-nhs-data-matters

Your rights under data protection law

You have the right to:

  • Access your personal data
  • Request corrections or deletions
  • Restrict or object to how we process your data
  • Request data portability
  • Lodge a complaint with the ICO if you’re not satisfied with how we handle your information

Learn more about your rights at: www.ico.org.uk

How long we keep your records

We retain your records in accordance with NHS guidelines—currently for 8 years following discharge. After this period, your data will be securely deleted or destroyed.

Who we share your data with

We only share your information with:

  • Healthcare professionals involved in your care
  • Administrative staff who help arrange appointments
  • Your GP or referring healthcare provider (unless you opt out)
  • NHS Digital and the Department of Health (anonymised data only)
  • Other services where appropriate and with your consent

We may also share information without consent where legally required—for example, if there is risk of serious harm or to safeguard children or vulnerable adults.

Contacting us

For questions about your data, please email our Data Protection Officer at:
📧 Governance@derbytalks.org
📞 0333 188 1060

Complaints

If you are unhappy with how we’ve handled your data, please contact:
📧 Complaints@derbytalks.org

If unresolved, you can contact the Information Commissioner’s Office (ICO):
Wycliffe House, Water Lane, Wilmslow, SK9 5AF
📞 0303 123 1113
🌐 www.ico.org.uk