Skip to main content

Fair Processing Notice

About this notice

This Fair Processing Notice explains how personal information may be used when you visit this NHS-hosted webpage about the DigiBete App.

The webpage provides information about the DigiBete App and how it can support children and young people with diabetes, their parents and carers, and healthcare professionals.

You do not need to register, create an account or log in to use this webpage.

The page does not ask you to enter any personal or health information.

Who is responsible for your information?

NHS England is responsible for this webpage and is the data controller for personal information processed through the operation and hosting of the page.

This means NHS England is responsible for deciding how and why any personal information associated with the webpage is used.

The DigiBete App is provided separately by DigiBete CIC as part of an NHS England commissioned service.

This Fair Processing Notice applies only to this NHS-hosted information page. It does not explain how information is processed when you register for or use the DigiBete App.

The DigiBete App has its own privacy information which you should read if you choose to use the App.

What information is collected?

You are not asked to provide your name, contact details, NHS number, diabetes information or any other health information when visiting this page.

However, some limited technical information may be collected automatically when you access the webpage.

This may include:

·      your internet protocol (IP) address;

·      the date and time you accessed the page;

·      information about your browser and device;

·      pages or links accessed;

·      technical information relating to the performance of the webpage; and

·      security information needed to identify or prevent malicious activity.

This information may be recorded automatically in website, server or security logs.

Why is this information used?

Technical information may be processed to:

·      make sure the webpage works correctly;

·      maintain the security of NHS systems;

·      prevent and investigate unauthorised access or malicious activity;

·      identify and resolve technical problems;

·      monitor the reliability and performance of the webpage; and

·      understand how the webpage is being used so that it can be maintained and improved.

The information collected through this page is not used to provide medical advice or make decisions about your healthcare.

Where NHS England needs to process personal information to provide, operate and secure this webpage, the anticipated lawful basis under UK data protection legislation is:

UK GDPR Article 6(1)(e) – Public task

This means that processing is necessary for NHS England to carry out its official functions and responsibilities in the public interest.

This webpage does not ask you to provide health information or other special category personal information.

Does this page collect health information?

No health information is requested from you through this webpage.

You are not asked to tell us:

·      whether you have diabetes;

·      what type of diabetes you have;

·      what medicines or insulin you use;

·      your glucose results;

·      details about your treatment; or

·      information about your healthcare appointments.

If you choose to register for or use the DigiBete App, separate privacy information will explain how information associated with the App is processed.

Cookies and analytics

Some cookies may be necessary for the webpage to operate securely and correctly.

If optional analytics cookies or similar technologies are used to understand how visitors use the page, they will only be used where the appropriate consent has been obtained.

You should be able to accept or reject optional cookies and change your preferences.

Further information about cookies used on the webpage should be available through the Cookies link on the site.

Who can see the information?

Limited technical information generated through use of the webpage may be accessible to:

·      authorised NHS England staff;

·      organisations providing approved hosting or technical services on behalf of NHS England;

·      authorised cyber security or website support providers; and

·      other organisations where disclosure is required by law.

Organisations processing personal information on behalf of NHS England are required to follow appropriate data protection, confidentiality and security requirements.

DigiBete CIC will not receive information about individual visitors to this webpage unless this is specifically necessary, authorised and documented as part of the commissioned service.

Personal information collected through operation of the webpage will not be sold or used for commercial advertising.

How long is information kept?

Technical and security information will only be retained for as long as necessary for the purpose for which it was collected.

Retention periods will be managed in accordance with NHS England’s information governance, records management and cyber security requirements.

Information will be securely deleted or anonymised when it is no longer required.

Where is information stored?

Information associated with the operation of this webpage will be processed using systems and suppliers authorised for use by NHS England.

Appropriate safeguards will be used to protect personal information.

Where information needs to be processed outside the UK, appropriate safeguards will be put in place in accordance with UK data protection legislation.

Your rights

Under data protection law, you have rights relating to how your personal information is used.

Depending on the circumstances, these may include the right to:

·      be informed about how your information is being used;

·      ask for access to personal information held about you;

·      ask for inaccurate information to be corrected;

·      ask for processing to be restricted in certain circumstances;

·      object to certain uses of your information; and

·      ask for information to be deleted where the law provides this right.

Because this webpage does not ask you to identify yourself, NHS England may only hold limited technical information that could be associated with you.

Automated decision-making

No automated decisions about you are made as a result of visiting this webpage.

Information collected through this page is not used to profile you or make decisions about your healthcare.

This webpage may include links to the DigiBete App, DigiBete website, app stores or other external websites.

Once you follow a link to another website or service, the privacy information for that service will apply.

You should read the relevant privacy information before providing personal information to another service.

Contact NHS England

If you have questions about how NHS England uses personal information, or you would like to exercise your data protection rights, you can contact:

NHS England Customer Contact Centre

Telephone: 0300 311 22 33

Email: england.contactus@nhs.net

Post:

NHS England
PO Box 16738
Redditch
B97 9PT

You can also contact NHS England’s Data Protection Officer through NHS England’s published data protection contact arrangements.

Making a complaint

If you have concerns about how your personal information has been used, you can contact NHS England in the first instance.

You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

Information Commissioner’s Office

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: ico.org.uk

Changes to this notice

This Fair Processing Notice will be reviewed and updated if the webpage changes or if the way information is processed changes.

Last updated: 10 September 2026

Next review due: 1 October 2027