What happens to my data?
Your information will be confidential, meaning that your information will be private and kept securely. We will only use your information for helping us improve the UK Health Security Agency (UKHSA) services.
Identifiable information, such as contact details and recordings are stored in a secure, password protected location.
Any quotes or findings made during the session may be put into reports and will be anonymous. This means you will not be personally identified in any way.

How we manage your information
This Privacy Notice sets out how UKHSA, the Data Controller, will use any personal information that you share with us as part of this research.

We sometimes instruct a third party to undertake the collection of information for our research. If this is the case, the consent form will inform you of the third party's name. The third party will not retain the information they collect for their own use and they will transfer the information to the UKHSA for this research.

UKHSA treats the personal information you provide to us in the strictest confidence and, should we ask you to provide certain information by which you can be identified, you can be assured that it will only be used in accordance with this Privacy Notice.

The UKHSA Privacy Notice can be found here (Please note that this privacy notice is only available in English).

Information about you which we process
We will only collect information about you that you consent to provide to us.
This information about you may include:
your name,
contact details,
any other personal information you choose to share during the course of your interaction with us as part of this research including photos and videos.

How we use your personal data
We may process information about you:
for research purposes; and
to make arrangements to conduct this research with you.

How long we keep your personal data for

We will retain any identifiable personal data which we receive in the context of this research for no longer than 12 months. At this point it will be securely destroyed.
Any personal information we share with internal teams within UKHSA will be for the purposes of research only and will be limited to recordings and interview notes. Any written notes shared more widely will be anonymised and contain no identifiable information.

The lawful bases we rely upon for processing your personal data
We are required by the UK General Data Protection Regulation (which is incorporated within the Data Protection Act 2018) to set out in this Privacy Notice the legal bases for processing, which we rely in order to process your personal data. These are:
UK GDPR Article 6(1)(a) - the data subject (that is, you) has given consent to the processing of his or her personal data for one or more specific purposes, and
UK GDPR Article 6(1)(e) – the processing is necessary for the purposes of fulfilling our public task.
This research will be conducted in accordance with the MRS Code of Conduct

Who can I speak to for more information?
If you have any questions or concerns about this research or your participation, please contact the User Research team:
reops.team@ukhsa.gov.uk

How to exercise your rights
Details on how we protect your information or for your Data Subject Rights; please contact the DHSC data protection team at using the following email address: data_protection@DHSC.gov.uk