How we use your information – NHS Project Smart With Your Heart


Privacy Notice - How we use your information – NHS Test Beds Project 'Smart With Your Heart - Listening to Patients with Heart Failure'

The law determines how organisations can use personal information. The key laws are: the General Data Protection Regulation (GDPR) the Health and Social Care Act 2016, and the Human Rights Act 1998 (HRA), relevant health service legislation and the common law duty of confidentiality.

On the University Hospitals of North Midlands (UHNM) Trust (the Trust) Privacy Notice (which can be found here you can find information explaining how the Trust manages your data to comply with the Data Protection Act 2018 and the General Data Protection Regulations (GDPR).

The Trust recognises the importance of protecting personal and confidential information in all that we do and all we direct or commission, and takes care to meet its legal duties and takes its obligations around data protection, confidentiality and information security seriously.  As part of those obligations and to ensure that we meet our obligations under the Data Protection legislation, we are required to be open and transparent with regard to how we process your information. 

This transparency is referred to as a 'Privacy Notice' (also known as a Fair Processing Notice) and the following information relates specifically to the data we collect and process as part of the 'Smart with your Heart – Listening to the Patients with Heart Failure' project.

How to access your information

The Data Protection Act 2018 and the General Data Protection Regulation (GDPR) 2018 gives you the right to see the information that UHNM holds about you, how and why we process your data, and who we will share your data with.  Find out more on our  Health Records page .

Smart with Your Heart – Listening to Patients with Heart Failure

This notice is a statement that describes how UHNM collects, uses, retains and discloses your personal information in relation to the Smart with Your Heart project.

To ensure that we process your personal data fairly and lawfully we are required to inform you:

  • Why we need your data

  • How it will be used and processed

  • Who it will be shared with

The Trust is also required to explain to you what rights you have to control how we use your information and this information can be found on the Trust website here.

The 'Smart with Your Heart – Listening to the messages from Patients with Heart Failure' initiative is a service evaluation project aiming to assess the impact of early detection of pre-hospital deteriorating health, in patients previously admitted with heart failure.

To access the service, which is delivered digitally either via a text-based service or web-based system, you will need to provide a mobile phone number for use by our digital partners which will allow you to access the service and by so doing, will allow us to evaluate this service and by signing a copy of the Terms & Conditions contained in the pack provided to you by your Heart Failure Nurse.  A copy of the Terms & Conditions is contained at the end of this notice.

We will need to collect, on a voluntary basis, basic demographic information (Name, Address DOB) for the project itself and then later on, we will need to collect additional information about your health so that we can evaluate the project and its outcomes.  This evaluation will be done by the Trust Research & Development team working alongside two external evaluators.  The complete list of information categories that we will be collecting throughout the project are listed below:






Address (inc. Postcode)

Phone Number/Mobile Number


NHS Number

GP details

Racial or Ethnic origin

Health information (physical and mental)

Any Hospital admissions data (date of admission, length of stay etc.)

This information will be shared with our partners in this project:

Simple Healthcare (FLO Telehealth) 

Health2Works (for Recap Health Library)

Signum Health (for iNavigator)          

These organisations are providing the Trust with digital technology to allow patients to upload their data for monitoring and service evaluation; to enable patients to receive information leaflets and to facilitate onward referral to other clinicians or service providers, if appropriate.  The Trust will be auditing the feedback from patients for the purposes of improving patient outcomes in the area of Heart Failure.

The Trust has taken steps to assure itself that our digital partners meet the legislated requirements in terms of Cyber Security.

To allow us to collate, process and evaluate your information, we are relying on the following, to provide the legal basis:

GDPR Article 6(1)(e) -Public Interest for the demographic information, and

GDPR Article 9(2)(h) – Provision of health or social care for the medical information

The Terms and Conditions that have been produced by our 3 digital partners can be found here – these will need to be reviewed and signed by patients before embarking on the project.


If you have any comments relating to this initiative and the data sharing required, please contact the Data Protection Officer in the first instance (


If you wish to make a complaint about this project or about how the Trust processes your information, you should contact the Complaints Department ( in the first instance.

Link to Ts & Cs

View our patient information leaflet here