Data privacy statement

Version: Mar 25, 2025

UKHSA Health Publications privacy notice

 

About UKHSA

 

On 1 October 2021, the UK Health Security Agency (UKHSA) came into being. An executive agency of the Department of Health and Social Care (DHSC), UKHSA combines many of the health protection activities previously undertaken by Public Health England (PHE), together with all of the activities of the NHS Test and Trace Programme and the Joint Biosecurity Centre (JBC).

 

UKHSA prevents, prepares for and responds to infectious diseases, and environmental hazards, to keep all our communities safe, save lives and protect livelihoods. We provide scientific and operational leadership, working with local, national and international partners to protect the public’s health and build the nation’s health security capability. 

UKHSA’s responsibilities include providing the Health Publications website service, which provides a health publications ordering service for health services (including vaccine providers). Health services can access guidance and promotional and vaccination consent health publications, so they can provide these to the public at the point of care. Health services can view the publications online, download, or order a printed copy to be posted in digital and print formats. This service is provided as part of UKHSA’s responsibility to provide leadership for the National Immunisation programmes.

 

This privacy notice explains what personal information we collect, use and may share for the Health Publications website service. It explains what your rights are if we hold your personal account information, and how you can find out more or raise a concern. 

 

DHSC is the data controller for the personal information we collect, store and use to fulfil our remit.

 

The information we collect

 

The personal information we collect and use includes service users:

  • full name
  • home or business address
  • telephone number
  • email address
  • computer IP address

 

How we collect this information

 

This personal information comes from service users directly when ordering a publication.

 

The purposes we use your information for

 

The personal information is used to:

  • To register service users with an account and to deliver publications to users.
  • IP addresses are used to monitor the uptake of resources in a region and use this information to inform promotion of the service in regions with lower uptake of programme resources.
  • To understand how users order and keep up to date with new versions of programme publications.
  • To improve the Health Publication service, for instance the publications service delivery and content using feedback from users of the service.

 

How we protect your information

Your personal information is protected by us in a range of ways.

It is stored on computer systems that are kept up-to-date and regularly tested to make sure they are secure and protected from viruses and hacking.

Your account information can only be seen by staff who have been specially trained to protect your confidentiality. Strict controls are in place to make sure they can only see your personal information if they need it to do their job, and they are only provided with access to the minimum necessary personal information.

No information that could identify you will ever be published by us.

Where we store your information

We store your personal account information in the UK only.

Who we share your information with

We share your personal information with the APS Group and their sub-contractor Prolog for the purpose of fulfilling and delivering any publication orders placed. 

 

 

How long we keep your information

We will only keep your personal information for for the purpose for which it was collected. We will destroy all user information if users have not used the service in 2 years. 

Your rights over your information

Under data protection law, you have a number of rights over your personal information. You have the right to:

  • ask for a copy of any information we hold about you
  • ask for any information we hold about you that you think is inaccurate to be changed
  • ask us to restrict our use of your information, for example, where you think the information we are using is inaccurate
  • object to us using any information we hold about you, although this is not an absolute right and we may need to continue to use your information – we will tell you why if this is the case
  • delete any information we hold about you, although this is not an absolute right and we may need to continue to use your information – we will tell you why if this is the case
  • ask us not to use your information to make automated decisions about you without the involvement of one of our staff

You can exercise any of these rights by contacting UKHSA at:

Information Rights Team

UKHSA

5th Floor, 10 South Colonnade

London  

E14 4PU

United Kingdom

Email: [email protected] 

 

You will be asked to provide proof of your identity so that we can be sure we only provide you with your information.

 

You will not be asked to pay a charge for exercising your rights. If you make a request, we will respond to you within one month.

Our legal basis to use your information

Our legal basis to collect your health publications account information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 is:

  • GDPR Article 6(1)(e) ‘processing is necessary for the performance of a task carried out in the public interest’


How to find out more or raise a concern

If you would like to find out more about Health Publications service, you can contact us at [email protected] 

If you have any concerns about how personal information is used and protected by UKHSA, you can contact the Department of Health and Social Care’s Data Protection Officer at [email protected] or by writing to:

 

Office of the Data Protection Officer

Department of Health and Social Care

1st Floor North

39 Victoria Street

London SW1H 0EU

 

You also have the right to contact the Information Commissioner’s Office if you have any concerns about how we use and protect your personal information. You can do so by calling the ICO’s helpline on 0303 123 1113, visiting www.ico.org.uk or writing to the ICO at:

 Customer Contact
 
Information Commissioner's Office
 
Wycliffe House
 
Water Lane
 
Wilmslow
 
SK9 5AF

About this privacy information

The personal information we collect and use may change so we may need to revise this notice. If we do the publication date provided below will change.

Published 27-03-2025

For more information, please also see UKHSA privacy notice - GOV.UK (www.gov.uk)