This site uses cookies, by using this site you accept our cookie policy.

Whittington Health NHSUCL

Privacy policy

Welcome to the HeLP-Diabetes website (the "Website").

The Website is and controlled by Help Digital Community Interest Company, , Upper Third Floor, Royal Free Hospital, Rowland Hill Street, London NW3 2PF ("Help Digital"), who is data controller in respect of all personal information collected from users of the Website (if any) for the purposes of the data protection laws that are applicable in the UK at any time.

The terms "we", "us" and "our" when used in this Privacy policy are references to HeLP-Diabetes. The terms "you", "your" and "yours", when used in this Privacy Policy, mean any user of this Website.

Help Digital is committed to protecting your privacy online. Please read the following Privacy Policy (which forms part of the Terms and Conditions) to understand how we will treat your personal information. Our separate Cookies policy details about the "cookies" that are used on our site.

1. Your Consent

This Privacy Policy sets out how we use the information that we may obtain from or about you via the Website. On or before registration to use the Website, you will be asked to provide certain personal details, such as your name and email address, for the purposes of the registration process. By registering to use the Website, you agree to this use of your personal details.

In the course of using our Website, you may volunteer sensitive personal data to us, for example, when using the HeLP-Diabetes: Starting Out Pathway. You consent to our use of your sensitive personal data in accordance with the terms of this Privacy Policy.

If consent is the basis for our processing of your personal information, and at any time you wish to withdraw such consent, or if you wish to unsubscribe from the Website, you can contact us either via the Website or using the contact details in paragraph 11. If you have agreed to take part in research carried out through the Website, anonymised data from your account may be retained for that purpose.

2. What personal information do we collect?

Personal information means any information that we hold, or are likely to hold, relating to an identified or identifiable living individual. In practice, this means personal information we hold about users of our Website.

If you choose to register to use the Website we will collect the following types of personal data about you:

  • name;
  • email address;
  • Postcode
  • Date of birth;
  • Gender;
  • Highest educational qualification;
  • Email;
  • GP Practice

After registration to use the website, you can choose to use the website to record the following sensitive personal data:

  • Ethnic Group;
  • Whether you need to take medicine to control your diabetes;
  • blood glucose levels;
  • blood pressure readings;
  • blood test and other results;
  • a list of your medication;
  • your care plan;
  • medical appointments; and
  • any other sensitive personal data which you may choose to upload and store on the Website.

You do not have to upload sensitive personal data to the Website. If you do so, the data is treated as confidential medical information (see paragraph 4) and will be handled strictly in accordance with the terms of this Privacy Policy.

We may also collect details of your use of the Website including, for example, the length of time that you spend browsing certain pages, and location data..

3. How do we use your personal information?

The data you upload to the Website can be used by you to view historical records and see trends over time so you can understand your condition better and improve your health. It can also be used to set personal reminders that you can turn on or off through the Website. Data which you upload is not shared with any medical professionals and it is your confidential personal record. Your GP, nurse or any other medical professional will not have access to this information unless you give them a copy.

In order to process and use your personal information, we rely on the following legal bases:

(i) processing is necessary for the performance of the services provided to you through the Website; and

(ii) consent.

We may use the information that you provide or that is collected by us (provided that is not part of your confidential personal record or GP medical record) in the following ways:

  1. to contact you with Website news and updates;
  2. to keep you informed of our activities and the services provided by us using any of the following methods:
    1. e-mail;
    2. telephone (including automated calls);
  • SMS text messages and other electronic messages, such as picture messaging;
  1. post; and/or
  2. fax


  1. to allow us to understand who has visited which pages, to determine how frequently particular pages are visited and to determine the most popular areas of our Website.

We may also collect information from our Website by using cookies (see below).

Any personal data we collect or which you provide will be used by us in accordance with this Privacy Policy and current data protection legislation. We may store the information we collect from you and hold it in our computer database or otherwise. All data is held and processed in the UK.

4. Our obligations

We fully comply with all relevant data protection laws, including the Data Protection Act 1998, and protect the security of your information with Secure Sockets Layer (SSL) encryption. We maintain electronic and procedural safeguards in the protection of the personal information that we store. All confidential data and all personal data provided to us as a result of this Website will be handled in accordance with our strict standards of confidentiality. Our legal and professional obligations are guided by the following:

The Caldicott Principles;
Data Protection Act 1998;
Human Rights Act 1998;
Common Law duty of Confidentiality;
NHS Operating Framework 2011/12; and
The NHS Confidentiality Code of Practice.

5 .Your obligations

You must take all reasonable precautions to keep your information safe and prevent fraudulent use of your account and protect your confidential information. Your obligations include but are not limited to:

  • never writing down or otherwise recording your security details in a way that can be understood by someone else;
  • not choosing security details that may be easy to guess;
  • taking care to ensure that no one hears or sees your security details when you log in;
  • keeping your security details unique to the Website;
  • not disclosing your security details to anyone, including us;
  • changing your security details immediately and telling us as soon as possible if you know or suspect that someone else knows your security details;
  • once you have logged in to HeLP-Diabetes, not leaving your device unattended or letting anyone else use your device;
  • logging out of HeLP-Diabetes when you have finished using the Website;
  • installing and maintaining appropriate security software on any personal computing devices used to access HeLP-Diabetes; and
  • keeping operating systems and browsers on personal computing devices up to date.

In the event that a failure by you to comply with any of the foregoing obligations leads to a breach of security, we cannot be held accountable for the loss of any personal data, confidential information or otherwise.

6. What are "cookies" and how do we use them?

Similar to other websites, our Website uses a technology called "cookies" and web server logs to collect information about how our Website is used. Data about Website usage may be collected anonymously on an aggregate level and used for Website improvement purposes or health research purposes. Personal data will not be used for research purposes without your explicit consent. For details about how we use cookies, please see our Cookies policy.

7. What information do parties other than HeLP-Diabetes collect?

Some websites that have links from our Website from time to time may collect personal information about you when you access or utilise those links. We do not control the collection or use of such information, and this Privacy Policy does not cover the practices of those websites.

8. With whom do we share your information and for what purpose?

We will only pass on your information to third parties in the following situations:

  1. If we choose to share aggregate anonymised information with business contacts and partners;
  2. Where legally permitted or required; and/or
  3. Where disclosure is made with your consent.

We continue to work closely with UCL to improve the Website and to undertake research to benefit people with type 2 diabetes. We will ask you if we may share your personal information with UCL doctors and researchers for research purposes. If you have agreed, we will pass your information to UCL doctors and researchers conducting the research..

9. Your Rights

You have the right to see the personal data (as defined in the General Data Protection Regulation) that we keep about you (if any), on receipt of a written request and verification of your identity, free of charge.

If you are concerned that any information we hold on you is incorrect please contact us via the details in paragraph 11 below to inform us of the error and request its rectification.

To the extent that we have collected your personal information to perform the services made available through our Website, or our processing of your personal information is based on your consent, you have the right to ask us to transfer your personal information to another data controller of your choice.

You have the right to ask us to erase your personal information if:

  1. you withdraw your consent to our processing of your personal data;
  2. your personal data have been processed unlawfully by us; or
  3. your personal data are no longer necessary for the purposes for which it was collected by us.

We do not have to comply with a request to erase your personal data if we need to use that personal data for statistical purposes or as may otherwise be permitted by law. We may not be able to provide access to the Website or associated services if you ask us to erase your personal data.

You have the right to restrict our processing of your personal data if:

  1. you contest the accuracy of the personal data held by us (for a period enabling us to verify the accuracy of the data);
  2. our processing activities are unlawful; or
  3. we no longer need your personal data but you would like us to retain it to ensure its continued availability to you in connection with any legal claims.

In each case listed above, we will only process your personal data with your consent or as otherwise permitted by law.

10. Changes to our Privacy Policy

We may modify our Privacy Policy from time to time. If we do so, you will be asked to give your consent to the revised terms. In order to do so, we may contact you through the Website or by way of email or text and we will post a revised version of this Privacy Policy on this webpage.

11. Contact us

If you have queries, would like to talk to someone about this Privacy Policy, access your personal information or make a complaint about how we have handled your information, you can write to us at:

Help Digital Community Interest Company
Upper 3rd Floor, Royal Free Hospital, Rowland Hill Street


If you believe our processing of your personal information does not comply with data protection law, you can make a complaint to the Information Commissioner’s Office (ICO) using the following details:

Information Commissioner’s Office
Wycliffe House
Water Lane


Tel: 0303 123 1113

12. Governing Law

This Privacy Policy and any dispute or claim arising out of or in connection with it or its subject matter or formation (including non-contractual disputes or claims) shall be governed by and construed in accordance with English Law.

The courts of England will have exclusive jurisdiction over any claim arising from, or related to, our Website.

© Copyright 2015 - 2018, UCL Business Plc or its licensee, Help Digital Community Interest Company - all rights reserved. Reproduction of this Website, in whole or in part, in any form or medium without express written permission is prohibited.

© Copyright 2013 - 2015 UCL - all rights reserved.