Privacy Policy

This website is owned and operated by Malling Health Limited (Company number 06821137) and Malling Health (UK) Limited (Company number 07034946) (together as Malling Health). Malling Health Limited and Malling Health (UK) Limited are registered at 1st Floor, Rutherford House, Warrington Rd, Birchwood, Warrington WA3 6ZH.

Malling Health vision is to provide high quality public healthcare services, working closely with NHS England and local stakeholders in pursuit of achieving the NHS Five Year Forward View to provide long-term sustainable public healthcare.

Visitors to this website

This website is static and does not hold personal or confidential data.

We may collect statistical anonymised data in order to find out the numbers of visitors to the site, the pages visited and system errors.

IP addresses are used by your computer every time you are connected to the Internet. Your IP address is a number used by computers on the network to identify your computer. IP addresses are automatically collected by our web servers so that data (such as the web pages you request) can be sent to you.

A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. This helps us to distinguish you from other visitors to our web site. For more information about cookies, including how to view the cookies that have been set and how to manage or delete them, please visit the All About Cookies website.

Contacting us through our website, email or social media

Please note that we cannot guarantee the security of your information when you send an email to us.

When you provide information to us through this website we will store the data provided and hold it on a computer and/or in hard copy form. We will use this data to provide you with the services you have requested, such as to process job applications, to make contact with us and, where relevant, marketing, administration, development and improvement of this website. We may supplement the information that you provide to us with information that we receive or obtain from other sources.

When you interact with our Facebook and Twitter accounts, any information that you post is generally in the public domain.

We may provide information about you (on the understanding that such information will be kept confidential) to employees and agents of Malling Health to administer accounts, products and services now or in the future. We may also disclose information about you to third parties where we have a duty to do so or if the law permits or requires us to do so.

Corporate services

Malling Health handle and may share personal data in circumstance where a complaint or concern has been raised, or a compliment given. The lawful basis in these circumstances is the legitimate interest of being able to respond to complaints, concerns or compliments. We will only use personal information we collect to process the complaint, concern or compliment. We will try to respect any request to limit data disclosure but please be aware that it may not be possible to follow due process on an anonymous basis.

Malling Health has a duty to handle personal data to comply with the requirements of its commissioners.

Malling Health handle and may share personal data where there has been a data breach. Malling Health and its commissioners have a duty to detect, report and investigate any incidents where a breach of confidentiality has been made.

Lawful basis

We process your information for our legitimate interests of being able to respond to your enquiries, concerns or compliments, make improvements to our website and the service that we are providing.

Healthcare services

We will not collect information about your health and care through this corporate website. Privacy notices and information leaflets about healthcare records are provided at the local healthcare services and on each healthcare service website.

Job applicants and employees

The Privacy notice for job applicants can be found here. Employees can find the staff privacy notice on RADAR.


We take the security of your personal data very seriously.

We have technical controls to prevent unauthorised access to your personal data and organisational controls such as regular confidentiality and security training, policies to support data protection practices, audit and monitoring, and privacy by design procedures.

Information retention

We keep your information in accordance with the national guidance: Records Management Code of Practice for Health and Social Care 2016, after which records and confidential information are securely destroyed in line with this code of practice.

Your rights

Data Protection laws provides you with the following rights:

The right to be informed
As a data controller, we are obliged to provide understandable and transparent information about the way we process your data (this is provided by our privacy notice).
The right of access
You are entitled to request a copy of the personal data we hold about you. Information about how to access your healthcare records can be found the relevant healthcare website.
The right to rectification
You are entitled to request changes to information if it is inaccurate or incomplete
The right to erasure
Where no overriding legal basis or legitimate reason continues to exist for processing personal data, you may request that we delete the personal data.
The right to restrict processing
Under certain circumstances, you may ask us to stop processing your personal data. We will still hold the data but will not process it any further.
The right to data portability
Subject to certain conditions, you may request a copy of your personal data to be transferred to another organisation.
The right to object to processing
You have the right to object to our processing of your data where processing is based on legitimate interest; or for the purpose of direct marketing; or for the purposes of scientific or historic research; or where processing involves automated decision-making and profiling.

Please note that the above rights may not apply in all circumstances but we will respond within a month of any requests.

If you have any questions or concerns about the data we hold on you, you can either contact your local healthcare service or the data protection officer (DPO) who oversees compliance with this privacy notice. The DPO can be reached by email at informationgovernance@Malling.Health or you can write to The DPO, Malling Health, 10th Floor, 1 City Approach, Albert St, Eccles M30 0BG.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues: by email at or you can write to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. The telephone enquiry line is: 0303 123 1113 (local rate call).