Free healthy lifestyle support for residents in Hammersmith & Fulham
Healthy H&F — healthyhf.co.uk
Last updated: April 2025
This privacy policy explains how we collect, use, and protect your personal information when you use the Healthy H&F service, available at healthyhf.co.uk.
The Healthy H&F service is delivered by:
DDM Health Ltd on behalf of the London Borough of Hammersmith and Fulham.
For the purposes of data protection law, the London Borough of Hammersmith and Fulham is the data controller for information collected through this service. DDM Health Ltd acts as a data processor on their behalf.
Healthy H&F Website: healthyhf.co.uk Telephone: 020 3576 6555
For data protection queries relating to the London Borough of Hammersmith and Fulham, please refer to their privacy notice: lbhf.gov.uk/councillors-and-democracy/data-and-information/hf-privacy-notice.
We may collect and process the following categories of personal information:
• Name, date of birth, and contact details (email address, phone number, home address)
• NHS number
• Health and medical information, including weight, height, BMI, and relevant medical history
• Information about your use of the Healthy H&F service, including appointment records and programme progress
• Communications you send to us, including emails and telephone records
• Technical data when you use our website, including IP address, browser type, and pages visited
We use your personal information to:
• Provide and manage your care and treatment through the Healthy H&F programme
• Communicate with you about your appointments, referrals, and progress
• Refer you to appropriate NHS primary or secondary care services where clinically indicated
• Comply with our legal and regulatory obligations
• Monitor and improve the quality and safety of the service
• Produce anonymised or aggregated data for reporting to the London Borough of Hammersmith and Fulham and NHS commissioners
We rely on the following legal bases under UK GDPR to process your personal data:
• Performance of a task carried out in the public interest (Article 6(1)(e)) — for providing NHS-commissioned health services
• Compliance with a legal obligation (Article 6(1)(c)) — where we are required to process data by law
• Your consent (Article 6(1)(a)) — for specific uses where we ask for your agreement, such as marketing or optional communications
For special category health data, we rely on:
• Article 9(2)(h) — processing necessary for the provision of health or social care treatment
• Article 9(2)(i) — processing necessary for reasons of public interest in the area of public health
We may share your information with:
• The London Borough of Hammersmith and Fulham, as the commissioning body for this service
• Your GP and other NHS healthcare professionals involved in your care, with your knowledge
• NHS systems and infrastructure used to deliver care, including NHS-approved clinical systems
• Third-party technology providers who support our service, acting under strict data processing agreements
We do not sell your personal data. We will not share your information with any third party for commercial purposes without your explicit consent.
In some circumstances we may be required to disclose information to statutory bodies, for example in response to a court order or to safeguarding authorities where there is a risk of harm.
We retain personal data in line with NHS Records Management Code of Practice and the data retention schedules agreed with the London Borough of Hammersmith and Fulham.
Clinical and health records are generally retained for a minimum of 8 years following the end of care, or longer where required by law or regulatory obligation. We will securely delete or anonymise your data once it is no longer required.
Under UK data protection law, you have the right to:
• Access — request a copy of the personal information we hold about you
• Rectification — ask us to correct inaccurate or incomplete information
• Erasure — ask us to delete your personal data in certain circumstances
• Restriction — ask us to restrict how we use your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests or for direct marketing
• Withdraw consent — where processing is based on your consent, you may withdraw it at any time
To exercise any of these rights, or if you have a question about how we use your data, please contact us using the details in section 2 above, or refer to the London Borough of Hammersmith and Fulham's privacy notice.
Our website uses cookies to help the site function correctly and to understand how visitors use it. Cookies are small text files stored on your device.
We use:
• Strictly necessary cookies — essential for the website to work
• Analytics cookies — to understand how visitors interact with our site (used only with your consent)
You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect your experience of the website.
We take the security of your personal data seriously. We have in place appropriate technical and organisational measures to protect your information against unauthorised access, loss, or disclosure. All staff with access to personal data receive appropriate data protection training.
Where we transfer data to third-party processors, we ensure they meet equivalent security standards and are bound by contractual obligations.
We may update this privacy policy from time to time. When we make significant changes, we will update the date at the top of this page. We encourage you to review this policy periodically.
If you have a concern about how we have handled your personal data, please contact us in the first instance using the details in section 2. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or by calling 0303 123 1113.
