MPharm Student-Led Clinic Participants privacy notice

Information you need to know

The MPharm Student-led Clinic is part of the School of Pharmacy and Biomolecular Sciences. The School of Pharmacy and Biomolecular Sciences is part of Liverpool John Moores University. See further information on the institution.

Liverpool John Moores University is the Data Controller.

Our Data Protection Officer can be contacted at DPO@ljmu.ac.uk.

This privacy notice explains how we use your personal information and your rights regarding that information.

For information about how the wider University uses personal data, please see the Privacy notice section of our website.

Information we are collecting

If you choose to take part in this project, staff and students involved in delivering the cardiovascular risk screening service will need to collect some personal information about you. This includes your:

  • name
  • postcode
  • gender
  • ethnicity
  • age

We will also collect information about your health that is relevant to the screening service, such as any:

  • medical conditions
  • medications

As part of the screening, students will carry out a series of straightforward clinical tests. These will generate additional health information, including your:

  • height
  • weight
  • waist circumference
  • blood pressure
  • cholesterol levels

Source of the personal data

The personal data used as part of this project is collected directly from you when you take part in the cardiovascular disease screening service. We do not obtain your personal data from any other sources.

Why we are collecting your data and the legal basis for this

We process personal data in accordance with the principles of the GDPR and only where there is a valid lawful basis to do so.

We are collecting the information listed above so that students can safely and effectively deliver the student-led cardiovascular disease screening service.

We will collect and use your personal data based on your informed consent. This means you are agreeing to your information being used for the purposes of this screening service, with appropriate safeguards in place to protect it.

Under data protection law, the lawful bases we rely on are:

  • Article 6(1)(a) - you have given clear consent for your personal data to be processed for a specific purpose
  • Article 9(2)(a) - you have given explicit consent for the processing of your health (special category) data

You are free to withdraw your consent at any time. Information on how to do this should already have been provided; if not, or if you are unsure, please use the contact details below.

You are not legally or contractually required to provide your personal information, and choosing not to take part will not affect you in any way.

Who has access to this data

Your personal data will be accessible to the staff and students involved in delivering the student-led service. Once the screening has been completed, access will be restricted to the lead staff member only.

As part of the service, you will be given a summary of your results. This will include the outcomes of the screening (including your health data) and whether you have been advised to consider further review. It is your choice whether you share this information with your General Practitioner (GP). The project team will not share your data directly with your GP.

We take the privacy of your personal data seriously and will not share it with anyone else unless there is a clear and lawful reason to do so.

How the university protects your data

We are committed to keeping your personal data safe in line with data protection legislation and the university’s information security and data protection policies.

The information we collect is stored securely and only accessed by authorised staff. We have appropriate technical and organisational measures in place to safeguard your data.

How long the university keeps your data

Your personal data will only be kept for as long as necessary to deliver the screening service and meet its aims.

Any paper records created during the service will be securely destroyed once the information has been recorded electronically. A pseudonymised record of your participation will then be retained for up to one year.

This record will only be used if your usual healthcare provider contacts the University following information you have chosen to share with them. After this one-year period, all data relating to your participation will be securely deleted.

Your rights

As a data subject, you have a number of rights. You can:

  • access and obtain a copy of your data on request - this could be in a portable electronic format
  • request that the university changes incorrect or incomplete data if you think that it is inaccurate or out of date
  • request that the university delete or stop processing your data, for example where the data is no longer necessary or legally required for the purposes of processing

Please note:
Many of these rights, including the right to access personal information that is held about you, are qualified or do not apply when personal information is processed solely in a research or archival context.
This is because fulfilling them might adversely affect the integrity of, and the public benefits arising from, the research study or project.

If you have any questions about the service you are participating in, please contact Dr. Sally Wright (Project Lead, s.wright@ljmu.ac.uk) or Jonathan Davies (Principal Teaching Fellow, Experiential Learning, j.p.davies@ljmu.ac.uk).

You should contact the Data Protection Officer on DPO@ljmu.ac.uk if you:

  • have a query about how your data is used by the university
  • would like to report a data security breach (for example if you think your personal data has been lost or disclosed inappropriately)
  • would like to complain about how the university has used your personal data

You should contact the Research Governance Manager if you have concerns with how the research was undertaken or how you were treated.

Our postal address is:

Brownlow Hill
Liverpool
L3 5UG

Our telephone number is 0151 231 2121.

If you do not provide data

Providing your personal data is entirely voluntary. If you choose not to provide the information requested, you will not be able to take part in the cardiovascular disease screening service, as the information is necessary for it to be carried out safely and effectively.

There are no other consequences for choosing not to take part.

Transfers of data outside the UK

Your personal data will not be sent outside the UK.

Automated decision-making

We do not use computers to make decisions about you based solely on your personal data. Any decisions that affect you will always be made by a human, ensuring that you are treated fairly.

How to complain to the university

You have a right to complain to the university if you think it has not properly responded to your request for personal information or feel it has not handled your personal data responsibly.

If you are not satisfied with how your request for information or how your personal data has been handled, you should set out your complaint in writing to:

Maria Burquest
University Secretary and General Counsel
Legal and Governance Services
2nd Floor Exchange Station
Tithebarn Street
Liverpool
L2 2QP

or by email via DPO@ljmu.ac.uk.

How to complain to the Information Commissioner’s Office

You have the right to complain to The Information Commissioner if you believe that our processing of your personal data does not meet our data protection obligations. The Information Commissioner can be contacted using the following details:

  • Post: Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK95AF.
  • Telephone: 0303 123 1113.
  • Email: contact can be made by accessing the ICO website.