Privacy Policy
Chatbot Pat for Derbyshire Community Health Services - Privacy Policy
For Pat, our sexual health chatbot - accessible at https://www.yoursexualhealthmatters.org.uk/- one of our main priorities is the privacy of our chatbot visitors. This Privacy Policy document contains types of information that is collected and recorded by Pat and how we use it.
If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us through email at dchst.info.gov@nhs.net.
This privacy policy applies only to our online chatbot and is valid for visitors to our website with regards to the information that they shared and/or collected in Pat. We only collect data when you interact with the chatbot. This policy is not applicable to any information collected offline or via online channels other than this chatbot.
For further information on how Derbyshire Community Health Service NHS Trust (DCHS) handles personal data, please refer to the mainDCHS privacy policy.
Consent
By using our chatbot, you hereby consent to our Privacy Policy and agree to its terms.
Information we collect
Pat stores your chat conversation in developer log files, and in a chat history database. The information collected during your chat with Pat is sent via an encrypted message to servers in London, managed by our vendor, Fintek Software Limited. This chat history will include chat messages you send to Pat with the free text input messages and if you select one of the chat dialog options. We also track how Pat responds. Each time you chat with Pat, we generate a session ID to group a single conversation. We use your chat information to check that Pat is responding correctly and identify where Pat needs improvements.
Alongside your chat, we record technical data about the web request including the web browser used to access Pat, and date and time stamps when Pat was used. The purpose of the information is for analysing trends, administering the site, and gathering demographic information.
Pat does not ask for personal information. There is a free text chat option to talk to Pat and if voluntarily provide personally identifiable information, it will be stored in logs. We ask you not to enter personally identifiable information where possible.
If you contact us directly via email, phone or a contact form, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.
How we use your information
We use the information we collect in various ways, including to:
- Provide, operate, and maintain our chatbot
- Improve, personalise, and expand our chatbot
- Understand and analyse how you use our chatbot
- Develop new products, services, features, and functionality
Sharing your data
Chatbot Pat is hosted and supported by our vendor, Fintek Software Limited, who may aggregate chat data to generate insights on how Pat is used for marketing purposes and to identify areas for future chatbot development. Aggregate data does not include personally identifiable data. Fintek may use chat data to look at:
- How frequently the chatbot is used
- Times that the chatbot is used
- What topics Pat discusses with visitors
For more information on how Fintek handles and stores data, please see Fintek Software's privacy policy.
Pat was originally created by Positive East. Insights on chatbot usage may be shared with Positive East to help identify areas for future development. For more information on how Positive East handles and stores data, please see Positive East's privacy policy.
How Long We Store Your Data
Your chat data is stored by our vendor, Fintek Software Limited, on servers based in London, UK. Data is stored for up to one year and then is automatically deleted. Log files are deleted after one month.
DCHS reviews chat data for improvements to the bot in reports generated by Fintek Software. These reports are stored on local NHS servers based in the UK.
GDPR Privacy Policy (Data Protection Rights)
We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.
The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
The right to data portability – You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
Children's Information
Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.
Pat does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.