Privacy Statement

Who are we?

The Welsh Blood Service is a Public Authority, a licenced Blood Establishment, and a Division of Velindre NHS Trust.

Personal data we collect

We need to hold and ask for personal data about you in order to create a donor record and to check on your eligibility to donate blood or blood components. Personal data that we may hold about you in your donor record may include:

  • Basic contact details, such as name, address, date of birth, contact number
  • Donation details, including mandatory blood test
  • Travel details

Your donor record may also include special categories of personal data, such as data relating to health or sexual orientation information, race or ethnic origin, genetic, and biometric data.

It is important that we keep your details up-to-date, so please stay in touch.

Security and use of personal data?

We collect personal data about you in order to ensure we can supply safe and high quality blood components for use in the treatment of patients in Wales and beyond. Occasionally we may also use automated donor selection or carry out analysis of information in order to ensure the stocks of blood are maintained at safe levels and that no blood is wasted. We also use your information to ensure we are planning donation clinics in the best way.

We ensure your information is kept in strict confidence, kept secure and safeguarded from unauthorized access, in accordance with Data Protection legislation.

There are occasions where we may have a legal duty to share your personal data, for example for blood safety purposes and/or ensuring we can maintain our service to you or as requirement for the performance of our service. For example, to produce your Donor Card we will share your contact details and blood type with a card supplier. Where we are required to share any personal data with 3rd Parties then this will be undertaken in accordance with Data Protection legislation.

If you register for the purpose of stem cell donation your anonymised data will be transmitted to international registries to find out if you are a potential match for a patient (data such as Tissue Type, age, gender and donor number).
Anyone who receives personal data from us is also under a legal duty to keep this information confidential.

How long do we keep your personal data?

After you donate blood components, the Blood Safety and Quality Regulations and The Human Tissue Authority require that the Welsh Blood Service retains your donation record for a minimum of 30 years.

What is our legal basis for processing your personal data

The Welsh Blood Service processes your personal data in accordance with Data Protection legislation, and where necessary with your consent and/or where there is a legal requirement to do so, such as in the interests of the public, where there is a legal obligation of the service as recognised as a public authority and licenced Blood Establishment and/or the provision of treatment and management of health care services.

Your Rights and your personal data

Under Data Protection legislation:

  • You have the right to know how we will use your personal data.
  • You have the right to see your donor record, and for this to be provided free of charge. This is known as Right of Subject Access.
  • You have the right to object to us making use of your information.
  • You have the right to ask for your information to be changed, blocked or erased. Where possible we will seek to comply with your request but we may need to hold or process your personal data in connection with one or more of the Welsh Blood Services legal functions.

Contacting us about your personal data

To exercise all relevant rights or should you have any objections or queries relating to how your personal data is being processed by the Welsh Blood Service, please contact our Data Protection Officer at :

Velindre NHS Trust,
Unit 2 Charnwood Court,
Parc Nantgarw,
Nantgarw,
Cardiff,
CF15 7QZ

Email: VNHSTInformationGovernance@wales.nhs.uk

For independent advice about data protection, privacy and data-sharing issues, or if you should ever be dissatisfied with the way the Welsh Blood Service has handled or shared your personal data you can contact the Information Commissioners Office (ICO) at:

ICO Wales contact details

Information Commissioner’s Office – Wales
2nd Floor, Churchill House
Churchill Way
Cardiff
CF10 2HH
Telephone: 029 2067 8400

Fax: 029 2067 8399
Email: wales@ico.org.uk

ICO Head office details

Information Commissioner’s Office – Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113 or 01625 545745
Fax: 01625 524510

Website: ico.org.uk