This privacy notice is intended to give anyone information about how we use and look after information about you, or that could identify you.
We manage this information in accordance with the General Data Protection Regulation (EU) 2016/679).
If you have any further queries, please email the Data Protection Officer dpo@Ombudsman.org.uk.
We are registered with the Information Commissioner's Office (ICO) as a Data Controller. Our registration number is Z6520944.
What information do we collect about you?
When you first contact us we will record your name, address, telephone number, email address and details of your complaint in a file that we hold:
- on a computer
- on paper
- or both.
Why do we collect this information?
- Our role is to consider complaints about government departments, a range of other public organisations in the UK and the NHS in England, where you believe they have not acted properly or fairly, or have provided a poor service. So that we can do this we need to collect and use information about you and your complaint.
- We are allowed to use your information for the purpose of handling your complaint under our legislation. This legislation also protects information obtained for the purposes of investigating your complaint.
Who might we share your information with when you first contact us?
- We will treat your information considerately and confidentially. However we will need to share some information about your complaint with the organisation you have complained about. By making your complaint, you agree that we can share information about you and your complaint.
- If you do not want us to share the information you have given us with the organisation you have complained about, please tell us straight away. Please be aware, however, that this is likely to limit our ability to investigate your complaint.
Why do we share your information?
We will talk to the organisation that you have complained about so we can learn more about what happened and how they responded to your complaint to them. As the Ombudsman is the final stage in the complaints process, we will want to understand the history of your complaint.
This will help us decide how to handle your complaint.
We might also ask for advice about your complaint from someone with specialist knowledge (for example, a psychologist, midwife or obstetrician). PHSO works with qualified medical professionals to provide expert and independent knowledge.
Sharing your information if we do not investigate your complaint
- Sometimes we can help to put things right without an investigation. There might be other reasons why we cannot help you further with your complaint. If so, we will send you or your MP (if you have complained about a government body) a letter explaining our reasons for not investigating your complaint.
- If your complaint is about the NHS, we may send details of this final letter to the NHS organisation or person you complained about. This is to help them learn from the complaint and to consider if they need to do things differently or better.
- If we do this, we will let you know. We will not share any information about you unless they already know about it.
- In the case of complaints about government departments or other public organisations, we do not send a copy of that letter to the organisation complained about, but we may let them know what we have decided.
Sharing your information so that we can investigate your complaint
- If we decide to investigate your complaint, we must tell the organisation and any person complained about. We will therefore need to share your name and the details of your complaint.
- At the same time, we will usually ask the organisation for more information (including relevant papers and computer records). This can include very sensitive information such as your health records.
- We can also ask for information from anyone who we think can help us with your investigation. This could be someone with specialist knowledge (such as a psychologist, midwife or nurse) or someone who can tell us more about what happened and the impact it had on you (such as a relative or an employer).
Investigating with the Local Government and Social Care Ombudsman
- Sometimes complaints are about both health and care. For example complaints about older people whose care is being jointly provided by social care and health services. In these cases we may carry out a joint investigation with the Local Government and Social Care Ombudsman (LG&SCO).
- This will mean sharing your information with them. If we do need to work with the LG&SCO we will ask for your consent first.
- If you consent to both organisations dealing with your complaint, you are also giving your consent to the organisations sharing your information if they need to. For specific details on how we and the LG&SCO carry out a joint investigation and details of the Data Protection Officer please see our joint working agreement.
Sharing draft and final reports on an investigation
- Towards the end of our investigation, we will send you and the organisation, and any person complained about, a copy of our draft report. This gives you both a chance to comment on our draft findings.
- Our draft report is confidential. It will contain all the information from you and others that we have contacted. You and the organisation may share the draft report with people who can help you comment on its accuracy and content (for example, a family member or professional adviser), but by law you and the organisation complained about must not make the contents public.
- After we receive comments on the draft report, we will send a final report to:
- your MP (if your complaint was referred to us by the MP))
- the organisation and any person complained about.
- Once you and the organisation have received the final report, it is up to you both how you use it. You both must, however, be aware of any information within the report that can identify you or any other person and handle it with care.
- If we think that your complaint provides insight into how services or organisations can improve or is in the public interest we will share our findings with:
- regulatory organisations (such as the Care Quality Commission, General Medical Council or Monitor) if we have identified a problem that may affect others
- any other appropriate organisation that may benefit from what has been learned from our report.
- Before we send any information or reports about your complaint we will remove any information about you or information that may enable you to be identified.
- Unless we decide to publish the report, we will not normally discuss its contents with anyone other than those involved in the investigation. There is more information about our published reports later on in this policy. We will ensure that people who make complaints cannot be identified from our published reports.
Using your information for our wider functions of improving public service and for training and monitoring purposes
- We want to make sure that we provide a good service, so we might use your complaint for training, monitoring and evaluation purposes or invite you to meetings where we explain more about the Ombudsman’s roles and responsibilities, and ask for your feedback. We will only share any information you provide with our staff or people acting on our behalf.
- For example, we ask for feedback so that you can tell us what we are doing well and what we could improve. We will share your contact details with a survey company [Opinion Research Services (ORS)] who may then contact you to give feedback. They don’t contact everyone who makes a complaint so if you are not contacted and want to give us feedback please contact firstname.lastname@example.org
- We survey people at different points throughout our process and any feedback you give within these surveys will remain confidential. The survey company will keep the information for three months after the closure of that year’s survey. This could be up to fifteen months after you have given your feedback. We will then keep this information for up to one year.
- As you have the right to be forgotten (also known as the right to erasure), if at any time you want to withdraw your feedback, please contact the information rights team at email@example.com
- Your responses will only be shared in an anonymous format, unless you tell us otherwise.
- The law allows us to use your contact details in this way. This is known as legitimate interest. If you do not want to take part please tell your caseworker, call us on 0300 061 4222, or email firstname.lastname@example.org
- You can change your mind at any time and this will not have any impact on how we handle your complaint.
- If your complaint is handled by our Early Dispute Resolution (EDR) pilot team, we will contact you at the closure of your case to request you to take part in a survey about your experience. We will use this feedback to help us improve our service. As with our standard survey, you do not have to take part and your decision to participate will have no bearing on how we handle your case. However, if you do participate, so that we can understand your experience, we will save your feedback to your case file. This means that this survey is not anonymous.
Information for public sector organisations
From time to time, we may invite people to take part in targeted surveys. This could be to understand the impact of our work on complaint handlers or clinicians. When we do this, we will only use your professional contact details such as your work email address. All surveys will be stored within our UK hosted, secure survey software (Snap Surveys). Participating is entirely voluntary and we will never ask you for personal information.
Transfers of information overseas
- In exceptional circumstances it may be necessary to transfer personal information overseas. If we need to use an organisation or expert outside Europe (the European Economic Area), we will conduct a full privacy assessment and publish that here.
How long will we keep your information?
- We will keep all information about you and your complaint for two years after making our decision. This is whether we investigate your case or not. At that point, we will delete most of your information except the following, which we keep permanently:
- the final investigation report
- information of historical significance
- enough information to be able to identify you if you re-open or decide to begin a second complaint. This includes your name, your address, the name of the organisation you complained about, what you complained about, and the outcome. This is so we do not answer the same complaint twice.
- If you use our online form to start the complaints process and submit it to us, we will save that information electronically. You can create an account to be able to save and view any forms you have created.
- If you start but don’t complete and send your complaint form to us, we will assume that you do not wish to continue with your complaint. If so we will keep the information you submitted online for 1 month before deletion.
Why do we publish information about complaints?
- Our investigations resolve complaints on an individual basis but they also provide an overview of issues other organisations can learn from.
- We share this learning by publishing case summaries, reports about particular subjects such as mental health or eating disorders, and reports on individual investigations.
- We present these reports to Parliament and publish them on our website. Other than in exceptional circumstances, we always remove any information that identifies you.
You have rights under the General Data Protection Regulation (GDPR):
- You have the right to be informed about how we use your information. This is called a privacy notice and you’re reading an example
- You have the right to request a copy of information we hold about you and this is free of charge.
- We may however not be able to give you the information you are after if, for example, if it contains personal information about other people, we are in the middle of an investigation, or if the information has been given to us in confidence.
If you would like a copy of some or all of the personal information we hold about you, you can ask the person handling your complaint, or contact our Freedom of Information and Data Protection Team by emailing:
or writing to:
Freedom of Information/Data Protection Team
Office of the Parliamentary and Health Service Ombudsman
47-51 Mosley Street
- If you think we have got your details wrong, please let us know and we will update them within one month.
- You have the right to ask us to delete your personal data. However we may need to keep enough information to make sure that we honour your request. In some cases we need to keep your information even though you have made a deletion request, also known as the right to be forgotten. This is when we are bound by law to keep information for longer.
- You have the right to ask us to not use your personal information for certain purpose. You may, for example, not want your information to be shared with the LG&SCO or to take part in feedback. We will retain just enough information about you to make sure your wishes are respected in the future.
- We will not sell your information or use it for commercial purposes.
Freedom of information
- We are a public authority under the Freedom of Information Act 2000 (the FOI Act). We will not release information we hold about you to other people under this Act. This is because we cannot release any information we obtain about a complaint unless we need to do so to carry out our work.
- Under the Freedom of Information Act 2000 and the Environmental Information Regulations 2004 you have a right to request any recorded official information held by us. The information you require may already be publicly available and we have a duty to make official recorded information available.
- We make information available via a publication scheme. Before you make a request please check the publication scheme.
If you need to make a request, it must be done in writing.
Office of the Parliamentary and Health Service Ombudsman
47-51 Mosley Street
You do not need to say why you want the information. Your request must include your name, and an address for correspondence (email address is fine). Please make it clear what information you require. With certain exceptions, you are entitled to a response within 20 working days. There is no charge for making a Freedom of Information request.
However, we can refuse to deal with your request if:
- We do not hold the information you have requested
- The information is exempt from disclosure
Changes to our privacy notice
- We keep our privacy notice under regular review and we last updated it on 23 May 2018
Complaints, comments and compliments
If you wish to make a compliment, comment or complaint about how the PHSO are processing your data, then please contact the Data Protection Officer at dpo@Ombudsman.org.uk
- If you are still unhappy with how we have handled your complaint, you may contact the Information Commissioner's Office. The Information Commissioner Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Phone: 08456 30 60 60 Website: www.ico.org.uk
- If this privacy notice changes in any way, we will place an updated version on this page.
How to contact us
Contact details for the PHSO Data Protection Officer:
Data Protection Officer
Office of the Parliamentary and Health Service Ombudsman
47-51 Mosley Street
If you want to know more about our commitment to keeping your information safe, read our Information Promise.
For more information about your rights under the Freedom of Information Act 2000 and the General Data Protection Regulation, see the Information Commissioner's website at www.ico.org.uk
- If you want to make a request for information, please contact: email@example.com
- Our publication scheme gives details of all the information we make freely available to the public. It includes our records management policy and casework retention schedule.