Last updated: 15 July 2026
Who we are
This website is provided by the South Thames Paediatric Network (STPN), an NHS Operational Delivery Network (ODN), which operates under the Information Governance umbrella of Guy’s and St Thomas’ NHS Foundation Trust. For the purposes of data protection law, the data controller is:
Guy’s and St Thomas’ NHS Foundation Trust
Information Governance & Management
St. Thomas’ Hospital
Westminster Bridge Road
London
SE1 7EH
If you have any questions, please contact the Trust Data Protection Officer.
Email: gstt.dpo@nhs.net
What information we collect
When you register for an account, we ask you for:
- Email address
- Username
- First name and last name
- Password (stored in encrypted/hashed form — we cannot see or recover it)
- Organisation name and your role within it
- The dashboards and data-entry forms you are requesting access to
- Your reason for requesting access
We collect this information to create and manage your account, verify that you should have access to the specific dashboards and forms you’ve requested, and contact you about your account or the service if needed.
Legal basis: As an ODN, we process this information under the public task basis (UK GDPR Article 6(1)(e)) — it supports our function of coordinating clinical service data across the network — and, for account security purposes, under legitimate interests (Article 6(1)(f)). By registering, you’re asked to confirm you understand how your information will be used, but our legal authority to hold it does not depend solely on that confirmation.
Occupancy and service data
Parts of this website allow authorised users to submit aggregate, non-patient-identifiable service data — for example, the number of PICU beds occupied at a given level of care. This data relates to service capacity, not to individual patients, and is not linked to any patient record.
Free-text fields — important
Some forms on this website contain free-text boxes (for example, comments or notes fields). You must not enter any patient-identifiable information into these fields — this includes names, dates of birth, NHS numbers, addresses, or any other detail that could identify a patient, even indirectly (e.g. a rare diagnosis combined with a ward and date). Only enter aggregate or service-level information. If you accidentally submit identifiable information, contact us immediately at england.stpn@nhs.net so it can be removed.
Who can see your information
Your registration details are visible to the network administrators who manage access to the dashboards, and are used to determine which parts of the site you can see. We do not sell or share your personal information with third parties for marketing purposes.
Our website is hosted by ARO. Under our contract with ARO, Guy’s and St Thomas’ NHS Foundation Trust and ARO act as joint data controllers in respect of personal data processed through this hosting arrangement, each responsible for complying with data protection law in relation to their own processing. Guy’s and St Thomas’ NHS Foundation Trust remains the exclusive point of contact for data subjects wishing to exercise their rights, and directs any such requests to its Data Protection Officer (see “Your rights” below). No personal data is transferred outside the UK.
How long we keep your information
We retain your account information for as long as your account remains active. If you leave your organisation or no longer require access, please let us know so we can deactivate your account. Inactive accounts are reviewed after 6 months and may be removed if access is no longer required.
Keeping your information secure
We use technical measures — including encrypted connections (HTTPS), hashed passwords, and access controls limiting dashboards to authorised roles — to protect your information. No online system can be guaranteed 100% secure, but we take reasonable steps to protect data against unauthorised access, loss, or misuse.
Cookies
This website uses cookies that are strictly necessary for it to function — none of the cookies we use are for analytics, tracking, or advertising, so you won’t see a cookie consent banner.
| Cookie | Purpose | Duration |
|---|---|---|
| wordpress_test_cookie | Checks whether your browser accepts cookies | Session |
| wordpress_logged_in_* | Keeps you logged in as you move around the site | Session |
| wordpress_sec_* | Secures your login session, particularly in admin areas | Session |
| wfwaf-authcookie-* | Set by our security plugin (Wordfence) to verify authenticated users and protect against attacks | Approximately 24 hours |
Your rights
Under UK GDPR, you have the right to:
- Ask what personal information we hold about you
- Ask us to correct inaccurate information
- Ask us to delete your account and associated information (subject to any legal requirement to retain it)
- Object to how we’re processing your information
To exercise any of these rights, contact england.stpn@nhs.net in the first instance, or the Trust’s Data Protection Officer (gstt.dpo@nhs.net) for formal requests. If you’re unhappy with how we’ve handled your information, you can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows when it was last changed.
Contact us
If you have any questions about this policy or how your information is used, contact:
South Thames Paediatric Network
england.stpn@nhs.net
For formal data protection requests, you can also contact the Trust’s Data Protection Officer:
Information Governance & Management
St. Thomas’ Hospital
Westminster Bridge Road
London
SE1 7EH
gstt.dpo@nhs.net