This site has been optimized to work with modern browsers and does not fully support your version of Internet Explorer.

Privacy policy – data

Health Innovation Oxford and Thames Valley is part of Oxford University Hospitals NHS Foundation Trust and subject to the Trust’s policies and procedures. 

General information

This privacy notice provides additional information about what to expect us to do with your personal information.

About us

Health Innovation Oxford and Thames Valley gets innovation into clinical practice to improve patient safety, outcomes and experience through collaboration between the NHS, industry and universities.

We aim to deliver best health for our population and prosperity for our region – a population of three million living in Berkshire, Buckinghamshire, Milton Keynes and Oxfordshire.

Health Innovation Oxford and Thames Valley is one of 15 Health Innovation Networks created in 2013 as Academic Health Science Networks. In 2023 they were relicensed by NHS England to 2028 – and renamed.

How we use your information – legal aspects

In order to achieve the goals of Health Innovation Oxford and Thames Valley, we sometimes need to use and process the  information held about you in a pseudonymised form. This means that we cannot directly identify you from the information, but we do hold some details of your interactions with the NHS. Some of this information is supplied by NHS Digital as directed by NHS England. Read more about this on Establishment of Information systems for NHS services: Assuring transformation data collection Directions 2015.

We get data directly from other sources including NHS trusts within the Health Innovation Oxford and Thames Valley region, NELA, LUCADA – again, this is only in a pseudonymised form.

The ways in which we use your information are governed by law. The principal legislation that applies is the EU General Data Protection Regulation (GDPR).

In most instances we will rely on Article 6(1)f, Article 9(2)i and Article 9(2)j of the GDPR if and when we use your information for research. Details about Article 9.

This data is held stored in a secure N3 (soon to be HSCN) compliant network environment.

Any data we hold is subject to a Data Sharing Agreement and as such there will be a defined retention period for us to store and use your data. We will only store and use data whilst there is a legitimate reason to do so. Once the retention period has expired we will destroy any data using industry recognised procedures.

All analytic outputs are in aggregate form with small numbers suppressed and stored in a secure N3 compliant network environment.

Please see our websites for examples of how we use data:

We only ever use your data to help to improve health and social care.

Controller’s contact information

As our host, Oxford University Hospitals NHS Foundation Trust is the controller for the personal information we process, unless otherwise stated.

There are many ways you can contact us, including by phone, email and post.

  • Postal address:
    Oxford University Hospitals NHS Foundation Trust
    Chief Executive’s Office
    Level 3, John Radcliffe Hospital
    Headley Way
    OX3 9DU
  • Email:
  • Tel: 01865 226912

Data Protection Officer

Our Data Protection Officer (and Caldicott Guardian) is Dr Chris Bunch:

Accessing the information we hold about you

You can request a copy of the details we hold about you at any time. Please email us at to obtain these or to update us on any changes you would like to make. Please note, however, that any analytical data that we hold is pseudonymised (not identifiable to you as an individual) and as such we will not be in a position to disseminate this analytical data to any individual.

If you wish to see your medical information, please contact the OUH Information Governance team:

Please refer to the OUH Privacy Policy.

Changes to our policy

If our privacy policy changes in any way, we will place an updated version on this page. Regularly reviewing the page ensures you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties.

Contact us

If you have any questions about this privacy policy, please contact us using one of the following methods:

  • Post:
    Health Innovation Oxford and Thames Valley
    Magdalen Centre, Robert Robinson Avenue
    Oxford Science Park OX4 4GA
  • Tel: 01865 784944
  • Email: