Privacy notice

How your information is used in SAFE-STONES. The full Record of Processing Activities is held by the study team (docs/dtac/ROPA.md).

Who controls your data

The study sponsor, [Sponsor name], is the data controller. The Data Protection Officer can be contacted at [DPO contact].

What we collect

• Identifiers: NHS Number, initials, year of birth, trial ID
• Health information: questionnaire answers (EQ-5D-5L, USIQoL), symptoms, hospital visits, operations, kidney-function and scan results, your diary

Lawful basis

Health research in the public interest: UK GDPR Article 6(1)(e) (public task) and Article 9(2)(j) (scientific research). Ethical approval: [REC reference].

Your rights

You can ask to see your data, correct it, and withdraw at any time without affecting your care. Some rights are limited where they would prevent the research being completed. Contact the study team or the DPO, or complain to the ICO.

Data linkage & retention

With your consent we link to NHS records (e.g. HES) to capture longer-term events. Data are kept per the sponsor's research retention schedule ([retention period]) then securely destroyed.