Looking for help and support?

Ways to wellbeing

Introduction

NHS Wales is made up of several health organisations and brands that includes Hapus.

Hapus aims to provide information, resources and tools that aid and promote positive mental wellbeing to the population of Wales.

If you have any questions regarding how information may be used, you must use the ‘contact us’ page on the website, or the information contained at the bottom of this notice. We welcome calls and correspondence in Welsh. We will respond in Welsh without delay.

The purpose of this notice is to inform you of why and how we process your personal data.

Visitors to our websites

When visiting this site, we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in an anonymous way, which does not identify anyone individually. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be open about this. We will make it clear if we collect personal information and will explain what we intend to do with it.

Use of cookies

Cookies are small text files sent to your computer or mobile device by the websites that you visit. They help make websites work better and provide information to the owners of the site. For instance, we use language cookies to know what language you would like the web site displayed to you in, we also use YouTube cookies to embed videos in pages and Google Analytics cookies to track users’ behaviour whilst on the site. By understanding how people use our site, we can improve the navigation and content to better meet people’s needs. The information collected includes IP address, pages visited, browser and operating system. The data will not be used to identify any user personally.

How to Disable Cookies

To change your cookie settings:

Internet Explorer: Please follow this link http://windows.microsoft.com/en-gb/internet-explorer/delete-manage-cookies#ie=ie-9 for instruction on how to disable cookies.

Firefox: Please follow this link http://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences for instruction on how to disable cookies

Chrome: Please follow this link https://support.google.com/chrome/answer/95647?hl=en&ref_topic=14666 for instruction on how to disable cookies.

People who contact us via social media

Links to Hapus Social Media accounts are provided below:

  • Facebook
  • Instagram
  • X
  • Youtube

We will monitor our Social Media pages and will have access to any private or public messages that are sent to us. We may ask for additional information. However, we will only communicate with you using your preferred method of contact.
We will use this information to provide you with the most relevant information for your specific situation and in line with our confidentiality practices, we will not request or share sensitive identifiable information via a public comment or forum and only privately.

In some cases, the information may need to be shared with other government organisations including Welsh Government or another body in NHS Wales for example – a Health Board in Wales if you are interested in working for them / in a certain area. However, this will not be done without your consent.

If you send us a public message, we will use the information to respond to your query using a private message communicated between you and Hapus. If you send us an article, item of interest or news item, we may share or retweet your message if appropriate.

People who email us

We use Transport Layer Security (TLS) to encrypt and protect email traffic in line with the government. If your email service does not support TLS, you should be aware that any emails we send or receive may not be protected in transit.

We will also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.

Your rights

This Privacy Notice covers the rights of data use under legislation called the General Data Protection Regulation (GDPR). It emphasises Hapus’ need to make sure that we explain how we use information.

The information we give you about our use of information will be:

  • Brief, easy to read and easily accessible;
  • Written in clear, plain language; and
  • Free of charge.

What laws do we use?

The law determines how we can use information. In those areas where we use identifiable information, the laws we follow that allow this to happen are listed below:

  • General Data Protection Regulation
  • UK Data Protection Act
  • Human Rights Act
  • Freedom of Information Act
  • Common Law Duty of Confidentiality
  • Computer Misuse Act
  • Audit Commission Act
  • Regulation of Investigatory Powers Act

What information do we collect?

In order to perform our functions, we may process information about you, including (but not limited to) the following:

  • Name, email address, contact number (Supporter organisations, Champions, and subscribers)
  • Demographic information such as age, gender, ethnicity
  • Health information (where necessary)
  • Photographs and/or videos that you have consented to be used

We do not collect or process all of this personal data for all people all of the time. We only collect and process the personal data that is necessary for the particular task that we are carrying out.

Google Analytics

We monitor user activity to enhance content provided on this site. This website uses Google Analytics, a web analytics service provided by Google Inc. (‘Google’). Google Analytics uses ‘cookies’ and JavaScript code to help analyse user activity on websites. The information generated about your use of the website (including your anonymised IP address) will be transmitted to and stored on Google servers in the United States.

Google will use this information to produce user activity reports for this website. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.

Google will not associate your IP address with any other data previously held. You may refuse the use of cookies by selecting the appropriate settings on your browser. Please note that if cookies are disabled, you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Read Google’s Privacy Policy and Google’s Terms of Service for detailed information.

Hotjar

We use Hotjar to better understand our users’ needs and to optimize this service and your experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time is spent on which pages, which links are clicked, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.

For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.

Blue Stag

Our website is hosted and managed by third party providers; Blue Stag. The data from our website is stored on a Cloud server through Krystal.

For more information, read Krystal’s Privacy Policy (external website).

Mailjet

The forms on our website are set up using a third party provider; Mailjet. We also use Mailjet for our email marketing activity.

For more information, read Mailjet’s Privacy Policy (external website).

Sharing your information

If you decide to register your organisations interest in becoming a Hapus Supporter, you will be contacted with further information and, if successful, provided with regular updates including information and resources to promote Hapus. The information you provide will be used for the sharing of our Hapus Supporter communications only.

If you decide to register your interest to become a Hapus Champion you will be contacted with further information about the role and, if successful, provided with regular updates including information and resources to support you in the Hapus Champion role. The information you provide will be used for the sharing of our Hapus Champion communications only.

If you decide to join our ‘Hapus community’ you will be the first to hear about new content and features by joining our mailing list. Subscribers will receive email updates, access to mental wellbeing articles and be invited to take part in our regular feedback and improvement surveys. The information you provide will be used for the use of our mailing list only.

Security of your Information

Public Health Wales recognises that your personal data is very valuable, and so we take its security very seriously.

We employ robust technical measures to secure your personal data and access to it is restricted to people who have a need to process it in line with their work.

All Public Health Wales staff are bound by contracts which include clear responsibilities in relation to confidentiality. All of our non-medical staff have the same duty of confidentiality as healthcare professionals such as Doctors and Nurses.

All of our staff must attend training in what we call Information Governance. Amongst other things, this training makes them understand the importance of confidentiality and security of your personal data and makes clear that they are personally responsible for the security of any information which they are processing. They must attend this training at least once every two years and must pass a test to demonstrate that they have understood it. The expectations we have on our staff are set out in the Information Governance Policy. Failing to comply with this policy is a disciplinary offence.

We regularly audit access to personal data to ensure that it is being processed appropriately.

Do I have to pay a fee?

The information and service given by Hapus is free of charge.

Keeping your information

If you decide to register your organisations interest in becoming a Hapus Supporter, you will be contacted with further information and, if successful, provided with regular updates including information and resources to promote Hapus. The information you provide will be used for the use of our Hapus Supporter communications only.

If you decide to register your interest to become a Hapus Champion you will be contacted with further information about the role and, if successful, provided with regular updates including information and resources to support you in the Hapus Champion role. The information you provide will be used for the use of our Hapus Champion communications only.

If you decide to join our ‘Hapus community’ you will be the first to hear about new content and features by joining our mailing list. Subscribers will receive email updates, access to mental wellbeing articles and be invited to take part in our regular feedback and improvement surveys. The information you provide will be used for the use of our mailing list only.

Your rights under the Data Protection Act

Under the Data Protection Act, you have the right to know if we keep personal data about you, and if so what personal data we have and why. You also have the right (with some exceptions) to a copy of any personal data we have o assure you it is correct and current. More information regarding what personal data we have about you by contacting the Data Protection Officer (details can be seen at the end of this notice).

If you have any queries regarding this notice, or personal data processing, please contact us using the below details.

Please note that post to any of the addresses is opened directly by the Data Protection Officer and therefore it is not suitable for confidential correspondence. If you have a matter needing to be discussed personally and in confidence, contact the Data Protection Officer in the first instance via phone.

The Data Protection Officer

NHS – Public Health Wales,

Capital Quarter 2,

Tyndall Street,

Caerdydd

CF10 4BZ

Phone: 02920 104307

E-mail: PHW.InformationGovernance@wales.nhs.uk

We welcome calls and correspondence in Welsh. We will respond in Welsh without delay.

Contact

We are happy to provide any additional information or explanation needed. Any requests for this should be sent to the address below.

If you wish to make a complaint about any issues you have experienced regarding your information, then please contact healthimprovement@wales.nhs.uk

If you are still unsatisfied following your complaint and this remains unresolved, you have the right to make a complaint to the:

Information Commissioner’s Office,

2nd Floor, Churchill House,

17 Churchill Way,

Cardiff,

CF10 2HH

Email: wales@ico.gsi.gov.uk

Website: www.ico.org.uk

We welcome calls and correspondence in Welsh. We will respond in Welsh without delay.

Links to other websites

This privacy policy does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.

Changes to this privacy policy

If this privacy policy changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties.

This privacy policy was last updated on 23/05/2024.

Feedback

We welcome your feedback. If you contact us asking for information, we may need to contact other government departments to find that information. If your question is technical, we may need to pass it to our technology support (currently Blue Stag).

We do not pass on any of your personal information when dealing with your enquiry unless you have given us permission to do so. Once we have replied to you, we keep a record of your message for audit and evaluation purposes. We welcome calls and correspondence in Welsh. We will respond in Welsh without delay.

Join the Hapus community

Sign-up to our newsletter to find out about updates and ways to get involved.

Learn more and sign up
Two women preparing food together in a kitchen Dau menyw yn paratoi bwyd gyda'i gilydd mewn cegin.
Senior mother and her daughter watering plants together with a watering can
A senior man watering a tray of plants in his conservatory.
Woman taking a selfie at Henrhyd Falls