About the National Sexual Health System
Although your local sexual health service is run by your local Health Board, all sexual health services in Scotland use the same national electronic patient record system, called NaSH. This National Online Booking and STI Self-Sampling Kit (SSK) request site links to that system. This lets you book and change appointments at your local clinic and order STI test kits.
Who should use this site?
This site is meant for people living in Scotland to:
- book routine sexual health appointments
- ask for a sexually transmitted infection (STI) self-sampling kit to be posted out to them.
Data Controller and Data Processors
Any personal data collected through this website will be treated as confidential in line with the principles of the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).
The Data Processor is NHS National Services Scotland (NSS).
Where is my personal data stored?
All information is stored on secure on-site storage within Scotland on the National Sexual Health system database and can only be accessed by authorised NHS staff.
What personal information will be collected and why?
We need to ask you some personal information to find the right appointment for you within an NHS Sexual Health clinic, or to request the right sort of test kit to be sent out.
To make a booking you need to tell us your:
- Date of Birth
- Mobile phone number
To request a self-sample kit, we also need you to tell us about your genital anatomy and anatomy of your partners. This is so we can send you the right kit to make sure the right parts of your body are tested.
We also ask you some questions to find out if there are other services you may need and to tell us about previous infections. You do not have to answer these if you do not want to.
What information comes to my mobile phone?
As this is an on-line service we need you to tell us your mobile phone number. By doing this, you are agreeing that we can contact you by SMS or by phone call on that number. Please take a moment to check the privacy settings for text messages and voicemail on your phone so these do not display without your consent. You may find these links helpful Android privacy settings and permissions | Android and Privacy - Control - Apple
We use SMS texts to:
- confirm your booking,
- send you appointment reminders,
- confirm that an SSK kit has been sent to you,
- send you the results of your STI check.
We may call your mobile to discuss reasons about your appointment or if we have any questions about things you have told us.
If you decide that you no longer want us to use your mobile number for any of these reasons, please contact your local Sexual Health Service. They will remove the permission to contact you by mobile from NaSH. This may mean that you will not be sent test results or appointment reminders if you have already made a booking or sent a kit back.
Do I need to log in to the site?
You don’t need an account to use this site. We do not ask you to make or store a password.
You can manage an appointment you have already by using your appointment ticket number (sent out by SMS when you booked) and your Date of Birth.
You can choose to enter your ‘AN number’. This is your unique Scottish Sexual Health service number. You may have been given this on a card when you booked before or had to phone to collect a result. Giving us this number makes it easier to match your new request to your previous records in the sexual health system, but it is not essential.
What is the lawful basis for using my information?
NHS National Services Scotland (NSS) relies on the following lawful basis to collect and use your personal data:
- • UK General Data Protection Regulation (UK GDPR) Article 6(1)(e) - the processing is necessary for the performance of a task carried out in the public interest.
Our conditions for processing information about your health, and any other sensitive information about you, are as follows:
- UK GDPR Article 9(2)(h) - the processing is necessary for the provision of health or social care or treatment.
- UK GDPR Article 9(2)(i)- the processing is necessary for reasons of public interest in relation to public health.
How will my personal data be shared?
We will not routinely share personal data given to us for booking and test kit ordering with any other organisations. We will treat your personal data with confidentiality. Your personal data may be used for audit and research purposes and this is covered under your local Health Board’s privacy agreement.
We may have to disclose personal information when required to do so by law, for example to comply with a current judicial proceeding, a court order or legal process served on our website.
How long will my personal data be kept?
Data will be kept on the system according to current NHS Scotland Records Retention policy. If you wish for any of your personal information to be removed, you need to contact your local sexual health service who are the Data Controllers.
How do you look after my information?
NHS Scotland is committed to protecting and respecting the privacy of individuals whose personal information is held and used by us and to complying with our obligations under the Data Protection Act 2018, the UK GPDR and our organisational data protection policies. We have appropriate technical and organisational measures in place to keep your data safe, and all of our staff are trained in information governance and confidentiality and are required to comply with such legislation and policies.
What are my rights?
Under the UK GDPR and Data Protection Act 2018, you have the following rights:
- The right to be informed – about how we are using your personal data, which is done through this privacy notice, and through your Health Board’s privacy notice.
- The right of access – to the information we hold about you. Under the Data Protection Act, individuals who have a record held on the National Sexual Health System (created either by using this website to make an appointment booking or by attending a clinic in person) have the right to make a subject access request for their personal data. The request should be made to the Sexual Health clinic that you have most recently attended.
- The right to rectification – if the information we hold about you is inaccurate. If your personally identifiable information changes (such as name, postal code, phone, email or postal address) then you should inform the reception staff on the next occasion that you attend a clinic or call your local service. We do not provide a mechanism to allow citizens to modify the personal details we hold for them via this website. If any of the information which you have entered on this site needs to be changed or updated this can be done by contacting your local sexual health service.
- The right to erasure – you should contact the sexual health service for your local Health Board.
- The right to restriction of processing – if you wish to exercise this right you should contact the sexual health service for your local Health Board.
- The right to object - if you wish to exercise this right you should contact the sexual health service for your local Health Board.
- The right to data portability – as we are processing data using lawful basis 6(1)(e), the right to data portability does not apply.
- Rights in relation to automated decision-making – these rights are not applicable because there is no solely automated decision-making carried out.
Some of these rights are not absolute and may not apply in all circumstances. Requests are considered on a case-by-case basis.
If your details have changed since the last time you attended or used the booking site, then, use the new details online to create your new appointment or kit request. You can let staff know by phone or in person when you next attend to ensure your record is complete and up to date.
The use of Google’s geo-location services
The Online Booking Site will try and find the nearest Sexual Health Clinic to your location. The website uses Google’s geo-location services to do this. The location or postcode that you enter into the site will be sent to Google’s geo-location services to perform the search.
This Online Booking Website contains links to other sites, such as help videos or links to other sexual health information. These links are provided in good faith to help you and as far as we can tell are valuable and trusted resources. However we are not responsible for the privacy practices of other sites we link to. You should read the privacy statements of each and every website that is linked to within the Online Booking Website.
This privacy statement applies solely to information collected by this Website.
Cookies do need to be enabled on your browser for the website to operate.
How to contact us
You can find contact information for your local Sexual Health Service on NHS Inform.
If you wish to raise any privacy and data protection concerns, you should contact the Data Protection Officer for your local Health Board, which can be found at NHS DPO contacts.
Information Commissioner’s Office
You also have the right to complain to the Information Commissioner's Office (ICO) about how we use your personal information.
Postal Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone number: 0303 123 1113