IDG Privacy Notice

How we protect your data

We are committed to ensuring that your information is secure. We use leading technologies and encryption software to safeguard your data, and maintain strict security standards to prevent any unauthorised access to it. However, given that transmitting information over the internet cannot be completely secure, we can’t guarantee the security of your data in transit.


”IDG” is hosted on the Amazon Web Service platform, a cloud-based software platform which provides for disaster recovery processes across its servers, which are all located within the European Economic Area (EEA). None of the data contained within ”IDG” will go outside the UK or the EEA. The ”IDG” platform is accredited to ISO 27001 security standards.

We will not sell your personal data. We will not disclose your personal data to third parties outside of the CRNCC, unless we have your explicit permission, or are required by law to do so.


We will hold the data for as long as we are providing you services and for as long as you agree to this. We will retain your data for varying amounts of time depending on the nature of your interactions with the ”IDG” service

  • We only store data that is necessary for a specific purposes

  • We will not store your data for longer than is necessary

  • Your data will be securely deleted when no longer needed for the purpose(s)


Destruction of Data

  • When a disc drive fails or is no longer required for use, this is securely destroyed in accordance with the NHS Code of Practice.

  • When an electronic file containing personal identifiable information (i.e. a complaints file) is no longer required it is securely deleted by overwriting the space several times with selected patterns, thus rendering any information unreadable.

  • No paper records are kept for personal confidential data