Last updated: 28 March 2026

The Campaign for Responsible Leadership in NHS Wales ("we", "us", "carenhs.org") is committed to protecting the privacy of everyone who visits this site or contacts us. We demand transparency from public bodies. We hold ourselves to the same standard.


What we collect

Website analytics

We use Google Analytics (measurement ID: G-CWM8NFHKCJ) to understand how visitors use the site — which pages are read, how people arrive, and how long they stay. Google Analytics uses cookies to collect anonymised usage data. We do not use this data to identify individual visitors.

What is collected: Pages visited, time on site, approximate geographic location (country/region level), referral source, device type, and browser. What is not collected: Your name, email address, IP address (IP anonymisation is enabled), or any information that could identify you personally.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on or by using a browser with built-in tracking protection.

Contact and submissions

If you email us at carenhs@carenhs.org or submit information through the site, we receive whatever you choose to send. This may include your name, email address, and the content of your message.

How we use it: To read and respond to your message, and — if you have submitted evidence — to assess whether it can be verified from independent sources.

How we store it: Emails are held in a secure email account. We do not store submissions in any public database.

How long we keep it: For as long as it is relevant to the campaign's work. You can ask us to delete your correspondence at any time.

Source protection

If you submit evidence or information to us, we will never reveal your identity without your explicit written consent. This is a core commitment of the campaign, stated on every submission page. We will not share your name, email address, employer, or any identifying details with any third party — including journalists, politicians, regulators, or legal representatives — unless you specifically authorise us to do so in writing.

If we publish information you have provided, we will remove all details that could identify you before publication. If we cannot use the information without risking your identification, we will not use it.


Cookies

This site uses the following cookies:

CookiePurposeDurationSet by
_gaGoogle Analytics — distinguishes unique visitors2 yearsGoogle
_ga_*Google Analytics — maintains session state2 yearsGoogle

No cookies are used for advertising, remarketing, or profiling. We do not use any third-party tracking pixels, social media trackers, or advertising networks.


Third-party services

ServicePurposeData sharedPrivacy policy
Google AnalyticsWebsite usage analyticsAnonymised browsing dataGoogle Privacy Policy
CloudflareWebsite hosting and CDNServer logs (IP addresses, retained by Cloudflare per their policy)Cloudflare Privacy Policy
WhatDoTheyKnowFOI request publicationFOI requests and responses (published by us intentionally)mySociety Privacy Policy

Your rights

Under UK GDPR, you have the right to:

  • Access any personal data we hold about you
  • Correct inaccurate personal data
  • Delete your personal data ("right to be forgotten")
  • Object to processing of your personal data
  • Withdraw consent at any time

To exercise any of these rights, email carenhs@carenhs.org. We will respond within 30 days.


Children

This site is not directed at children under 13. We do not knowingly collect personal data from children.


Changes to this policy

We may update this privacy policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version.


Contact

If you have questions about this privacy policy or how we handle your data:

Email: carenhs@carenhs.org