Health Education and Improvement Wales (HEIW) (“we”, “us”, or “our”) is committed to protecting your personal data and respects your right to privacy. HEIW is a data controller responsible for your personal data pursuant to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act (DPA 2018).
Personal Data means any information about an individual from which that person can be identified.
The UK GDPR requires that data controllers provide certain information to people whose personal data they collect and process. A privacy notice is one way of providing this information including information on how we collect, store, use and share (‘process’) your personal data.
As a data controller, we process personal data in accordance with our statutory obligations to fulfil our designated functions. For example, to support the commissioning and delivery of education and training, as well as for workforce planning and development within NHS Wales.
Contact details for us and our Data Protection Officer
Our office address is at:
Ty Dysgu, Cefn Coed, Nantgarw, Rhondda Cynon Taf, CF15 7QQ
Our opening hours are: 8am to 6pm Monday to Friday.
HEIW has an appointed Data Protection Officer (DPO). If you would like to know more about this privacy notice, exercising your rights, or have concerns in relation to how your personal data is processed, please contact our DPO:
Data Protection Officer
Ty Dysgu, Cefn Coed, Nantgarw, Rhondda Cynon Taf, CF15 7QQ
Telephone: 03300 585 005
E-mail: HEIW.informationgovernance@wales.nhs.uk
HEIW has notified the Information Commissioner’s Office (ICO) that it is a data controller and processes personal data. Our ICO registration number is: ZA472183
We welcome your feedback. If you contact us asking for information, we may need to contact other government departments to find that information. If your question is technical, we may need to pass it to our technology support (currently Digital Health and Care Wales (DHCW)).
We do not pass on any of your personal information when dealing with your enquiry unless you have given us permission to do so. Once we have replied to you, we keep a record of your message for audit and evaluation purposes.
This privacy notice was last updated: 22/07/2026