Privacy policy

This privacy policy sets out how we use and protect any information that you give us when you use this website. This policy was updated on the 14th September 2021.

We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.

We may change this policy from time to time by updating this page.


Who we are

Personal information submitted through this website is collected by Oxfordshire Sexual Health Service, part of Oxford University Hospitals NHS Foundation Trust. Oxford University Hospitals NHS Foundation Trust is the Data Controller who determines the purposes and means of processing personal data further information about how the hospital processes data can be found in the hospital Privacy Notice.

If you have any questions about how your data is processed or the information contained within this Privacy Notice contact us at or our Data Protection Officer at


What we collect

For C-Cards, the following information is collected and stored:

  • Date of birth
  • For under 16s:
    • Fraser Competency reviewed & safeguarding needs assessed?
  • Gender (with option prefer not to say)
  • First half of postcode
  • Sexual orientation (with option prefer not to say)
  • Ethnicity (with option prefer not to say)
  • Optional - security question and answer

Name and full postcode are not recorded so there is no identifying information. You can check your account details by contacting a C Card Site and providing your C Card ID.

In accordance with ICO guidance about data for under 13 year olds, parental consent is not required because the Safety C-Card is a "preventive or counselling service".


For Condoms by Post and C-Card registrations sent out by post we will ask for:

  • Name
  • Street address
  • Optional email address
  • Phone number (in case we need to contact you about the order) 


We may ask you if you would like to participate in feedback surveys about this service. We will seek your consent to do this and you can opt-out at any time once consent has been given by contacting us at


We may collect the following information from general enquiries

  • your name
  • your contact details such as email address, phone number, street address
  • specific enquiry details
  • your computer's IP address.


Why we collect this information

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:

  • to be able to respond to your contact
  • to provide services tailored to your needs
  • for public health reporting


Lawful basis for processing your information


Data provided by you is processed in compliance with the UK General Data Protection Regulation (UK GDPR) 2018.


Article 6(1)(a) the data subject has given consent to the processing of his and or her personal data for one or more specified purposes.


Where there is a requirement to process “Special Category” data it is processed under:


Article 9(2)(h) processing is necessary for the purposes of preventative medicine.


How long we keep this information

C-Card data is stored until a C Card holder reaches the age of 25 years.



We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable procedures to safeguard and secure the information we collect online.


Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways:

  • if you have previously supplied personal data
  • if you have previously agreed to us processing your personal information

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law.

If you have a complaint you can contact the Oxfordshire Sexual Health Service at or the Information Commissioner's Office (ICO) which is the data privacy supervisory authority in the UK.

Under the UK GDPR, you have a number of specific rights with regard to your personal information:

  1. Right of access – if you want to know if we are storing or processing any personal data about you, you can contact us to find out

    If this is the case, you may find out what purpose it is being stored for and request a copy of your data by contacting us. Your data will be supplied as soon as is practical in a CSV (comma separated value) file format which can be opened as a simple text file or as a spreadsheet. 

    There is no charge for making a request or for the electronic data file, but if the number and frequency of requests is unreasonable we may charge an admin fee.
  2. Right to correction - if you believe that any information we are holding on you is incorrect or incomplete, please contact us as soon as possible. We will promptly correct any information found to be incorrect.
  3. Right to erasure – if you want to remove your personal data from our records, you can request this by contacting us. We will remove the data as far as it is practically within our power, and where we are not legally obliged to retain it.
  4. Right to object – if you no longer want us to process your data you can request this by contacting us.
  5. Right to complain - if you are unhappy with how we are managing your personal data, you can make a complaint to us directly, to our Data Protection Officer at or to the Information Commissioner's Office (ICO).


How we use cookies

A cookie is a small file which is placed on a user’s computer or device by the user’s web browser.. Cookies help us to understand how visitors use  our website,  in a way that doesn't ever identify you personally. Cookies also allow web applications to respond to you as an individual, by helping you to log in or by remembering information from previous visits to a site. The website can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

Overall, cookies help us provide you with a better website experience when you visit it, by enabling us to monitor which pages you find useful and which you do not. A Cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. Declining some Cookies  may prevent you from taking full advantage of the website. We also use Google Analytics to analyse data about website visitors. Read the Google Analytics privacy policy.

You can change which Cookies are used when you visit our website. Read how to control and delete cookies.