Effective Date: 1st August 2025

This Privacy Policy outlines how www.wrwcmedical.com, powered by KnexuSport, handles user privacy and data in line with:

• UK General Data Protection Regulation (UK GDPR)

• Data Protection Act 2018

• NHS Data Security and Protection Toolkit

• Caldicott Principles

• Medical consent frameworks applicable to elite sport

1. Purpose and Scope

This website serves as a conduit for clinical coordination and communication within the WRWC medical network. It does not store, process, or retain any clinical data on behalf of teams or individuals.

2. No Data Retention

No information, messages, or uploads transmitted via the website are stored. The site functions as a temporary relay mechanism only. Emails sent to medical staff through the platform are not saved or retained.

3. Data Controller and Processor

The WRWC, in conjunction with KnexuSport, governs the operation of this website. All data privacy is handled under their joint governance in accordance with UK health and data legislation.

4. Medical Imaging

Medical images are managed and stored exclusively via PACSpost, a secure, encrypted imaging platform. No imaging is uploaded, stored, or processed through www.wrwcmedical.com directly. Teams may upload additional image sets to PACSpost from any provider as they see fit.

5. Consent and Medical Data

It is the responsibility of WRWC team medical staff to ensure all data shared (including via PACSpost) is accompanied by valid, informed medical consent in line with GDPR and NHS standards. This applies to all diagnostic, clinical, or sensitive information.

6. Legal Basis for Processing

Medical and personal information is processed on the lawful bases of legitimate interest and medical necessity. The website itself does not process personal data.

7. Cookies and Tracking

Cookies are used for performance and analytical purposes only. They do not capture identifiable personal or clinical information.

8. Data Security

Although no clinical data is stored on this site, secure SSL encryption is in place for all transmissions. Users are required to take appropriate data security measures when uploading or sharing content externally.

9. Your Rights

Under UK GDPR, users have rights over how their personal data is managed. Since this website does not retain data, all requests related to data access or correction should be directed to the appropriate WRWC Area Medical Officer or Tournament Medical Director.