Who we are
We are the Royal College of Paediatrics and Child Health (RCPCH), 5-11 Theobalds Road, London, WC1X 8SH (telephone: +44 (0)20 7092 6000).
The contact details for the Data Protection Officer are the same as above or via email to information.governance@rcpch.ac.uk.
This privacy notice explains how and why we use the data about you that we collect via the PaedCCF application form. This statement does not cover ePortfolio. To find out more about how your data is processed on ePortfolio, including information about any cookies we use as part of this system, visit the ePortfolio privacy notice
Why do we collect personal information from you?
Under UKGDPR we are required to have a legal basis for processing your personal data. Our legal basis is:
"Contractual obligation" - Where we need to process your personal data in order to enter into, or fulfil, a contract with you. In this instance the "contract" is your access to the PaedCCF tool within the ePorfolio platform.
You are required to collect patient feedback as part of your revalidation. However, you are not required to use RCPCH’s PaedCCF tool to do this, it is entirely optional. If you do decide to use our tool, we will need to process your personal data in the following ways to enable us to provide you with this service:
- To create personalised patient feedback forms so that patients are able to easily provide anonymised feedback about you
- To communicate with you regarding the PaedCCF tool and how the process works, as well as any service updates
- To set up and/or modify the status of your online ePortfolio account which is necessary to deliver the PaedCCF service
Who might we share your information with?
We will never publish raw data. If we want to publish data, any data that could be used to identify you will be removed and only consolidated anonymised patient feedback data will be used as part of a wider dataset of all doctors who have completed PaedCCF as part of a cohort comparison.
Your personal data will not be transferred outside of the EEA.
How long do we keep hold of your information for?
We will only retain your information for as long as required to fulfil your revalidation requirements. In line with GMC processes and timeframes, we will retain your PaedCCF data for a maximum of 10 years (two full revalidation cycles) post completion of your PaedCCF report or until such time as you withdraw your consent and request that we delete your information.
Understanding GDPR and your data rights
Use of our PaedCCF tool is optional. If you no longer want to use it, you can let us know by contacting us on revalidation@rcpch.ac.uk and we will not process your data any further.
To help you understand more about this information, please see our page Understanding GDPR and your data rights. This explains common words and phrases used in our privacy notices, describes our use of artificial intelligence (AI) and details the rights you have in relation to the processing of your personal data under UK General Data Protection Regulation (UK GDPR) and how to make a request.
How to make a complaint
If you are unhappy with how we are using your personal data or how we have dealt with a rights request, you should contact us in the first instance so that we can understand and try to resolve your concern. If you would like to make a complaint, please follow our data protection complaints process. If you remain dissatisfied, you can complain to the Information Commission.
Changes to this privacy notice
This privacy notice was last updated on 18 May 2026.
Last review 1 September 2025