Your Rights
Thrive Privacy & Cookie Policy
Privacy Notice
Users of this web site
Privacy Policy
This document outlines how personal information may be collected and used (or not used) on this web site, and outlines responsibilities and liabilities that correspond to such collection and/or use. These terms cover this web site and its content exclusively, and do not include web sites that are linked, or malicious third parties. It is our commitment to end users to operate this web site with integrity and honesty – taking the time, effort, and care to protect users and information that may be provided.
Collection of Information
We only collect personal information such as names, addresses, and contact information when it is voluntarily submitted by our users. The information provided is only used to fulfil your specific request and cannot be used for any other purpose unless permission is given by the individual who provided the information.
Third Parties
We may link to or display content from third parties on our web site. Should a user follow such links they would be leaving this web site and no longer be governed by this privacy policy. This policy and these terms apply only to content existing on this web site
Cookies and Tracking Technology
This site may use cookies or browser tracking technologies to provide a better overall user experience. This information allows us to continue modifying the site to meet end user browser types, operating systems, and frequency of visits. Personal information cannot be collected by these methods unless expressly provided by the end user. Aggregate cookie and tracking information may be shared with third parties.
What are cookies?
A “cookie” is a small text file that’s stored on your computer, tablet, or phone when you visit a website.
Some cookies are deleted when you close down your browser. These are known as session cookies. Others remain on your device until they expire, or you delete them from your cache. These are known as persistent cookies and enable us to remember things about you as a returning visitor. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org. Alternatively, you can search the internet for other independent information on cookies.
How we use cookies
We use cookies (and sometimes other similar technologies) to:
- Monitor your use on our website and gather analytics to help us improve your browsing experience
- Remember your preferences to personalise your visit
- Personalise our website and display information relevant to you
- Help us improve the usability of our website
Cookies on this website
Cookie | Provider | Description | Expiration |
cookieyes-consent | saved by the “CookieYes | GDPR Cookie Consent” WordPress plugin | used to save the state of the cookie consent popup | 1 year |
_ga | Google Analytics | store and count pageviews | 2 years |
_gid | Google Analytics | store and count pageviews | 1 day |
_gat_gtag_UA_* | Google Analytics | Store a unique user ID | 1 minute |
_ga_* | Google Analytics | store and count pageviews | 1 year |
This policy applies only to interactions taking place via the web site, and does not govern offline interactions.
Distribution of Information
We may only share your personal information with government agencies or other companies assisting us in fraud prevention or investigation, and when it is legally required for us to do so. This information is never shared with third-party companies for marketing purposes.
Commitment to Security
When personal information is provided to us voluntarily by end users, we agree to make reasonable efforts to make such information secure. Only authorized employees, agents, and contractors (who operate under confidentiality agreements) will ever have access to such information and are also stipulated to make every effort to ensure security and integrity of the data.
Rights to Changes
We reserve the rights to make changes to this document and these terms without notice to end users, but will highlight any changes on this page
Thrive Participants
What is Thrive?
Thrive is a community-based social prescribing service in North East Lincolnshire for adults with specific long-term health conditions. It has been funded by NHS North East Lincolnshire Clinical Commissioning Group (CCG) and commissioned by Humber and North Yorkshire Integrated Care Board (ICB).
Who are we?
The Thrive programme is managed by Thrive Outcomes Partnership Limited (15025762), on behalf of NHS North East Lincolnshire CCG, and is delivered in conjunction with Centre 4.
For the purposes of the applicable Data Protection Legislation, Thrive Outcomes Partnerships Ltd and Centre 4 are Independent Controllers.
What information will we collect about you?
The information we collect and hold about you includes:
• Personal details such as your name, address, date of birth, contact details, and NHS number
• Physical and mental health conditions
• Information regarding your lifestyle and social circumstances
• Details of your GP
• If you provide it, socio-demographic information such as your ethnicity, gender, religion, employment, and accommodation details
We will collect information about your participation in activities within the programme. We may also collect data on your feelings and challenges to help us shape the programme and activities to meet your needs. This information is collected directly from yourself and in some cases from other third parties you may engage with whilst on the programme.
What will we do with your information?
We collect and use your information in order to provide you with the best possible support whilst on the programme, as well as to meet the requirements of our contracts and other legal obligations. Key reasons for processing your information include:
• To ensure you are eligible to participate in the programme
• To maintain contact with you
• To allow us to track your participation in the programme and monitor progress – we will review your data at different times during your participation in the programme so that we can see what difference it is making to you.
• To allow us to provide a tailored service that is relevant to you
• The information collected from you in the programme will be used to assess the effectiveness and impact of our programme as a legitimate interest. This is because we want to make sure we are making a difference and helping you, as well as continuing to improve the overall quality of our services.
• We will use the information to track your participation in the programme for research, monitoring, and evaluation purposes. This means that we will review your data at different times during your participation in the programme so that we can see what difference it is making to you. Sometimes we will do this by aggregating and anonymising the data, which means that no one can identify you. On occasion we may ask you to take part in a new piece of research and provide additional information or share your information with a third party for the purpose of research, this will only ever be done with your knowledge and consent.
Who will see the information and what information will be collected by them?
We need to share the information with some trusted partners in order that the programme meets your needs. Information may be shared with, and collected by, the following organisations who are involved in the programme, in order that they can deliver their services and to provide monitoring, evaluation, and statistical support. Further information is provided within the table on the next page.
We will not release the data to anyone who is not authorised to receive it, nor for any commercial use. Any data shared for research, monitoring and evaluation purposes will be anonymised
Sometimes we may need to share your data with other trusted people, we will only do this if it is absolutely necessary. Examples of trusted people we may need to share your data with are health workers, social workers/social services, for registration at local activities groups (sports clubs etc.) or the police. If you tell us something that makes us think you are in danger, we will have to tell the relevant authorities. When we do this, it is because we have to follow the law.
We do not transfer your personal information outside the EEA.
Organisation | Organisations Role | What information is collected and shared? | What is it used for? | Primary Legal basis for processing |
Thrive Outcomes Partnerships Ltd (Independent Controller) | Manage the performance of the programme. | Referral information e.g. contact details is collected from you or a third party that may have referred you to the programme (GP, Local Authority etc). | This information is shared with our delivery partners so that they can contact you. We have access to all participant records so we can help manage the programme. | Art 6(1)(f) – processing is necessary for the purposes of the legitimate interests pursued by the Controller. |
Bridges Outcomes Partnerships (Processor) | Provide IT, Quality Assurance, HR and other Evaluation services to Thrive. | Full data set may be accessed by nominated individuals. | Nominated BOP staff will have access to the full Participant data set in order to provide IT, management support and quality assurance services. | Art 6(1)(f) – processing is necessary for the purposes of the legitimate interests pursued by the Controller. |
Centre 4 – Delivery Partner (Independent Controller) | Deliver the day-to-day service. Provide social prescribing services to adults. | We share referral details with Centre 4. They will then collect additional information from you related to your health and wellbeing. | Centre4 are appointed by Thrive to deliver the service and provide one to one support to participants. | Art 6(1)(f) – processing is necessary for the purposes of the legitimate interests pursued by the Controller. |
NHS Humber and North Yorkshire Integrated Care Board (ICB). (Independent Controllers) | Fund and evaluate the programme. | We share aggregate data provided in reporting and survey results, and programme testimonials. | Data is shared for financial audit, performance management and evaluation purposes. | Art 6(1)(e) – Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. |
North of England Commissioning Support (NECS) (Independent Controller) | Data is shared with NECS via the Data Landing Portal administered by NHS England. | Art 6(1)(e) – Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. | ||
Cyber Solutions Media Ltd (Processor) | Provide the IT system (Theseus) in which your records are captured. | All of the information you provide to us will be stored in the Theseus Case Management System. | Access to your data by their employees will only be to support or maintain the service. | Art 6(1)(f) – processing is necessary for the purposes of the legitimate interests pursued by the Controller. |
Keeping your information safe
We are committed to protecting the security of the personal information which we collect about you. In support of this commitment, we have implemented a range of technical, physical, and organisational controls to ensure an appropriate level of security in place over your data. For example, we make sure that our delivery partners have adequate security in place to protect your data and we put contracts in place with our partners to ensure that the data is used appropriately and where it is transferred outside the UK that it will be looked after. We require all staff to complete mandatory data protection and information security and we limit access to your personal data to those who have a genuine business need to know it.
How long will we keep your personal information?
We will only retain information for as long as contractually and legally necessary. Once we are no longer required to keep your information, it will be securely destroyed, in accordance with destruction guidelines. The following table provides you with summary information on how long we may keep your information:
Type of Information Length of time
Your participant file Data will be retained for the 6-year duration of the contract and 6 months thereafter.
Information relating to fraud or any legal complaints you have made against us For as long as we reasonably consider that you might legally bring an additional or repeat claim against us or to meet other statutory obligations.
Financial information relating to payments we have made to you whilst on the programme Six years following the end of the tax year.
Statistical and anonymised data that has come from your personal information. This data would not be considered personal information and will be kept as long as is necessary to support this and similar programmes across the UK.
Consent
Where we need your agreement to process your information, for example, to pass your contact details to someone offering a specific service, we will ask for your consent, and will clearly state why your information is needed and who we will share your information with. If you agree to your information being shared, we will record your consent on your record. We will regularly review consent to make sure that the relationships, and purposes for processing, have not changed.
Right to Withdraw Consent
Where you have provided consent for us to share your information with a specific organisation or individual, you have the right to withdraw your consent at any time. Should you wish to withdraw your consent, please tell a member of staff, or, send a written request to the Data Protection Officer who will process your request.
Your rights
The GDPR and Data Protection Act 2018 grants you certain rights regarding your personal information and the way in which it is processed. This gives you more control over what organisations are doing with your information. These include the right to:
• be informed of why and how we process your data
• request a copy of the information we hold on you
• have any incorrect information updated and put right
• deletion of information, once we have no legal right to hold it
• restrict processing in certain circumstances
• object to unwarranted processing
• ask us to transfer your personal information to another organisation
• object to any automated decision-making including profiling
For further information about your rights please consult https://ico.org.uk/for-the-public/
Contact Us
For more information or if you have any queries. complaints or wish to exercise your rights, please contact:
Centre4 | Phil.drinkwater@centre4.org.uk |
Thrive Outcomes Partnerships/ Bridges Outcomes Partnerships | dpo@bridgesoutcomespartnerships.org |
If you raise a query or complaint in relation to your data rights, we will endeavour to respond as soon as possible. Requests for a copy of your information will be responded to within a one-month period. If you are still not satisfied with how Thrive Outcomes Partnership or one of its partners is processing your information, you can write to the Information Commissioner’s Office at:
Information Commissioners Office, Wycliffe House. Water Lane, Wilmslow, Cheshire, SK9 5AF
Review of this privacy notice
We review this Privacy Notice to ensure we keep you up to date about what we are doing with your personal information and any changes in processing.
If you require this notice in a different format or you need further information or assistance, please contact the Data Protection Officer via the contact details listed above.
