Healthier You Provided by Thrive Tribe 

Your personal information and what we do with it. 

1. Why do you collect my information? 

We are commissioned by NHS England and collect your information for the inclusion and delivery of our NHS Diabetes Prevention Programme. The aim of our evidence-based programme is to prevent the risk of you developing type 2 Diabetes. It is a 9-month programme that is available both as a face-to-face group and as a digital service. Research shows that this programme has reduced new diagnoses of type 2 diabetes in England, saving thousands of people from the potentially serious consequences of the condition.   

2. Who do you get my data from? 

We get your data when you register interest in our programme via the Healthier You website. We also receive referral data directly from Primary Care. All referrals are made via secure NHS mail. 

3. How does data protection law allow you to use my data? 

If you have referred yourself into our service, we would be using your data on the basis that you have initially given us consent to do so, and from there that we are providing you with a healthcare service, which by itself gives us a basis for using your data. If you have been referred by a healthcare professional, we work on the understanding that they have discussed the initial referral with you and you agree with it being made, and once it is received by us similarly, that we are providing you with a healthcare service.   

4. What information of mine do you use? 

We use the following: Personal Data; First & Last Name, Date of Birth, Phone Number, NHS Number, Birth Sex, Gender Identity, Email Address, Home Address and GP Surgery. 

We use the following Special Category Data: Racial/Ethnic Origin, Religious Beliefs, First Language, Physical and Mental Health, Disability, Sexual Orientation, Marital Status, Accommodation and Employment Status.  

5. Do you share my information with anyone? 

If you opt for our digital service, we will share your information with our partners Second Nature. We also share outcomes data your GP Surgery and NHS England for contractual reporting purposes.  

6. Does any of my information get sent outside of the UK?  

No, we do not send your data outside the UK.  

7. How long do you keep my information? 

We retain your information for Eight years, in line with the NHS Records Management Code of Practice 2021.  

8. What about my rights under Data Protection law, how can I activate them? 

Under Data Protection law you have the right to:  

• Be informed how your data is used (which is what this notice is doing).  
• Access to your information.  
• Rectification of errors.  
• Erasure (in certain circumstances).  
• Restriction of processing (in certain circumstances)  
• Objection to processing.  

• Data Portability.  
• Understand whether profiling or automated decision-making is being used (see Section 9).  

If you would like to request or discuss any of these, please email our Data Protection Officer using the details at the end of this notice.  

9. Do you use any automated decision-making or profiling on my information? 

No 

10. What do I do if I am concerned about how you are using my information? 

If you are not satisfied with the outcome of our support, you may take your complaint to the Information Commissioner’s Office, which regulates Data Protection. Its address is ICO Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. It can be contacted by telephone on 0303 123 1113 or by email on icocasework@ico.org.uk  

In the first instance we would be grateful for the opportunity to respond to your concerns ourselves and hopefully sort out any issues for you. To help with this, please write to our Data Protection Officer at the following address oliver.langford@thrivetribe.org.uk