Privacy Policy
Lancashire and South Cumbria Provider Collaborative privacy notice for our Engagement Hub
This privacy notice tells you what to expect us to do with your personal information when you contact us or use our services.
Our contact details
Name: Lancashire and South Cumbria Provider Collaborative
Address: Sharoe Green Lane, Fulwood, Preston, PR2 9HT
General inquiries email address: lsc.providercollaborative@lthtr.nhs.uk
Website: https://lscprovidercollaborative.nhs.uk/
The Provider Collaborative is not a legal entity. It is made up of the five NHS Trusts in Lancashire and South Cumbria, in partnership with NHS Lancashire and South Cumbria Integrated Care Board. The NHS Trusts are:
- Blackpool Teaching Hospitals NHS Foundation Trust
- East Lancashire Hospitals NHS Trust
- Lancashire and South Cumbria NHS Foundation Trust
- Lancashire Teaching Hospitals NHS Foundation Trust
- University Hospitals of Morecambe Bay NHS Foundation Trust
The Engagement Hub is hosted by Lancashire Teaching Hospitals NHS Foundation Trust. This means that Lancashire Teaching Hospitals NHS Foundation Trust holds the contract with Granicus, the software developer, on behalf of the other partner NHS organisations in Lancashire and South Cumbria.
Data protection officer contact details
Each partner NHS organisation has a data protection officer who is responsible for monitoring our compliance with data protection requirements. You can contact them with queries or concerns relating to the use of your personal data through lsc.providercollaborative@lthtr.nhs.uk.
Controller contact details
While our Engagement Hub is hosted by Lancashire Teaching Hospitals NHS Foundation Trust, each partner NHS organisation is a data controller. A controller decides on why and how information is used and shared.
The controllers for each organisation can be contacted through lsc.providercollaborative@lthtr.nhs.uk.
How do we get information and why do we have it?
The personal information we collect is provided directly from you for one of the following reasons:
Profile information
We collect information from you when you register to use this site. This includes your name, organisation and work email address. This information is not shared with anyone beyond the two site administrators who maintain the site; these administrators are employed by the NHS in Lancashire and South Cumbria.
However, you may choose to engage with a specific page or sign up to receive specific information (eg a newsletter) in which case your name and email address will be processed by the person overseeing that page. Again, this person will be employed by the NHS in Lancashire and South Cumbria.
Engagement information
If you interact with the site, for example by contributing to discussion forums, your name and content will be visible to other site users when published. Granicus, the software developer, will also be able to view this content because they monitor the site 24/7 to make sure content is compliant with our moderation rules.
Usage information
We collect information about your usage of the site, such as pages visited, documents downloaded, etc. Qualitative and quantitative data is collated for reports; this is aggregated and anonymised.
How we use the information we collect
We collect this information to:
- analyse and interpret it to make sure the site meets your needs;
- communicate information to you about engagement opportunities, events, news and other initiatives; and
- respond to enquiries and engage with you.
What information do we collect?
Personal information
We currently collect and use the following personal information:
- your work email address required to access the site when you register; and
- other data you choose to give when taking part in the engagement opportunities available.
Who do we share information with?
We do not generally share personal information.
However, in some circumstances we are legally obliged to share information. This includes:
- when a court orders us to do so
- where a public inquiry requires the information
We will also share information if the public good outweighs your right to confidentiality. This could include:
- where a serious crime has been committed
- where there are serious risks to the public or staff
- to protect children or vulnerable adults
We may also process your information to de-identify it. These purposes will include to comply with the law and for public interest reasons.
Is information transferred outside the UK?
No. Our data is hosted in the UK.
What is our lawful basis for using information?
Personal information
Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing personal information is:
6(1)(e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.
How do we store your personal information?
Your information is securely stored for the time periods specified in the Records Management Code of Practice. We will then dispose of the information as recommended by the Records Management Code, for example by wiping hard drives to legal standards of destruction.
What are your data protection rights?
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information (known as a subject access request).
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at lsc.providercollaborative@lthtr.nhs.uk if you wish to make a request.
External links
The Engagement Hub may contain links to other websites. Those links are provided for convenience and may not remain current or be maintained. We are not responsible for the privacy practices of linked websites and we suggest you review the privacy policies of those websites before using them.
Security
While no online service is completely secure, we work very hard to protect information about you against unauthorised access, use, alteration, or destruction, and take all reasonable measures to do so.
How do I complain?
If you have any concerns about our use of your personal information, you can get in touch with us through lsc.providercollaborative@lthtr.nhs.uk.
Following this, if you are still unhappy with how we have used your data, you can then complain to the ICO.
The ICO’s address is:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
Date of last review
1 November 2023
Next scheduled review
Reviews are carried out annually.