Privacy and cookies


Updated: 21 August 2023

Transformation Partners in Health and Care (TPHC) takes your privacy seriously. We are committed to protecting your personal information and being open and transparent about how it is used. This policy describes how and why we obtain, store and process data about you.

This privacy policy has been updated to meet the requirements of the General Data Protection Regulation (GDPR). We will update this privacy policy whenever we change the type of processing we carry out. Please regularly come back to this page and check this policy for any changes.

About TPHC

Transformation Partners in Health and Care delivers high-quality bespoke consultancy, programmes and projects from the neighbourhood to the national level, with an outstanding track record in achieving positive and tangible results for populations. We offer a unique blend of expertise, knowledge and experience, with our talented partnerships and consultancy teams working side-by-side as an integral part of London’s health and care system. You can contact our teams through the details on our ‘Contact’ page.

We form part of the Royal Free London NHS Foundation Trust. The Royal Free London is the controller for the information we hold about you under the United Kingdom General Data Protection Regulation (UK GDPR). Contact details for the Royal Free Data Protection Officer can be found on the Royal Free Privacy page.

How do we get information?

Most of the personal information we collect has been provided to us directly by you. You may give us your name and contact information or other personal data:

  • When you fill out a form on our website.
  • When you communicate with us directly, for example if you make an enquiry or a complaint.
  • When you subscribe to one of our e-newsletters.
  • When you engage with us on social media.
  • When you register for, and/or attend an event.
  • When you complete any surveys or feedback forms we send you, or on our website.
  • When you apply for a job with us.
  • If you work for us or with us.
  • If you enter into a contract with us, for example if you are one of our suppliers, or if we are one of your suppliers.
  • If you have made an information request.

We may also receive information about you from third parties, for example our service providers and suppliers, or from third parties who may have gathered your consent on our behalf, or from publically available sources, such as social media.

The lawful bases we use to process your information

We can only process your personal information if we have a lawful basis to do this.  The legal bases that TPHC relies upon to process your information are:


For example, this is the basis we use when you agree to us using your information to send you communications that you would be interested in by providing us with your name and email address.


For example, this is the basis we use when it is necessary for us to take specific steps before entering into a contract with you to supply you with a service or vice versa.

Legal obligation: 

For example, this is the basis we use when it is necessary for us to comply with the law (not including contractual obligations) because we are required to keep documentation to produce in court proceedings

Public task: 

For example, this basis is used if we need to perform a task in the public interest such as responding to a parliamentary question.

Legitimate interests: 

This basis is used to allow us to hold information as evidence should we need it in the future, for example, if you ask us to unsubscribe you from one of our newsletters.

What personal data we may collect

  • Your name
  • Your contact details.
  • Your job role and your organisation.
  • Information from other publically available sources (such as social media).
  • If you apply for a job with us we will collect information about your employment history, qualifications and references.
  • If you work for us, we will collect and use additional personal information, such as health details and financial details.
  • If you fill in any questionnaires, surveys or feedback forms we will collect your experiences, opinions and any health information you are happy to share with us.
  • If you interact with our website we may collect certain technical information, such as your browsing activity across our website and your IP address. An IP address provides the location of the server you are contacting us from. We only use this information to:
    • Ensure website security
    • Undertake management reporting (based on country of access).
    • Information gathered by the use of cookies in your web browser. You can see our cookie policy further down this page (scroll down to see).

How we use your personal information

We use your information in the following ways:

  • For direct marketing purposes to send you notifications of publications, events and activities in connection with our aims and those that help improve the quality of healthcare provided to the public that we think you may be interested in.
  • If you apply for a job or work for us, your information will be used for recruitment and human resources processes.
  • Collecting your views, experiences and advice in surveys or feedback sessions helps us to improve the quality of the services we provide.
  • To respond to your queries and complaints. Using the information you send us enables us to respond. We may also keep a record of these to inform any future communication with you and to demonstrate how we have communicated with you.
  • To send you communications required by law or which are necessary to inform you about changes to the services we provide you. For example, updates to this privacy policy.
  • To comply with our contractual or legal obligations to share data with law enforcement. For example, when a court order is submitted to TPHC to share data with law enforcement agencies or a court of law.
  • Your personal data may be used to process and monitor your order should you buy something from us.
  • To send you survey and feedback requests to help improve our services.
  • TPHC tracks your interaction with the marketing emails we send you and your use of our website including (but not limited to) downloads and pages viewed to improve the relevance of the communications we send you.

Who we share your personal details with

Your personal data may be shared within TPHC and with our third-party suppliers where relevant.

For these third parties:

  • We provide only the information they need to perform their specific services, in relation to the purposes described above.
  • If we stop using their services, any of your data held by them to support that service will be deleted or rendered anonymous.

An example of a third-party provider is ActiveCampaign, our email distribution system which enables us to send email newsletters. This system requires your personal information in order to send you an email newsletter if you sign up to receive one. Only the information needed to perform this specific service will be shared, and should we stop using this service, any of your data will be deleted or rendered anonymous.

How long we will keep your information

For marketing purposes, we will only keep and use your information for as long as you wish us to. Your personal data will be held indefinitely until you notify us that you no longer wish for us to hold your information. We regularly update contact details with any changes. You can update your personal details at any time by clicking the ‘update your details’ link in any marketing emails we send you. Using this link will automatically update the personal details we hold for you.

For other personal information, we will retain it for no longer than is necessary.

You can unsubscribe from our emails at any time by clicking the ‘unsubscribe’ link, TPHC will then stop sending you marketing emails. Your email address will be added to a suppression list to ensure it cannot be accidentally added as a subscriber. You can request your subscriber details are deleted at any time by contacting TPHC via our contact us page.

How we protect your personal data

We know your personal information is important to you.  We are committed to keeping your information as secure as possible. We also use additional methods to secure sensitive information about your activities with us. Employees of the suppliers who manage this website on our behalf have to follow a strict confidentiality procedure and privacy standards.

Access to your personal data is password-protected and our IT suppliers regularly monitor our systems for possible vulnerabilities and attacks.

Your rights

You have the right to:

  • Access – To see the information we hold on you, and confirm what data we are processing about you.
  • Rectification – Ask us to correct any inaccurate, out-of-date or incomplete personal data.
  • Erasure – You can request that we erase the personal information we hold on you. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances.
  • Restriction of processing – You can request that we restrict or limit the way that we use your personal data.
  • Objection to processing – You can object to the processing of your information.
  • Data portability – You can request a copy of your information and, where possible, we will provide it to you in a machine-readable format such as .CSV file if you wish. We will do this free of charge and would include only the information you have provided directly to us.

You can ask for any of the above, in writing by emailing or by writing to us at our head office address: Transformation Partners in Health and Care, Royal Free London NHS Foundation Trust, Pond Street, London, NW3 2QG. We will make the requested changes within one calendar month. If we choose not to action your request we will explain to you the reasons for our refusal.

Data Protection Officer

As a public authority, the Royal Free London (of which TPHC is a part) has an appointed Data Protection Officer (DPO). The DPO’s tasks are defined in law and are:

  • to inform and advise the trust and its employees about obligations to comply with the UK GDPR and other data protection laws;
  • to monitor the trust’s compliance with the UK GDPR and other data protection laws, and data protection policies, including managing internal data protection activities; raising awareness of data protection issues, training staff and conducting internal audits;
  • to advise on, and monitor data protection impact assessments;
  • to cooperate with the ICO; and
  • to be the first point of contact for the ICO and for individuals whose data is processed (employees, patients etc).

You can find the contact details for the Data Protection Officer and Information Governance Team on the Royal Free Privacy page.

If you are not happy with how your data is being handled

If you feel that your personal data has not been handled correctly, please contact us online or in writing in the first instance, so that we can do our best to correct this. If you are still unhappy with our response you have the right to complain to the Information Commissioner’s Office (ICO).

Visit the ICO website for information on how to make a data protection complaint and the most relevant contact details to do this with.

Freedom of Information Act (FOI) requests

Information related to the Royal Free London (of which TPHC is a part) duties as part of the FOI Act, and contact details for further information can be found on the Royal Free Freedom of Information Act requests page.

External links

This website contains links to other websites that are not controlled by us, including social media channels on which we have profiles. Where we provide links to such websites this privacy notice does not cover how that organisation processes personal information. We encourage you to read the privacy notices on the other websites you visit.


Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. We may place and access certain cookies on your computer to improve your experience of using our website. All cookies used by our website are used in accordance with current UK and EU Cookie Law.

When you navigate to the website a cookie popup appears and asks you to select either ‘Accept all cookies’ or ‘Only accept necessary cookies’. It is your choice which to select. By selecting one of these options you are giving your consent to the placing of cookies and you are enabling TPHC to provide a better experience and service to you. You can access the cookie popup to change your cookie preference at any time by using the ‘C’ icon in the bottom left corner of the screen.

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set, visit or

Find out how to manage cookies on popular browsers:

To find information relating to other browsers, visit the browser developer’s website.

To opt out of being tracked by Google Analytics across all websites, visit

TPHC may place the following cookies

Strictly necessary cookies

These are cookies that are required for the operation of our website.

Analytical/performance and functionality cookies

These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily. Functionality cookies are used to recognise you when you return to our website. This enables us to personalise our content for you.

Targeting cookies

These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

Necessary cookies

These are cookies that are required for the operation of our website or email distribution system. The WordPress cookies only apply to staff who update the website.

Cookie preferencesCookieControlThis cookie is used to store a user’s choice about cookies on this site, specifically whether to allow Analytics cookies.
Active Campaignprism_*Active Campaign (email distribution) analytics
WordPress cookieswordpress_sec_*User’s WordPress login state
WordPress cookieswp-settings-time-*Logged in user settings
WordPress cookieswp-settings-*Logged in user settings
WordPress cookieswordpress_logged_in_*Check whether user is logged in to WordPress

Analytics cookies

These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily. The Google Analytics tracking is only active when a user opts in to analytics cookies.

Google Analytics_gaGoogle Universal Analytics cookie to identify unique visitors
Google Analytics_ga_9JM9VSTM9WGoogle Analytics cookie to store state.
Google Analytics_gatOptimises Google Analytics network requests
Google Analytics_gidStores and counts pageviews

Other third-party cookies

These are set by services and applications that are used on the site.

YoutubeYSCTo track the views of embedded videos
YoutubeVISITOR_INFO1_LIVETo cater for the player interface for the user
fonts.net__cf_bmTo distinguish between humans and bots for usage reporting (for custom font provider)
vimeo.com__cf_bmTo distinguish between humans and bots for usage reporting (for Vimeo, used for videos)