Privacy & Cookie Notice

North of England Commercial Procurement Collaborative – Data Protection Privacy Notice

The North of England Commercial Procurement Collaborative (“NOE CPC”) is part of Leeds and York Partnership NHS Foundation Trust. Leeds and York Partnership NHS Foundation Trust are the accountable Data Controller for data processed by the North of England Commercial Procurement Collaborative.

Contact addresses are as follows:

NOE CPC
Don Valley House
Saville Street East
Sheffield S4 7UQ

Head Office
2150 Thorpe Park
Century Way
Leeds LS15 8ZB

Data Protection Officer
St Marys House, North Wing
St Martins View
Leeds LS7 3LA

If you are a member or contract with NOE CPC

NOE CPC will collect, store and process information relating to the management of your membership or contract with NOE CPC. Your contract with NOE CPC will form the legal basis for this data processing, with the processing of your data essential to the management of your membership and contract with NOE CPC.

Other contacts

NOE CPC will collect, store and process information relating to the management of your contact with NOE CPC. Your consent to the processing of information relating to the nature of your contact with us will form the legal basis for this data processing.

Data processed will include personal information relating to appropriate contacts within member organisations and non-member contacts, and will include names, job titles and appropriate work addresses & contact information.

Marketing

For organisations who contract with NOE CPC as members, or who otherwise contract with us, we will only use the information we record to manage your contract with us. Use of member or non-member information for marketing purposes will only be undertaken with your explicit consent.

Your rights and our promises to you

We will not use or share your information further than described above unless required to do so by law.

We will not process your personal data outside the European Economic Area.

We will retain and subsequently securely dispose of your information when no longer required, in accordance with the requirements of the Records Management Code of Practice for Health & Social Care 2016. This will typically be for either the lifetime of any contract plus the observance of additional retention aligned to financial / accounting regulations; or in the case of marketing contacts until you tell us you no longer wish to be contacted.

You have a right to request a copy of any and all the records NOE CPC holds that are about you, which we will provide to you within 30 days of receiving your written request.

Where we process your information on a consent basis for marketing purposes, you have the right to withdraw this consent and to exercise your right to be forgotten at any time you wish by simply letting us know.

We will correct any factual errors within your records.

We will process personal information according to the Data Protection Act (2018), the EU General Data Protection Regulation, and the Privacy & Electronic Communications Regulations at all times.

You have a statutory right to raise a complaint with the Information Commissioner’s Office if you feel we have failed to honour your rights under Data Protection legislation.