North of England
Commercial Procurement Collaborative

Privacy Notice

North of England Commercial Procurement Collaborative – Data Protection Privacy Notice

The North of England Commercial Procurement Collaborative (“NOE CPC”) is part of Leeds and York Partnership NHS Foundation Trust. Leeds and York Partnership NHS Foundation Trust are the accountable Data Controller for data processed by the North of England Commercial Procurement Collaborative.

Contact addresses are as follows:-

NOE CPC Head Office Data Protection Officer

Don Valley House,Saville Street East, Sheffield, S4 7UQ

2150 Thorpe Park, Century Way, Leeds, LS15 8ZB

St Marys House, North Wing, St Martins View, Leeds, LS7 3LA

If you are a member or contract with NOE CPC

NOE CPC will collect, store and process information relating to the management of your membership or contract with NOE CPC. Your contract with NOE CPC will form the legal basis for this data processing, with the processing of your data essential to the management of your membership and contract with NOE CPC.

Other contacts

NOE CPC will collect, store and process information relating to the management of your contact with NOE CPC. Your consent to the processing of information relating to the nature of your contact with us will form the legal basis for this data processing.

Data processed will include personal information relating to appropriate contacts within member organisations and non-member contacts, and will include names, job titles and appropriate work addresses & contact information.

Marketing

For organisations who contract with NOE CPC as members, or who otherwise contract with us, we will only use the information we record to manage your contract with us. Use of member or non-member information for marketing purposes will only be undertaken with your explicit consent.

Your rights and our promises to you

We will not use or share your information further than described above unless required to do so by law.

We will not process your personal data outside the European Economic Area.

We will retain and subsequently securely dispose of your information when no longer required, in accordance with the requirements of the Records Management Code of Practice for Health & Social Care 2016. This will typically be for either the lifetime of any contract plus the observance of additional retention aligned to financial/ accounting regulations; or in the case of marketing contacts until you tell us you no longer wish to be contacted.

You have a right to request a copy of any and all the records NOE CPC holds that are about you, which we will provide to you within 30 days of receiving your written request.

Where we process your information on a consent basis for marketing purposes, you have the right to withdraw this consent and to exercise your right to be forgotten at any time you wish by simply letting us know.

We will correct any factual errors within your records.

We will process personal information according to the Data Protection Act (2018), the EU General Data Protection Regulation, and the Privacy & Electronic Communications Regulations at all times.

You have a statutory right to raise a complaint with the Information Commissioner’s Office if you feel we have failed to honour your rights under Data Protection legislation.

Further information

If you would like to find out more about how we will use your data or would like to ask us a question about our Privacy Notice, send your enquiry to information@noecpc.nhs.uk