Privacy NOTICE

Your personal information and what we do with it.

1. Why do you collect my information?

One You Royal Borough of Kensington and Chelsea and One You Westminster are Adult Integrated Healthy Lifestyle Services provided by Thrive Tribe and commissioned by Kensington and Chelsea and Westminster Borough Council. We process your data to check that you are eligible for our service and contact you regarding our programmes. If you are enrolled in our service, we process your data for communication, interaction and to record your progress.

2. Who do you get my data from?

We use SMS, Email and Telephone to contact and communicate with you.

We get your information from:

  • Referral information via our various referral pathways (self-referral or from a healthcare /community professional).

  • GP surgeries we work in collaboration with.

  • During community events if you share data via our sign-up process.

3. How does data protection law allow you to use my data?

If you have referred yourself into our service, we would be using your data on the basis that you have initially given us consent to do so, and from there that we are providing you with a healthcare service, which by itself gives us a basis for using your data. If you have been referred by a healthcare professional, we work on the understanding that they have discussed the initial referral with you and you agreement with it being made, and once it is received by us similarly, that we are providing you with a healthcare service.

4. What information of mine do you use?

The personal data we use for you includes your name, date of birth, NHS number (if provided), address, your GP’s name and address, email address and phone number and your gender. We also use more sensitive data including your ethnicity, health data (physical and/or mental), any disability you may have and medications that you use. Personal data such as date of birth, postcode, and Body Mass Index, along with any disclosed health conditions all help us to determine if you are an eligible client for our service. When you do your weekly weigh-ins we store these so we can monitor programme activity and measure your progress for you. Your weight, postcode, ethnicity, disclosed mental or physical disability, gender, are stored to help us ensure we deliver inclusive programmes for the people and communities we serve.

5. Do you share my information with anyone?

We ask for your consent to share (your details and health outcomes) with GP Surgeries, Pharmacies and Public Health. For service users opting to use electronic cigarettes, we will share your information with our supplier, Evapo. 

6. Does any of my information get sent outside of the UK?

For online self-referrals questionaries, we utilise Typeform. Your information may on occasions be transferred to and processed outside of the UK. For marketing and communications purposes, we use software which processes data in the United States.

7. How long do you keep my information?

We keep your information in line with the NHS Records Management Code of Practice 2021. All of our telephone recordings will be stored for one year.

8. What about my rights under Data Protection law, how can I activate them?

Under Data Protection law you have the right to:

  • Be informed how your data is used (which is what this leaflet is doing).

  • Access to your information.

  • Rectification of errors.

  • Erasure (in certain circumstances).

  • Restriction of processing (in certain circumstances)

  • Objection to processing.

  • Data Portability.

  • Understand whether profiling or automated decision-making is being used (see Section 9).

    If you would like to request or discuss any of these, please contact our Data Asset Owner using the details at the end of this leaflet.

9. Do you use any automated decision-making or profiling on my information?

Yes. For clients attending our Weight Management Programmes we profile Body Mass Index. To enable us to deliver Health Checks we will profile Blood Glucose and Cholesterol Levels.

10. What do I do if I am concerned about how you are using my information?

In the first instance we would be grateful for the opportunity to respond to your concerns ourselves and hopefully sort out any issues for you. To help with this, please write to our Data Asset Owner at the following address:

Erin Kirby – Data Asset Owner

If you are not satisfied with the outcome of our support, you may take your complaint to the Information Commissioner’s Office, which regulates Data Protection. Its address is Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. It can be contacted by telephone on 0303 123 1113 or by email on


Last Reviewed by Data Protection Officer: July 2023