Privacy notice

NHS London Procurement Partnership (NHS LPP) takes your privacy seriously. We are committed to protecting your personal information and being open and transparent about how it is used. This policy describes how and why we obtain, store and process data about you.

This privacy policy has been updated to meet the requirements of the UK’s General Data Protection Regulation (GDPR). We will update this privacy policy whenever we change the type of processing we carry out. Please regularly come back to this page and check this policy for any changes.

About NHS LPP

NHS LPP are hosted by the Guy's and St Thomas' NHS Foundation Trust (GSTT). 

NHS LPP is not a legal entity and, as it is hosted by Guy’s & St Thomas’ NHS Foundation Trust (GSTT), it is subject to the Data Governance and other policies of the Trust.

GSTT is the controller for the information we hold about you under GDPR.

How we get information

Most of the personal information we collect has been provided to us directly by you. You may give us your name and contact information or other personal data such as:

  • data relating to the management of your membership or contract with NHS LPP
  • if you communicate with us directly, for example, if you make an enquiry or a complaint
  • if you register for, and/or attend an event
  • if you complete any surveys or feedback forms we send you or on our website
  • if you apply for a job with us
  • if you work for us or with us

Personal data we may collect

  • Your name, contact details, job role and your organisation
  • If you fill in any questionnaires, surveys or feedback forms we will collect your experiences, opinions and any health information you are happy to share with us

If you interact with our website we may collect certain technical information, such as your browsing activity across our website and your IP address. An IP address provides the location of the server you are contacting us from. We only use this information to:

  • ensure website security
  • undertake management reporting (based on country of access).
  • information gathered by the use of cookies in your web browser. You can see our cookie policy for more information.

How we use your personal information

We use your information in the following ways:

  • for direct marketing purposes to send you notifications of publications and events in connection with our aim, frameworks and services we provide to our customers and members
  • to send you updates on agreement, supplier and contract information
  • to respond to your queries. Using the information you send us enables us to respond. We may keep a record of these to inform any future communication with you and to demonstrate how we have communicated with you
  • to send you communications required by law or which are necessary to inform you about changes to the services we provide you
  • to comply with our contractual or legal obligations to share data with law enforcement
  • to send you surveys to assess agreements, supplier performance, on-going procurement requirements, member satisfaction and event satisfaction
  • NHS LPP tracks your interaction with the marketing emails and newsletters we send you and your use of our website including (but not limited to) downloads and pages viewed to improve the relevance of the communications we send you

Any personal information provided for this purpose will be processed in accordance with the GDPR.   Please contact us if you wish to opt out of any NHS LPP marketing databases.

How long we will keep your information

For marketing purposes, we will only keep and use your information for as long as you wish us to. Your personal data will be held indefinitely until you notify us that you no longer wish for us to hold your information. We regularly update contact details with any changes.

For other personal information, we will retain it for no longer than is necessary.

How we protect your personal data

We know your personal information is important to you.  We are committed to keeping your information as secure as possible. We also use additional methods to secure sensitive information about your activities with us. Our employees and suppliers who manage this website on our behalf must follow a strict confidentiality procedure and privacy standards.

Access to your personal data is password-protected and our IT suppliers regularly monitor our systems for possible vulnerabilities and attacks.

Freedom of Information Act (FOI) requests

Information related to GSTT (of which NHS LPP is a part) duties as part of the FOI Act, and contact details for further information can be found on the GSTT Freedom of Information Act requests page.

External links

This website contains links to other websites that are not controlled by us, including social media channels on which we have profiles. Where we provide links to such websites this privacy notice does not cover how that organisation processes personal information. We encourage you to read the privacy notices on the other websites you visit.

Data Controller and Data Protection Officer

The Data Controller and the Data Protection Officer for NHS LPP are its host organisation, Guy’s & St Thomas’ NHS Foundation Trust.

Telephone: 0207 188 7188 ext. 54766

Email: askIG@gstt.nhs.uk