Onward Together CIC (“Onward”) is a Community Interest Company which provides advice and support to individuals who have sustained serious injuries through trauma or non-traumatic illness or disease, their families and dependents. We work with NHS Trusts and carefully selected third parties to provide these services. Onward is owned and operated by Stewarts Law LLP (“Stewarts”).
Your privacy is important to us and we are committed to protecting it. This privacy notice explains how we use your personal data. This notice applies to anyone whose personal details we collect, including visitors to this website. This website is not intended for use by a child under the age of 13 years old.
Cookies and analytics
Onward uses standard “Cookies” when you use our website. Cookies are text files that identify your computer, enabling enable functionality and enhancing your experience when using our website. They are stored on the hard drive of your computer and erased when you navigate away from our website. We store Cookies which are essential to the operation of our website and also non-essential cookies which we need your consent to store. You can manage Cookies yourself at any time in your computer settings. If you change your settings your computer will remember these changes the next time you browse our website.
We use Google Analytics to understand how visitors engage with our website. Google Analytics provides us with anonymous information about how visitors use our website, including the number of visitors to the website and the length of time they have spent on the website. You can manage Google Analytics in your browser settings.
Our website may contain links to third party websites and digital platforms. We are not responsible for the content on third party websites and platforms.
What personal data do we collect and process?
- Personal identifiable information including your name, date of birth, postal address, telephone number and email address.
- IP address, browser type and operating system
- We may also collect the following special category personal data:
- Health data
- Diversity data
How do we collect your personal data?
We collect your personal data from you directly via our webform and any communications we have with you, including by email, telephone or video conferencing. We may also collect your personal data from third parties, for example from your next of kin or from the NHS Trust who has referred you to us. We may also collect your personal data from public sources.
If you are an individual whose personal data has been provided to us by someone who uses our services or any other third party, this privacy notice will also apply to you.
Purposes of processing and lawful basis
We use your personal data for the following purposes:
- To provide you with the information, support or services you have requested
- The operation of our legitimate interests or that of a third party
- Marketing communications
- To ensure network and information security
- Analysis of marketing and website interactivity
Under the UK General Data Protection Regulation (“UK GDPR”) we must have a lawful basis in order to process your personal data. We must also meet a condition to process special category personal data. The lawful bases that we rely on to process your personal data are:
a) Your consent. You may withdraw your consent at any time by contacting help@onward.org.uk or by using the contact form. If you withdraw your consent we may not be able to assist you further. A third party may be able to consent on your behalf in certain circumstances, such as your next of kin or an adult with parental responsibility for a child.
b) Our or your legitimate interest or that of a third party, such as an NHS Trust.
Where we are processing special category personal data the additional applicable condition is consent.
We do not subject your personal data to automated decision-making, including profiling.
Who do we share your data with?
We will share your personal data with Stewarts and with carefully selected third parties who provide the support services which you have requested. These may include but are not limited to: rehabilitation services; healthcare professionals and the NHS, including any Trust which has referred you to Onward or which has provided you with direct care; counselling services; legal and other advisers; institutions providing financial support and charities.
Third parties with whom we share your data may further process your personal data. You should refer to the third party’s privacy information which will explain how it collects and uses your personal data.
Except as stated above, we will not share your personal data with any other third party except if obliged to do so by law.
We will never sell your personal data to any third party.
How do we store your personal data and how long do we keep it for?
Your personal data is stored securely in electronic systems. We use IT systems provided by Stewarts to store and process your personal data. Your personal data will be stored within the UK. We will not transfer your personal data outside the UK unless we comply with the requirements under the UK GDPR to safeguard your personal data, before transferring your personal data.
We will retain your data for no longer than it is necessary to fulfil the purpose for which it was collected. We will normally retain your data for no longer than 10 years from the data of collection unless we are obliged by law to retain it for longer. After this time your personal data will be securely deleted or anonymised so that it is non-identifiable.
Your data rights
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification – It is important that the personal data we hold about you is accurate and up to date. If you think that the personal data we hold is incorrect, you have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
If you wish to make a request under any of the above, please contact us. We will usually respond to your request free of charge and within one month of receiving your request.
Data controller details
Onward is a data controller for the purposes of the Data Protection Act 2018 and the UK GDPR. Onward is registered with the Information Commissioner’s Office (ICO) under registration number ZB540959.
If you have any queries about this privacy notice or wish to make a complaint about our use of your personal data or about any data sharing arrangement with a third party, including the NHS Trust which has provided direct care or referred you to Onward, please email help@onward.org.uk or use the contact form to get in touch.
You also have the right to raise a complaint with the ICO who can be contacted by post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF or by telephone: 0303 123 1113 or via their website: https://www.ico.org.uk.