This privacy notice was last updated on 01/10/2025.
Next review date: 01/10/2027.
This privacy notice tells you what to expect us to do with your personal information.
Contact details
What information we collect, use, and why
Lawful bases and data protection rights
Where we get personal information from
How long we keep information
Who we share information with
How to complain
Rise As We Are CIC,
34 Main Road,
Old Dalby,
Melton Mowbray,
Leicestershire,
LE14 3LR,
UK.
07986 005831
Please note that not all services and products provided by Rise As We Are CIC require disclosure and use of all information listed within this section. This list serves to cover all possible eventualities resulting from the varied and personal nature of our services, particularly those services involving health and lifestyle discussions such as mentoring, coaching and support, as well as open discussions that may arise within our online community groups, webinars and workshops.
We collect or use the following information to provide patient care, services, pharmaceutical products and other goods:
Name, address and contact details;
Gender;
Pronoun preferences;
Date of birth;
Next of Kin details including any support networks;
Health information (including medical conditions, allergies, medical requirements and medical history);
Information about care needs (including disabilities, home conditions, medication and dietary requirements and general care provisions);
Test results (including psychological evaluations, scans, bloods, x-rays, tissue tests and genetic tests);
Payment details (including card or bank information for transfers and direct debits);
Records of meetings and decisions;
Call recordings.
We also collect the following special category information to provide patient care, services, pharmaceutical products and other goods. This information is subject to additional protection due to its sensitive nature:
Racial or ethnic origin;
Religious or philosophical beliefs;
Health information;
Sex life information;
Sexual orientation information.
We collect or use the following information for safeguarding or public protection reasons:
Name, address and contact details;
Emergency contact details;
Health information (including medical conditions, allergies, medical requirements and medical history);
Information about care needs (including disabilities, home conditions, dietary requirements and general care provisions);
Test results (including psychological evaluations, scans, bloods, x-rays, tissue tests and genetic tests);
Records of meetings and decisions.
We also collect the following special category information to provide patient care, services, pharmaceutical products and other goods. This information is subject to additional protection due to its sensitive nature:
Racial or ethnic origin;
Religious or philosophical beliefs;
Health information;
Sex life information;
Sexual orientation information.
We collect or use the following personal information for patient app or portal functionality:
Name, address and contact details;
Gender;
Pronoun preferences;
Date of birth;
Health information;
Payment details (including card or bank information for transfers and direct debits);
Account information, including registration details;
Marketing preferences.
We also collect the following special category information for patient app or portal functionality. This information is subject to additional protection due to its sensitive nature:
Health information.
We collect or use the following personal information to comply with legal requirements:
Name;
Contact information;
Identification documents;
Financial information;
Any other personal information required to comply with legal obligations;
Right to work;
Tax information;
Safeguarding information;
Criminal offence data.
We also collect the following special category information to comply with legal requirements. This information is subject to additional protection due to its sensitive nature:
Health information.
We collect or use the following personal information for recruitment purposes:
Contact details (eg name, address, telephone number or personal email address);
Date of birth;
National Insurance number;
Copies of passports or other photo ID;
Employment history (eg job application, employment references or secondary employment);
Education history (eg qualifications);
Social media;
Right to work information;
Details of any criminal convictions (eg Disclosure Barring Service (DBS), Access NI or Disclosure Scotland checks).
We also collect the following special category information for recruitment purposes. This information is subject to additional protection due to its sensitive nature:
Trade union membership;
Health information.
We collect or use the following personal information for information updates, marketing or market research purposes:
Names and contact details;
Addresses (or locality of residence);
Gender;
Pronoun preferences;
Date of birth;
Marketing preferences;
Website and app user journey information;
IP addresses;
Personal information used for administration of the research;
Personal information used for the purpose of research;
Records of consent, where appropriate.
We also collect the following special category information for information updates, marketing or market research purposes. This information is subject to additional protection due to its sensitive nature:
Health information.
We collect or use the following personal information for dealing with queries, complaints or claims:
Names and contact details;
Addresses;
Account information;
Purchase or service history;
Customer or client accounts and records;
Financial transaction information;
Correspondence.
We also collect the following special category information for dealing with queries, complaints or claims. This information is subject to additional protection due to its sensitive nature:
Health information.
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.
Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.
Your right to erasure - You have the right to ask us to delete your personal information. Read more about the right to erasure.
Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.
Your right to object to processing - You have the right to object to the processing of your personal data. Read more about the right to object to processing.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.
Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
Our lawful bases for collecting or using personal information to provide patient care, services, pharmaceutical products and other goods are:
Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Legitimate interests - we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
Products and services provided by Rise As We Are CIC are typically accessed and delivered online for the convenience and cost benefits of our clients through our website, our community portal, video consultations, video webinars, and video workshops. As such, Rise As We Are CIC will request, use, and hold securely personal information as it relates to the access and delivery of our products and services;
The personal information we collect and use enables Rise As We Are CIC to provide a client, or prospective client, with information and access to our products and services, and enables us to deliver specific products and services to meet the particular needs of a client as identified in the personal information we hold on that client;
Where Rise As We Are CIC provides personal support services to a client, such as coaching and mentoring consultations for particular health conditions and/or disabilities, the nature of our services will require the client to provide additional personal information related to, but not limited to, various aspects of their health and lifestyle. This may include limited personal information relating to other people connected to our client, such as members of their family and household, their representative, their healthcare provider, their school or employer, and their acquaintances;
Access to such personal information enables the professional consultants working for Rise As We Are CIC to deliver and provide a professional standard of support to that client for the benefit of that client. Rise As We Are CIC will not request and hold personal information that is beyond the scope of the service being provided to our client, unless there is a legal or safeguarding reason to do so;
The client is, at all times, free to disclose or withhold any personal information they see fit whilst engaged in receiving coaching and mentoring support services from Rise As We Are CIC. All such personal information will be treated as highly confidential, and will be held securely and accessed only by the professional consultant(s) actively engaged with that client;
Rise As We Are CIC provide and deliver support services that can be accessed by more than one client at the same time, such as our online community chatroom, group webinars and group workshop events. Such services offer clients the opportunity to engage in open discussion of their health conditions and/or disabilities, and other matters relating to their personal lives. Disclosure of such personal information may result in its use by other persons as part of the discussion taking place. Clients can benefit from the social interaction, professional and peer support and guidance, and education provided by these services;
All clients are free to disclose or withhold any personal information they see fit whilst engaged in such group discussions. All clients will be under no obligation to engage in such discussions;
Clients using the community chatroom service will have their participation in all discussions archived and accessible to themselves and other members of the community. This enables all members of the community to benefit from any content that may serve to educate, guide and support their own particular needs;
Some events may be recorded for use by Rise As We Are CIC, and those recordings may be available to other clients and/or members of the Rise As We Are CIC community for education purposes. Rise As We Are CIC will endeavour to produce and edit any such recordings so that all personal information and identifiable information of attendees is removed before any broadcast of that recording is made available, unless prior consent has been agreed with those attendees who have participated in those recorded events.
For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.
Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.
Our lawful bases for collecting or using personal information for safeguarding or public protection reasons are:
Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
During the course of using one or more of the services provided by Rise As We Are CIC, clients will typically disclose their own personal information regarding health conditions, disabilities, lifestyle and life experiences. Disclosure of such information may be done privately with a professional consultant working for Rise As We Are CIC, or it may occur publicly within our membership-only community portal, a webinar event or a workshop event;
Where a client discloses personal information which indicates a potential or actual safeguarding issue occurring, Rise As We Are CIC will take appropriate action to use and process such personal information in accordance with our Safeguarding Policy;
Rise As We Are CIC will ensure that any discussion of any such safeguarding issue, whether potential or actual, is conducted in a private setting with that client, or where necessary, with that client’s representative;
Rise As We Are CIC will, in all cases, use that client’s personal information obtained from a safeguarding issue during the course of our own investigation, assessment and training undertaken strictly within the Rise As We Are CIC organisation. Such personal information will be held and stored securely by Rise As We Are CIC. We will maintain the client’s, and any other person’s, anonymity when using such information outside the scope of any legal safeguarding procedures.
For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.
Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.
Our lawful bases for collecting or using personal information for patient app or portal functionality are:
Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
Rise As We Are CIC provides an online community portal amongst our services offered to clients. The community is not accessible to the wider general public, and exists to serve only our neurodiverse clients and their parents, partners and caregivers. In order to gain access to join our community portal, we will request and process personal information for initial screening purposes to ensure that our community maintains a 'safe space’ for the benefit of all members;
Our use of personal information requested at the point of registration ensures that we can operate safe and separate online environments for neurodiverse young people and adults;
We use personal contact information to provide regular updates and information of services and events to members of the community. Rise As We Are CIC will also use such personal information for operational purposes to develop the community portal service to meet the needs of its members;
The Rise As We Are CIC community portal platform is operated by a third party that we have assessed as being a trusted and reputable provider of this platform. Clients are required to provide limited personal information to the third party at the point of registration for this service. Rise As We Are CIC will take all reasonable steps and precautions to ensure the protection of our clients interests. However, full responsibility rests with the third party to provide and maintain the security of the personal information that they hold on our clients;
Participation in any aspect of the Rise As We Are CIC community is at the discretion of the individual, and any person wishing to engage and interact with other members of the community is free to choose what personal information they publicly disclose or withhold. Rise As We Are CIC will always provide recommended safe practices for all members of the community to protect a person's personal information and/or anonymity. All members are free to use a pseudonym username as one method of enabling members of the community portal to discuss personal information about their health and lifestyle without disclosing any identifiable details about themselves;
Rise As We Are CIC will actively moderate the community chatroom and community events (such as online webinars and workshops), to ensure that all members and staff adhere to the rules of the community, and respect the personal information and anonymity of other members;
However, Rise As We Are CIC cannot offer any guarantees that any person participating in the online chatroom, webinar and workshop events will not record, copy and store any information published on the community portal for their own use;
In cases where a member of the community portal freely discloses certain personal health information about themselves in a chatroom, webinar or workshop setting, and we identify this information as being appropriate for offering additional support services to that person, Rise As We Are CIC may use that person’s personal contact information to communicate with that person privately;
Rise As We Are CIC will not disclose any personal information we hold about any member of the community portal, unless prior consent has been obtained from that person, and an agreement has been established as to the specific details to be shared with other members. Rise As We Are CIC will only engage in this particular activity if there is a reasonable belief that such information will provide benefit, in terms of support and guidance, to other members of the community portal, and/or the delivery of services and products to clients.
For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.
Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.
Our lawful bases for collecting or using personal information to comply with legal requirements are:
Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.
Our lawful bases for collecting or using personal information for recruitment purposes are:
Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
Rise As We Are CIC may hold personal information of individuals who are not employed by us or provide professional services to us, but who have voluntarily offered such information in good faith as prospective candidates for potential employment, or as prospective candidates for providing contracted consultation services with Rise As We Are CIC. In these cases, such personal information will be held and stored securely by Rise As We Are CIC for any potential recruitment or service requirements occurring at a future date.
For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.
Public task – we have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability.
Our lawful bases for collecting or using personal information for information updates, marketing or market research purposes are:
Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
Where Rise As We Are CIC uses personal information for information updates, marketing, and market research purposes, the personal information that we hold may be used to inform clients, and prospective clients, of the products and services that we provide, and enables us to develop our products and services to meet the particular health and lifestyle needs of our clients;
The access and use of a client’s, or prospective client’s, personal information limits the delivery of information and marketing communications to only that which we believe may be of importance, interest, and/or benefit to that person;
Where a client already uses one or more of our services, such as coaching or mentoring, workshop events, online learning, and/or membership of our community, Rise As We Are CIC will use that client's contact information to communicate directly with that client on matters relating to the service(s) that they receive, and to inform that client of other products and services which we offer which may be of benefit to that client’s particular needs;
Where a client has previously used one or more of our services, we may use that person’s contact information to market our services, products and events directly with that person;
Rise As We Are CIC may use any personal information we hold for organisational purposes for the betterment of our clients, such as the development of our range of products and services, the recruitment of professional consultants, and for the planning of events. In such cases, the information we use for these purposes will typically have a person’s identifying information omitted.
For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.
Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:
Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
When processing and handling queries, complaints or claims, Rise As We Are CIC will use relevant personal information for the purpose of processing that query, complaint or claim, and for undertaking communications directly with that person;
Where a person or a representative of an organisation contacts Rise As We Are CIC for the purpose of making a query relating to our organisation, our services, and/or our products, Rise As We Are CIC may use that person's or representative's name and contact information for the purpose of marketing our organisation, our services, and/or our products directly with that person or organisation;
Where a person contacts Rise As We Are CIC in respect of a complaint relating to our organisation, our services, and/or our products, that complaint will be handled and processed in accordance with our Complaints Policy;
In the case of claims, where the nature of the claim necessitates the services of a third party, such as our legal or insurance representatives, any relevant personal information obtained from that claim may be passed on to our representatives;
Rise As We Are CIC may use any personal information we obtain from queries, complaints and claims, for organisational purposes, such as the development of our range of products and services, the evaluation of our procedures, and for training purposes. In such cases, the information we use will typically have a person’s identifying information omitted;
Personal information obtained for the purpose of processing and handling of queries, complaints or claims will be held and stored securely with Rise As We Are CIC.
For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.
Directly from you;
Family members or carers;
Previous employers.
We will only retain your personal data for as long as it is needed for the purposes set out in this document, or for as long as the law requires us to.
We will:
Keep your name and email contact data until you unsubscribe from our marketing mailing list;
Keep your feedback data for two years;
Delete access log data which contain your IP address after 120 days;
Retain personal information in connection to community memberships for two years after your subscription has ended to facilitate membership renewal if required within that time;
Retain personal information in connection with clients receiving personal mentoring, coaching and/or support services, for up to five years after your service contract has concluded to facilitate recommencement of our services if required within that time;
Retain personal information in connection with recruitment purposes for two years for prospective candidates, and five years for contracted employees, volunteers and consultants;
Retain personal information in connection with any safeguarding issues for five years.
For more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above.
Others we share personal information with:
Other health providers (eg GPs and consultants);
Insurance companies, brokers and other intermediaries (in the case of claims and legal matters);
Care providers;
Organisations we need to share information with for safeguarding reasons;
Professional advisors;
Organisations we’re legally obliged to share personal information with;
Publicly on our website, social media or other marketing and information media (in the form of reviews, testimonials and case studies and with personal identifying information removed unless we have obtained written consent from that person).
We are subject to a common law duty of confidentiality. However, there are circumstances where we will share relevant health and care information. These are where:
You’ve provided us with your consent (we have taken it as implied to provide you with care, or you have given it explicitly for other uses);
We have a legal requirement (including court orders) to collect, share or use the data;
On a case-by-case basis, the public interest to collect, share and use the data overrides the public interest served by protecting the duty of confidentiality (for example sharing information with the police to support the detection or prevention of serious crime);
If in England or Wales – the requirements of The Health Service (Control of Patient Information) Regulations 2002 are satisfied; or
If in Scotland – we have the authority to share provided by the Chief Medical Officer for Scotland, the Chief Executive of NHS Scotland, the Public Benefit and Privacy Panel for Health and Social Care or other similar governance and scrutiny process.
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office,
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire,
SK9 5AF,
UK.
Helpline number: 0303 123 1113