.png)
Follow us on
Last updated: June 2025
Next review: December 2025
Thiscovery is a secure online platform and service thatenables the health and care system to improve and innovate throughcollaboration. We're developed and run by THIS Labs, an independentorganisation formed as a strategic collaboration between THIS Institute (aresearch centre at the University of Cambridge) and The Health Foundation.
We use your information to connect you with health and careresearch and engagement opportunities that match your interests, run ourplatform and service securely, and facilitate the design and delivery ofprojects aimed at improving health and care.
You decide what information to share and can change yourmind at any time. You have comprehensive rights over your personal data.
We take appropriate technical and organisational measures toensure your information is kept secure, accurate and up to date. We store datain the UK/EU and never sell your information to anyone.
Contact our Data Protection Officer: DPO@thiscovery.org
Thiscovery is developed and run by THIS Labs, an independentorganisation formed as a strategic collaboration between THIS Institute (aresearch centre at the University of Cambridge) and The Health Foundation.
We have an expert Data Protection Officer who oversees allprivacy matters:
Email: DPO@thiscovery.org
Address: THIS Labs, c/o Regus, Chivers Way, Histon,Cambridge, CB24 9AD
Response time: We aim to respond within 2 working days
For urgent data protection concerns: Email DPO@thiscovery.org with "URGENT"in the subject line
Make a complaint: If you're not satisfied with our response,you can contact the Information Commissioner's Office (ICO). However, we'd appreciate the chance to addressyour concerns first.
What we collect:
Why we collect it:
Legal basis:
Legitimate interest (essential cookies) and your consent(all other cookies)
What information might be collected:
The specific information varies by project and is always clearlyexplained before you participate. Each project has its own detailed informationpage and confidentiality notice. Examples of information that might becollected include:
What we do with it:
Conduct the research or engagement project as described inthe project-specific information
Provide data and insights to research commissioners(typically NHS organisations, universities, healthcare charities or digitalhealth tech companies)
How your data is protected:
Legal basis:
This varies by project type and is always clearly stated inthe project information:
Public task: For NHS organisations, universities, andgovernment bodies conducting research within their statutory functions andpublic health remit
Legitimate interests: For research with clear publicbenefit where public task doesn't apply, or for commercial research withminimal privacy impact that serves broader health and care improvement
Consent: For sensitive research topics, when you havemeaningful choice about participation, or where other legal bases aren'tsuitable for the specific project context
The most appropriate legal basis is determined throughcareful assessment of each project's purpose, participants, and data types.This assessment is always documented and available upon request.
Quick guide to typical legal bases:
NHS/university health research → Usually public task
Low-risk platform improvement research → Usually legitimateinterests
Sensitive topics or children's research → Usually consent
Each project clearlyexplains which basis applies and why
More details will always be available:
Each project provides comprehensive information before youparticipate, including:
Research exemptions:
Some data subject rights may be limited for research data topreserve scientific integrity. Any limitations are always explained clearlybefore you participate, and you can choose not to take part if you're notcomfortable with these arrangements.
Additional information we collect:
What we do with it:
Legal basis:
Your consent for joining; then usually legitimate interestfor managing community discussions and platform security
Required information:
Name and email address (essential for your account)
Optional information (you choose what to share):
What we do with it:
What we don't do:
Legal basis:
Your consent
We occasionally conduct research about Thiscovery itself tohelp us improve our platform and services.
What we might collect:
Legal basis:
Your consent, which you can withdraw at any time
When organisations work with us:
What we collect:
Legal basis:
Contract and legal obligation
You have comprehensive rights over your personal data:
Response time:
We respond within 30 days (or explain if we need longer)
No charge:
Exercising your rights is free (unless requests are clearlyunreasonable)
Special Considerations for Research Data
Some rights may be limited for research data to preservescientific integrity and ensure valid results that can benefit health and care. However, we will:
Example limitations might include:
These limitations help ensure research results are reliableand can genuinely benefit health and care improvement.
Control what you hear from us:
Update your preferences:
We take appropriate technical and organisational measures to ensure that we keep your information secure, accurate and up to date, and that we only keep it as long as is reasonable and necessary.
Technical protections:
Organisational protections:
Compliance and certifications:
Important note:
Although we use appropriate security measures once we have received your personal information, the transmission of information when you submit it over the internet is never completely secure. We do our best to protect personal information, but we cannot guarantee the security of information transmitted to our website, so any transmission is at your own risk.
We keep your data only as long as necessary:
When retention periods expire, we securely delete or anonymise your data.
Data breach notification:
We work with trusted technology providers to deliver our services:
All partners have comprehensive data protection agreements and security measures.
When you participate in Thiscovery projects, we may share your data with:
Research projects data sharing:
When you participate in research projects, we may share your data with research commissioners in specific ways:
Pseudonymised sharing (most common):
Contact details (separate and only with your permission):
Anonymised sharing:
Important safeguards:
Primary storage: All your data is stored in the UK, Germany or other European Economic Area countries. This ensures your data remains within regions with equivalent data protection standards.
When we transfer data outside UK/EU:
Brexit arrangements: We have specific safeguards for UK-EU research collaborations
Transparency: We always tell you if your data will be processed outside the UK/EU
We take extra care with data from anyone under 18:
Enhanced consent:
Health data, ethnicity, and other sensitive information gets extra protection:
When we're the Data Controller (we make decisions about your data):
When we're a Data Processor (we process data on behalf of commissioning and collaborating organisations):
Why this matters to you:
We build privacy protection into every aspect of our platform from the ground up:
We go well beyond minimum legal compliance through our Enhanced Transparency Framework, which includes:
This enhanced approach means:
Regular reviews:
We review this policy every 6 months and when we make significant changes
Material changes:
We'll notify you of important updates and explain what they mean for you
Your feedback:
Tell us how we can make this policy clearer or more helpful
Got questions? We're here to help:
Response times:
Cookie Settings: Cookies Settings. You can also access cookie settings through the cookie preference centre that appears when you first visit our site, or by clicking the cookie settings link in our footer.
Terms of Service: Our terms and conditions
This privacy policy complies with UK GDPR and the Data Protection Act 2018. We are committed to transparency, fairness, and putting you in control of your personal data.
Last updated: June 2025
Next review: November 2025