1. Who we are
Nemora Healthcare Solutions Ltd ("Nemora", "we", "us") is the data controller for personal data processed through NHS Performance Intelligence and this website. We are registered in England and Wales, company number 17097373, registered office 29 Fernwood, Runcorn, Cheshire, WA7 6UT. We are registered with the UK Information Commissioner's Office under registration number ZC107502.
Data protection contact: [email protected].
2. What this policy covers
- The NHS Performance Intelligence platform at nhs-intelligence.nemorahealthcaresolutions.com
- This marketing website, trial requests, and enquiries
This policy is separate from, and does not apply to, Nemora's other products (including Willow, our dementia care app), which are covered by their own privacy policy.
3. No patient data
NHS Performance Intelligence is built entirely on aggregate, organisation level statistics published by NHS England and other national bodies under the Open Government Licence. We do not hold, process, or access person identifiable or patient level data at any point. No data sharing agreement with your organisation is needed for the platform to work.
4. The personal data we process, and why
4.1 User accounts
What: name, work email, role or job title, organisation, sign in and usage records.
Why: to provide the licensed service, secure it, and support you.
Lawful basis: performance of a contract; legitimate interests in securing the service.
4.2 Trial requests and enquiries
What: name, organisation, role, work email, and anything you write in your message.
Why: to respond, arrange trials, and manage our commercial relationship.
Lawful basis: legitimate interests; steps taken prior to entering a contract.
4.3 Peer Exchange profiles (opt-in)
What: your name, role, organisation, region, the topics you offer help on or are seeking help with, your short bio, and messages you send through the Exchange.
Why: to match you with peers and enable connections you choose to make. Your profile is visible to other members only as you configure it, and your contact details are shared with another member only once you accept a connection request. You can hide yourself from the directory or delete your profile at any time.
Lawful basis: consent, which you can withdraw at any time.
4.4 Board and leadership names
What: names and job titles of NHS Trust board members and senior leaders, gathered from official public sources such as Trust websites, each recorded with its source and the date it was gathered.
Why: so users can see who leads each organisation. This is professional information about public facing roles, not private or sensitive data.
Lawful basis: legitimate interests. If you hold such a role and want your record corrected or removed, contact us and we will action it promptly.
4.5 Platform analytics and logs
What: aggregate feature usage statistics and server logs (IP address, browser type, timestamps).
Why: to keep the service secure, diagnose faults, and improve it.
Lawful basis: legitimate interests.
5. What we don't do
- We do not sell personal data.
- We do not use advertising or cross site tracking.
- We do not use your data to train third party AI or machine learning models.
6. Sharing
We share personal data only with: the service providers listed on our Subprocessors page (hosting and transactional email), bound by data protection terms; other Peer Exchange members, only as you choose; and where the law requires it. We do not otherwise share personal data with third parties.
7. International transfers
We host in the UK and EU where available. Where a service provider processes data outside the UK, we rely on UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
8. Retention
- User accounts: for the licence term, then deleted within 90 days of termination.
- Peer Exchange profiles: until you delete them or your account closes.
- Enquiries and trial requests: up to 24 months.
- Server logs: up to 12 months.
9. Your rights
Under UK GDPR you can ask us for access to, correction of, or deletion of your personal data; ask us to restrict or object to processing; withdraw consent (including leaving the Peer Exchange); and request a portable copy of your data. Email [email protected] and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk or by phoning 0303 123 1113.
10. Changes to this policy
We will post any changes on this page and, for material changes, notify account holders by email or an in-platform notice.