top of page

Privacy Policy

A legal disclaimer

JSP Wellbeing Hub is committed to protecting your privacy and handling your personal information fairly, lawfully, and transparently.

This privacy policy explains what information we collect through this website, how we use it, and your rights in relation to your personal data.

1. Who we are

JSP Wellbeing Hub
The Jubilee Street Practice
368-374 Commercial Road
London E1 0LS
Email: nelondonicb.jspwellbeing@nhs.net

For the purposes of data protection law, the organisation responsible for your personal data is:

[insert full legal name of organisation / data controller]

If your organisation has a Data Protection Officer or privacy contact, add:

Data Protection Contact: [insert name/team/email]

2. What information we collect

We may collect and process the following personal information:

  • Contact details, such as your name, email address, and phone number, if you provide them.

  • Newsletter information, such as your email address when you subscribe for updates.

  • Booking or enquiry details, if you contact us or book onto an activity, workshop, or wellbeing session.

  • Information you choose to share with us, including details in messages, forms, or feedback.

  • Technical information, such as IP address, browser type, device information, and how you use the site, where this is collected through cookies or analytics tools.

We ask that you do not send sensitive personal information through general website forms unless clearly requested and appropriate.

3. How we use your information

We use personal information to:

  • provide information about our activities, groups, workshops, and services;

  • manage bookings, enquiries, and attendance;

  • send newsletters or updates where you have asked to receive them;

  • improve the website, user experience, and communications;

  • keep appropriate records of enquiries and engagement;

  • meet legal, regulatory, safeguarding, or administrative responsibilities.

4. Lawful bases for using your information

Under UK data protection law, we rely on one or more of the following lawful bases:

  • Consent - for example, when you subscribe to a newsletter.

  • Legitimate interests - such as managing the website, responding to enquiries, and running community wellbeing activities effectively.

  • Legal obligation - where we are required to process information to comply with the law.

  • Public task - if the website and services are delivered as part of an NHS, healthcare, or publicly commissioned service.

  • Provision of health or social care - if relevant to any services offered and where applicable under data protection law.

The lawful basis that applies will depend on the nature of your interaction with us.

5. Special category data

Some information related to health, wellbeing, ethnicity, religion, disability, or other sensitive matters is treated as special category data under data protection law.

If we collect this type of information, we will only do so where there is a clear lawful basis and an additional condition under data protection law, such as explicit consent, provision of health or social care, substantial public interest, or another lawful condition that applies.

6. Newsletter subscriptions

If you sign up to receive news, updates, or community health information from us, we will use your email address to send those communications.

You can unsubscribe at any time by:

We will stop sending marketing-style updates when you withdraw your consent.

7. Bookings, forms, and enquiries

If you contact us or book an activity through the website or linked systems, we may use your information to:

  • respond to your enquiry;

  • manage your place on a session or event;

  • contact you about changes, cancellations, or practical arrangements;

  • monitor participation and improve services.

If bookings are handled by a third-party provider, their privacy terms may also apply.

8. Cookies and analytics

Our website may use cookies or similar technologies to help the site function properly and to understand how people use it.

These may include:

  • essential cookies required for the website to work;

  • analytics cookies to help us improve the site;

  • embedded content cookies if we use social media feeds, maps, videos, or similar services.

Where required by law, we will ask for your consent before using non-essential cookies.

You can control cookies through your browser settings and any cookie banner or preference tool made available on the site.

9. Sharing your information

We may share personal information with:

  • service providers who help us run the website or communications;

  • booking, email, form, or analytics platforms;

  • partner organisations involved in delivering wellbeing activities, where appropriate;

  • regulators, public bodies, or safeguarding authorities where required;

  • professional advisers or legal representatives where necessary.

We will only share information where there is a lawful reason to do so.

10. How long we keep your information

We keep personal information only for as long as necessary for the purpose it was collected, including to meet legal, safeguarding, operational, and record-keeping requirements.

Retention periods may vary depending on whether the information relates to:

  • a general enquiry;

  • a newsletter subscription;

  • participation in a programme or activity;

  • healthcare or wellbeing-related support;

  • complaints, incidents, or safeguarding matters.

Where no longer needed, information will be securely deleted or anonymised.

11. How we keep your information secure

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, or disclosure.

However, no internet-based service is completely secure, so while we take security seriously, we cannot guarantee absolute security of information transmitted online.

12. Your rights

Under UK data protection law, you may have the right to:

  • be informed about how your data is used;

  • request access to your personal data;

  • request correction of inaccurate or incomplete data;

  • request deletion of your data in some circumstances;

  • request restriction of processing in some circumstances;

  • object to certain types of processing;

  • withdraw consent where processing is based on consent;

  • request transfer of your data, where applicable.

Some rights are subject to legal exceptions.

To exercise your rights, contact us at [insert privacy contact email] or nelondonicb.jspwellbeing@nhs.net.

13. Complaints

If you are unhappy with how your personal data has been used, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO) in the UK.

Information about how to do this is available on the ICO website.

14. Third-party links

This website may contain links to third-party websites or services, including social media platforms or booking systems. We are not responsible for the privacy practices of other websites, and we encourage you to read their privacy policies.

15. Changes to this privacy policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

What I would add next

After the privacy page, these are the next most important pages to complete:

1. Accessibility Statement

Keep this short and practical. Include:

  • commitment to accessibility;

  • known issues, if any;

  • contact method for accessibility help;

  • browser/device compatibility note;

  • date of last review.

2. Terms & Conditions

This should cover:

  • website use;

  • information accuracy disclaimer;

  • external links;

  • acceptable use;

  • intellectual property;

  • limitation of liability;

  • booking-related terms if relevant.

3. Refund / Cancellation Policy

Especially useful if people can reserve sessions. Include:

  • whether activities are free or paid;

  • cancellation windows;

  • what happens if JSP cancels;

  • no-show rules;

  • how refunds are processed.

4. Cookie Policy

If your website platform uses tracking or cookie consent, this should explain:

  • what cookies are used;

  • whether analytics/marketing cookies are active;

  • how users can change preferences.

bottom of page