Who we are
Beyond Thrive Ltd is a consultancy working with organisations across health, education and social care. We are registered in England and Wales, company number 16275445.
We are registered with the Information Commissioner's Office, registration reference ZB962728.
For anything relating to this policy or your personal data, contact admin@beyondthrive.co.uk.
Beyond Thrive Ltd is the data controller for information collected through this website.

What this policy covers
This policy covers information collected through beyondthrive.co.uk — the contact form, email enquiries, the Practice Capability Review, and the Stay Connected mailing list.
It does not cover information handled during consultancy, assessment or training work. That is governed by the separate agreement in place with the commissioning organisation, and by the relevant data sharing or processing arrangements.

What we collect, and when
When you use the contact form
Your name, email address, and whatever you choose to write in the message. If you include an organisation name or telephone number, we hold that too.
When you email us directly
Your email address and the content of your message, along with anything in attachments you send.
When you complete the Practice Capability Review
Your responses to the review questions, and the contact and organisation details you provide. This form is hosted using Google Forms, so responses are stored in Google's systems as well as our own.
When you join Stay Connected
Your email address, and your name if you provide one.
When you visit the site
Basic technical information collected automatically by Wix, our website platform — including pages visited, approximate location, and device or browser type. This is used to understand how the site is being used. It is not linked to anything that identifies you personally.
We do not collect special category data through this website, and you should not send information about identifiable individuals you support through the contact form. If you need to discuss a specific person, we will agree a secure route first.

How we use it
To reply to enquiries and arrange conversations
To provide feedback on Practice Capability Review responses
To send occasional updates to people who have joined Stay Connected
To understand how the website is being used, so it can be improved
We use Practice Capability Review responses in anonymised, aggregated form to understand patterns across the sector — for example, which organisational conditions are most often missing. Aggregated findings may be published or used in our own writing. Nothing published in this way identifies an individual, a service or an organisation.
We do not sell personal data, and we do not use it for advertising.

Lawful basis
Under UK GDPR, we rely on:
Legitimate interests — responding to enquiries, providing feedback on diagnostic responses, understanding how the site is used, and improving our work. We have considered whether this could override your interests, and limited what we collect accordingly.
Consent — for the Stay Connected mailing list. You can withdraw consent at any time, and every message includes an unsubscribe link.
Contract — where information is needed to agree or deliver work you have asked us to do.

Who we share it with
We use a small number of service providers who process data on our behalf:
Wix — website hosting, contact form, and contacts list
Google — Practice Capability Review form responses, and our email and document systems
These providers process data under their own agreements and are not permitted to use it for their own purposes.
We may share information where the law requires it, or where there is a safeguarding concern that means we must. Otherwise, we do not share your information with anyone.

How long we keep it
Enquiries — up to two years from last contact, then deleted
Practice Capability Review responses — identifiable responses for up to two years; anonymised, aggregated data is kept indefinitely
Stay Connected — until you unsubscribe, or until the list is no longer active
Website analytics — as retained by Wix under their own retention periods

Cookies
This site uses cookies that are necessary for it to work, and cookies set by Wix to provide basic visitor statistics.
We do not use advertising cookies, and we do not use third-party tracking or profiling tools.
You can block or delete cookies through your browser settings. Some parts of the site may not work properly if you do.

Your rights
Under UK data protection law you have the right to:
Ask what personal data we hold about you, and receive a copy
Ask us to correct anything inaccurate
Ask us to delete your data
Ask us to restrict how we use it
Object to us using it on the basis of legitimate interests
Withdraw consent, where consent is the basis we rely on
Ask for your data in a portable format
To exercise any of these, email admin@beyondthrive.co.uk. We will respond within one month.
If you are not satisfied with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113.

Changes to this policy
If this policy changes, the updated version will be published here with a new date. Material changes will be flagged to anyone on the Stay Connected list.

Contact
admin@beyondthrive.co.uk
Beyond Thrive Ltd · Company number 16275445 · ICO registration ZB962728

The personal information we collect might include your name, address, email address, IP address, and information regarding what pages are accessed and when. Any information provided regarding specific clinical situations is handled with strict confidentiality.