This Privacy Policy applies to anyone who engages with the Highland ND Hub, which is hosted by Thriving Families, by any means (website, Facebook, email, etc,). This notice was last updated on 17 November 2025.
Thriving Families is a Scottish Charitable Incorporated Organisation (registration number SC024835) and a charity registered in Scotland with the Information Commissioner’s Office (registration number Z5723609).
Thriving Families may make changes to this Privacy Policy at any time. Users should review the Privacy Policy each time they use the website to ensure their understanding of it is accurate at the point of use.
The Thriving Families Data Protection Officer is Sarah Fowler (Chief Executive). If you have any questions or concerns, please email or write to Sarah at: Thriving Families, The Pines, Drummond Road, Inverness IV2 4NZ.
What are the legislative requirements for data management?
The UK’s General Data Protection Regulation (UK GDPR) came into force in 2018 via the implementation of the Data Protection Act 2018 (the DPA). This legislation recognises that personal data is a valuable asset that deserves to be safeguarded and actively managed; it regulates and protects the processing of individual personal data, including the way it is used by third parties.
This means that, as the host of the Highland ND Hub, Thriving Families is legally required to protect the information entrusted to them. Thriving Families is committed to protecting the personal data that they collect and process, and to being transparent in how they do so. They are legally allowed to store this information due to their ‘legitimate interests’ to do so and because they are not harming the service user’s rights and interests. They will always seek consent to store information before doing so.
What are the rights guaranteed by legislation?
Right of access – the right to request access to personal data, to obtain confirmation that it is being processed, and to obtain certain information about how it is being processed.
Right of rectification (correction) – in certain circumstances, the right to ask for personal data to be corrected if it is inaccurate and completed if it is incomplete.
Right to be forgotten – in certain circumstances, the right to ask to have personal data erased.
Right to restriction of processing – if certain conditions apply, the right to restrict the processing of information, e.g. when the information is contested as being inaccurate.
Right of portability – in certain circumstances, the right to move, copy, or transfer personal data to another organisation.
Right to object – in certain circumstances, the right to object to certain types of processing of personal data when it is based on legitimate interests, when it is processed for direct marketing, or when it is processed for the purpose of statistics.
What information may be collected and why?
The Highland ND Hub will not collect, and therefore will not store, any personal information. As the host of the website, Thriving Families may have need to request, collect, or store personal information in order to best support those who contact them for assistance. Personal information may be collected to minimise the number of times information is shared and to allow for continuity of care; to achieve this, they may need to keep records about the information, advice, and support they have provided.
At the first point of contact, Thriving Families will request permission to use and store certain personal data, in line with their data protection policy, to allow them to provide relevant services. Thriving Families will not refuse support if someone denies consent for their data to be stored; however, denied consent will mean they are unable to retain details for future reference, which may limit the service they are able to provide.
As providers of a confidential service, the employees of Thriving Families do not discuss their Service Users with anyone out with their organisation without prior permission, unless there is a serious concern about the safety and wellbeing of a child or young person. When there is a concern about safety and wellbeing, we have a duty to follow the Highland Child Protection Guidance
For more detailed information about the information stored by Thriving Families, refer to their Privacy Policy.
Register of Mailing List Subscribers
Thriving Families, as host to the Highland ND Hub, is responsible for collecting and protecting the personal data of those who subscribe to the Highland ND Mailing list.
What information is collected and why?
Mailing List subscribers are asked to provide their name and email address to enable contact via email. This data will be processed on the basis of legitimate interest, which means Thriving Families will use the data to make contact with subscribers to provide requested services. They will also use this information to:
- Provide the requested services, products, or information;
- Relay related messages, resources, or services we deem of genuine interest;
- Distribute invitations to events; and,
- Ensure they know how subscribers prefer to be contacted.
Subscribers can unsubscribe at any time, and an option for doing so will be included in every communication.
How do is this information stored?
Thriving Families will gather personal data for the Highland ND Hub electronically, i.e., via requests to subscribe to the mailing list. It will be stored in digital formats; they have appropriate IT security mechanisms in place to protect electronic data.
The mailing list is managed via MailChimp; this enables Thriving Families to administer the mailing list efficiently and effectively, and to protect subscriber data. MailChimp is committed to GDPR compliance. Their privacy policy can be found at: https://mailchimp.com/legal/privacy/
Mailing list subscribers can unsubscribe at any time via MailChimp; all contact details will be immediately deleted.
How can subscribers access the information held about them?
All mailing list subscribers have the right to access the data that is held about them. This information is available to them by making a data access request via email to the Thriving Families Chief Executive, Sarah Fowler, who will then request some further details to ensure that the correct data is provided. Data access requests will be respond to within 14 working days (3 calendar weeks) from receipt.