Privacy Policy for NHS Clinical Entrepreneur Programme

Who are we?

The NHS Clinical Entrepreneur Programme (NHS CEP) is an NHS England initiative delivered by Anglia Ruskin University. Anglia Ruskin University are the Data processors for the NHS England

This Privacy Notice is designed to help you understand how Anglia Ruskin University (ARU) (who are the delivery partners of the NHS Clinical Entrepreneur Programme) use personal information for the NHS CEP.

We have set out below the information we use, who we share it with, and how long we will keep it.

What personal information do we collect?

Wherever possible we use non-identifiable personal information.

You do not have to submit any personal information to use this website. ( This website only collects personal information that is specifically and voluntarily provided by you. Such information may consist of, but is not limited to:

  • Your name and email address, when completing our ‘contact us’ or newsletter forms

We may also store and maintain any content that you provide, including but not limited to postings on any blogs, forums and other social media applications that we may provide. 

Whenever you use this website, information may be collected using cookies and other technologies. By using this website, you agree to our use of Cookies.

Whenever we ask for your personal data, we will always make sure that it is necessary to identify you from the data we collect. If we do need to identify you, we will make sure that we only collect and use the minimum details we need for the specific purpose.

We receive your personal information when you: apply for the NHS Clinical Entrepreneur Programme via our portal

We will collect the following about applicants to the programme:

  • Personal contact details such as names, title, addresses, telephone numbers and personal email addresses.
  • Recruitment information (including where you work, your professional registration number, innovation ideas and other information included in a CV or cover letter or as part of the application process).
  • Equality information including your gender; nationality, marital status, ethnicity, religion, sexual orientation, and disability details.

How do we use your personal information?

We use your information for these purposes:

  • To enroll you on the programme
  • To gain access to specific content.
  • Attend a hosted event.
  • Respond to a survey.
  • Request communications/ information about specific areas of interest.
  • To sign up to our newsletter
  • To perform all tasks associated with the recruitment to the NHS Clinical Entrepreneur Programme including, but not limited to, applications, attendance monitoring, and alumni services.
  • To ensure that content is presented in the most effective manner for you and is cross platform and browser compatible.
  • To analyse the information, we collect so that we can administer, support and improve our services.
  • To provide you with information, products or services that you request from us or which we feel may interest you, where you have agreed to be contacted for such purposes.
  • To analyse the data, we collect so that we can administer, support and improve our services.
  • To notify you about changes to our service.

Who else might we share your personal information with?

Authorised personnel within Anglia Ruskin University (ARU), NHS England and Improvement and its partners will be able to access the personal data you provide to us.

For those who apply to the programme and are successful from Northern Ireland, we will share data with programme partners Health Innovation Research Alliance Northern Ireland and Invest Northern Ireland.

We may also disclose your data to other third parties who act for us for the purposes set out in the policy or for purposes approved by you.

Sometimes we may need to share your information, but we will only do so where it is necessary or required by law. We will only share the minimum personal information that we are required to.

We may also use Data Processors to support these activities, for example by providing the systems we need to or delivering services on our behalf.

All our third-party service providers are required to take appropriate security measures to protect your personal data in line with our ARU policies. We only permit a third-party service to process your personal data for specified purposes and in accordance with our instructions. We do not allow them to use your personal data for their own purposes.

Please note that countries outside the European Economic Area do not always have the same strong data protection laws. However, we will always take steps to ensure that your data is used by third parties in accordance with the terms of this Privacy Policy.

Unless required or permitted to do so by law, we will not otherwise share or distribute any of the personal data you provide to us without your agreement. We respect your personal data and will never sell it to third parties.

Your personal data will be held confidentially for as long as necessary to fulfil the purposes for which it was it collected, including for the purposes of satisfying any legal, or reporting requirements. 

The personal data you provide as part of the recruitment process will only be shared with those who need to see your application for administrative purposes, selection, statistical analysis and research. The data will be archived on system after a period of inactivity and anonymised equality data will only be available for statistical return

Who is the data controller for this processing?

The data controller is NHS England and Improvement. The Data Processors are Anglia Ruskin University (ARU) of Bishop Hall Lane, Chelmsford, Essex CM1 1SQ, who are the delivery partners for the NHS Clinical Entrepreneur Programme.

What is the legal basis for our use of your personal information?

A: Keeping in Touch

Specific PurposeLegal Basis
To allow us to hold your contact details so that we can communicate with you on matters where you have registered an interest in being informed about our activities.Processing is done with your consent which you may withdraw 

B: Events Broadcast and Recording

Specific PurposeLegal Basis
Supporting participation in and access to events and learning opportunities to a broader number of participants through live streaming the activityProcessing is necessary for: The delivery of inclusive learning services under our public task Supporting broad participation in partnership, networking and conference activities under our public task, or under contract (for commercial activity), or under our legitimate interests (where not commercial nor directly related to public task activity) Promoting significant events for the University to a broad audience under our legitimate interests
Supporting participation in and access to events and learning opportunities for a broader number of participants through recording the activityProcessing is necessary: The delivery of inclusive learning services under our public task Professional development and the development of learning resources under our public task Adding to our archival holdings recording significant events in the University’s history for posterity under our legitimate interest

Programme applications and when you become a clinical entrepreneur

Specific PurposeLegal Basis
Management of enquiries with prospective applicants and communication of information about our services, events, and activitiesNecessary for entering into an agreement of study
Correspondence with offer holders regarding the next steps in the application and enrolment processesNecessary for entering into an agreement of study with students
To direct mail and marketing and events agencies who may assist us in the administration of mailing to enquirers, applicants, Clinical Entrepreneurs and our alumni and the booking of events. Examples of such agencies include MailChimp, EventBriteProcessing is necessary for the legitimate purpose of communicating with students and offer holders about benefits, services, activities and events or agree to communicate such information to enquirers and applicants
Monitoring Clinical Entrepreneur attendance at events and pitstops the submission of assessment and engagement with course material available on software tools.Legitimate purpose of ensuring that students achieve success through full engagement with the programme. As well as analysing attendance data to help make informed decisions which can lead to improved student satisfaction, retention, and attainment
Contacting you to let you know about pitstops and events, update you on cancellations or changes to timetables and related arrangements.Legitimate purpose of providing access to our learning services.
To monitor our compliance with equalities legislationLegal obligation to comply with our obligations under the Equality Act 2010.
Where we process Special Category data for these purposes, we do so because it is necessary for: reasons of substantial public interest
Disclosure to external IT service providers delivering externally hosted IT services or products to us such as PLD Works (mentoring platform) Hivebrite (resource hub) Legitimate purpose of providing students with modern IT solutions and services to support their studies.

B: Surveys, Statistics, Mailing Lists

Specific PurposeLegal Basis
1. Contacting you for your opinions on current and future initiatives, our policies and facilitiesNecessary for our legitimate interests namely the improvement of our services.
2. Contacting you where you have requested to be kept informed about specific events, initiatives and special interestsUnder your consent which you can withdraw at any time.

We will only use your personal data for the purposes for which we collected it unless we reasonably consider that it is needed for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.

The information you provide will be treated confidentially.

How long will we keep your personal information?

Your personal data will be held confidentially for as long as necessary to fulfil the purposes for which it was it collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

If you apply to the programme and were unsuccessful your personal information is kept for 6 months, then deleted.

Your rights

The law gives you rights to control what personal information is used by us and how it is used by us.

You can obtain further information about these rights from the Information Commissioner’s Office.

You also have the right to lodge a complaint about our processing of your personal data with the Information Commissioner’s Office.

Information Commissioner’s Office

Post:                Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF



Telephone:    0303 123 1113 (local rate) or 01625 545745 (national rate)

Contact us

If you wish to exercise any of these rights, you can contact our Data Protection Officer.

Data Protection Officer


What cookies do we use and why? 

A cookie is a small text file that a website saves on your computer or mobile device when you visit the site. It enables the website to remember your actions and preferences (such as login, language, font size and other display preferences) over a period, so you don’t have to keep re-entering them whenever you come back to the site or browse from one page to another.  

You can find more detailed information about cookies and how they work at

We may use cookies to:  

  • Recognise when you return to the website: To show you relevant content or provide functionality you used before.  
  • Store information about your preferences: To present you with content which is relevant and of interest to you.  
  • Analyse our web traffic using an analytics package: The aggregated usage data tells how many people use our website and what pages they like to visit. This information is used to help us improve the website structure, content and functions. 

Cookies do not provide us access to your computer or any information about you, other than the data you choose to share with us.  

The tables below further explain which cookies the NHS Clinical Entrepreneur Programme website ( ) uses and why: 

External cookies 

Cookies Name Purpose Additional Information 
Google Analytics  These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. Overview of privacy at Google 
Twitter  A Twitter widget in the footer of some pages enables visitors to tweet about the page. Twitter privacy policy 

Google Analytics 

Google Analytics use traffic log cookies to gain information about the use that is made of pages on our website. We use the information from cookies to generate reports on the usage of our website. These reports help us to improve our website by tailoring it to the needs of users. 

How do I control the use of cookies? 

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can modify your browser setting to decline cookies. However, please note that this may affect how our website functions and may prevent you from taking full advantage of the site.  

If you are unsure how to do this, use your favourite search engine to look this up using the term ‘declining cookies’ with your browser name, or contact your local IT support for advice. 

You can opt-out of having your anonymised browsing activity within websites recorded by Google Analytics. You can learn more about Googles privacy policies and how to opt-out of their cookies by clicking here: 

Links to other websites 

Our website may contain links to other web sites which are outside our control and are not covered by this Privacy Policy. If you access other sites using the links provided, the operators of these sites may collect information from you which will be used by them in accordance with their privacy policy, which may differ from ours.

Information security 

We are committed to ensuring that your information is secure. We have in place reasonable commercial standards of technology and operational security to protect all information provided by visitors via this website from unauthorised access, disclosure, alteration, or destruction. 

Contacting Us

Please feel free to if you have any questions or concerns regarding your use of our website.