Care Networx Ltd on behalf of NHS West Yorkshire Integrated Care Board
Last updated: 12 May 2026
Introduction
This privacy notice explains how personal information is collected, used, stored, and protected when using the Share2Care app and related services.
The Share2Care app is delivered and managed by Care Networx Ltd on behalf of NHS West Yorkshire Integrated Care Board to support unpaid carers, patients, and families across West Yorkshire.
The app may appear in the Apple App Store and Google Play Store as “Share2Care – WYICB”.
We are committed to protecting your privacy and handling your information in accordance with:
- The UK General Data Protection Regulation (UK GDPR)
- The Data Protection Act 2018
- NHS information governance standards
- Applicable NHS confidentiality requirements
Who We Are
Data Controller
For the purposes of data protection law, the main data controller for the Share2Care service is:
NHS West Yorkshire Integrated Care Board
The Integrated Care Board determines why and how your personal information is used for the delivery of health and care support services.
Data Processor / Delivery Partner
Care Networx Ltd
Care Networx Ltd acts as the technology and service delivery partner for the Share2Care app and processes information on behalf of NHS West Yorkshire Integrated Care Board.
What the Share2Care App Does
The Share2Care app is designed to support unpaid carers and individuals accessing health and care services by helping users to:
- Invite other carers to the app to form a Circle of Care
- Use a document management system to upload and manage information relevant to caring needs
- Access and manage a shared calendar
- Communicate with members of the Circle of Care through an activity and chat section
- Build and share a Contingency Plan linked to NHS healthcare records where applicable
- Receive notifications and reminders
- Improve coordination between health, care, and voluntary sector services
Information We Collect
Depending on how you use the service, we may collect and process the following information.
Personal Information
This may include:
- Name
- Date of birth
- Address
- Email address
- Telephone number
- NHS number (where applicable)
- Emergency contact details
- Information about your caring role
- Demographic information
- Accessibility or communication needs
Health and Care Information
Where relevant to the support being provided, we may process:
- Health and wellbeing information
- Care needs
- Support requirements
- Assessment responses
- Hospital discharge information
- Information relating to the person you care for
- Documents and files uploaded to the app
- Contingency planning information
- Notes entered by authorised support staff
NHS login
Please note that if you access our service using your NHS login details, the identity verification services are managed by NHS England. NHS England is the controller for any personal information you provided to NHS England to get an NHS login account and verify your identity, and uses that personal information solely for that single purpose. For this personal information, our role is a “processor” only and we must act under the instructions provided by NHS England (as the “controller”) when verifying your identity. To see NHS login’s Privacy Notice and Terms and Conditions, please click here. This restriction does not apply to the personal information you provide to us separately.
Technical and Usage Information
When using the app, we may automatically collect:
- Device type
- Browser type
- IP address
- App usage information
- Log files
- Cookies and analytics data
- Dates and times of access
How We Use Your Information
We use your information to:
- Deliver and manage the Share2Care service
- Enable Circle of Care collaboration and communication
- Support contingency planning and care coordination
- Store and manage uploaded documents and care-related information
- Enable referrals and signposting
- Improve user experience and accessibility
- Monitor service quality and performance
- Maintain system security and prevent misuse
- Meet NHS contractual and legal obligations
- Produce anonymised reporting and service insights
- Support safeguarding responsibilities where necessary
We only use personal information where there is a lawful basis to do so.
Legal Basis for Processing
Under UK GDPR, the lawful bases we rely on include:
- Article 6(1)(e) – Public task
- Article 6(1)(c) – Legal obligation
- Article 6(1)(a) – Consent (where applicable)
Where health or special category data is processed, additional conditions under Article 9 UK GDPR may apply, including:
- Article 9(2)(h) – Health or social care management
- Article 9(2)(g) – Substantial public interest
Consent and Third-Party Information
By using the Share2Care app and agreeing to this privacy notice, you confirm that:
- You have obtained appropriate consent from any third-party individuals whose personal information you add to the app, including within the Circle of Care, uploaded documents, shared communications, or digital contingency plans; or
- You are acting in the best interests of an individual who lacks the mental capacity to provide consent themselves, in accordance with applicable legal and safeguarding responsibilities.
You are responsible for ensuring that any information you upload, share, or manage within the Share2Care app is lawful, accurate, and appropriate to share.
Where required, users should ensure they have appropriate authority or permission before sharing information relating to another individual.
Sharing Your Information
Your information may be shared with organisations directly involved in your care or support where appropriate and lawful.
This may include:
- NHS organisations
- Local authorities
- GP practices
- Hospitals
- Community health services
- Voluntary and community sector organisations
- Social care providers
- Members of your authorised Circle of Care, where you have chosen to share information with them within the app.
- Authorised support staff working within the Share2Care programme
Information is only shared on a need-to-know basis and in line with NHS information governance requirements.
We do not sell your personal information to third parties.
AI and Automated Support
The Share2Care service may include AI-assisted functionality to help users:
- Navigate services
- Access information
- Receive guidance and signposting
- Complete forms or assessments more efficiently
AI features are designed to support — not replace — professional judgement, clinical advice, or safeguarding processes.
Where AI functionality is used, appropriate safeguards and human oversight are maintained.
Data Storage and Security
We take appropriate technical and organisational measures to protect your information.
These measures include:
- Secure hosting environments
- Encryption of data in transit and at rest
- Role-based access controls
- NHS-aligned security standards
- Monitoring and auditing
- Staff confidentiality and training requirements
Access to personal information is restricted to authorised individuals who require it for legitimate service purposes.
How Long We Keep Information
We only keep personal information for as long as necessary in line with:
- NHS Records Management Code of Practice
- Legal and contractual requirements
- Clinical and safeguarding obligations
Retention periods may vary depending on the type of information and the purpose for which it was collected.
Your Rights
Under UK GDPR, you have rights relating to your personal information, including the right to:
- Access your information
- Request correction of inaccurate information
- Request deletion in certain circumstances
- Restrict or object to processing
- Withdraw consent where consent is relied upon
- Request portability of your data (where applicable)
- Complain to the Information Commissioner’s Office (ICO)
To exercise your rights, please contact us using the details below.
Cookies and Analytics
The Share2Care app may use cookies and analytics technologies to:
- Improve functionality
- Understand service usage
- Support accessibility and performance improvements
- Maintain security
Where required, users will be provided with choices regarding non-essential cookies.
Children and Young People
Where services are provided to young carers or individuals under 18, additional safeguards and protections may apply to ensure information is handled appropriately and lawfully.
Changes to This Privacy Notice
We may update this privacy notice from time to time to reflect changes in legislation, NHS requirements, or service delivery.
The latest version will always be available within the Share2Care app and via the Apple App Store and Google Play Store listing for “Share2Care – WYICB”.
Contact Details
Share2Care Service Delivery Partner
Care Networx Ltd
Email: support@carenetworx.com
NHS West Yorkshire Integrated Care Board
Website: NHS West Yorkshire ICB
Information Commissioner’s Office (ICO)
If you are unhappy with how your information has been handled, you can contact:
Information Commissioner’s Office
Website: ICO Website
Helpline: 0303 123 1113