Share2Care Privacy Notice
Care Networx Ltd on behalf of NHS West Yorkshire Integrated Care Board
Last updated: 8th July 2026
Introduction
This privacy notice explains how personal information is collected, used, stored, and protected when using the Share2Care app and related services.
The Share2Care app is delivered and managed by Care Networx Ltd on behalf of NHS West Yorkshire Integrated Care Board to support unpaid carers (who may include family members and friends) across West Yorkshire.
The app may appear in the Apple App Store and Google Play Store as “Share2Care – WYICB”.
We are committed to protecting your privacy and handling your information in accordance with:
- The UK General Data Protection Regulation (UK GDPR)
- The Data Protection Act 2018
- NHS information governance standards
- Applicable NHS confidentiality requirements
Who We Are
Data Controller
For the purposes of data protection law, the data controller for the Share2Care service is:
NHS West Yorkshire Integrated Care Board
The Integrated Care Board have commissioned the development of the Share2Care app and have determined the overall purpose and means of processing personal information through the development of the app.
Data Processor / Delivery Partner
Care Networx Ltd
Care Networx Ltd acts as the technology and service delivery partner for the Share2Care app and processes personal information on behalf of NHS West Yorkshire Integrated Care Board. Care Networx uses Amazon Web Services in the UK, as a sub processor.
Humber Teaching NHS Foundation Trust
Humber Teaching NHS Foundation Trust processes data within Interweave for the Yorkshire and Humber Care Record which holds your Contingency Plan should you choose to share your plan to your NHS record.
What the Share2Care App Does
The Share2Care app is designed to support unpaid carers who are users of the App to:
- Invite other carers to the App to form a ‘Circle of Care’
- Use a document management system to upload and manage information relevant to the caring needs of the cared for individual
- Access and manage a shared calendar relating to activities for which the cared for person is the focus
- Communicate with members of the Circle of Care through an activity and chat section in relation to matters in direct connection to the care and continuity of care of the cared for person
- Build and share a Contingency Plan linked to NHS healthcare records where applicable to support the continuity of care for the cared for person, in the event of a health emergency affecting the unpaid carer
- Receive notifications and reminders relating to the care of the cared for person
- Improve coordination between health, care, and voluntary sector services
Information We Collect
Depending on how you use the service, we may collect and process the following information about you and the individual you care for.
Personal Information
This may include:
- Name
- Date of birth
- Address
- Email address
- Telephone number
- NHS number (where applicable)
- Emergency contact details
- Information about your caring role
- Demographic information
Health and Care Information
Where relevant to the unpaid care being provided, we may process any of the following information dependent on what you choose to record on the app:
- Health and wellbeing information
- Care needs
- Support requirements
- Assessment responses
- Hospital discharge information
- Text communication in the activity section relating to the person you care for
- Documents and files uploaded to the app to aid with administration support, such as Household bills, receipts
- Contingency planning information to support the continuity of care for the cared for person
Technical and Usage Information
To ensure the security, reliability and ongoing improvement of the application, we collect limited technical and usage information relating to your use of the app. This information is used solely for service operation, performance monitoring, troubleshooting, security, audit and service improvement. It is not used for advertising, marketing or behavioural profiling.
The information collected includes:
| Information collected | Purpose |
|---|---|
| Device type | To optimise the application across different devices and operating systems. |
| Browser type (where applicable, such as NHS Login) | To ensure compatibility and diagnose technical issues. |
| IP address | To help maintain security, investigate technical issues and protect against unauthorised access. |
| Application usage information | To understand how features are used and identify opportunities to improve the service. |
| System and application log files | To investigate errors, maintain service reliability and support security monitoring. |
| Essential cookies or authentication/session data (where applicable) | Required to support secure authentication through NHS Login and maintain your authenticated session. No advertising or marketing cookies are used. |
| Date and time of access | To support security auditing, troubleshooting and service reporting. |
How We Use Your Information
We use personal information only where it is necessary to provide the Share2Care service and where we have a lawful basis under UK data protection law.
We use your personal information to:
- Provide, operate and maintain the Share2Care service.
- Authenticate users securely through NHS Login.
- Store and retrieve the information that you choose to add to the app.
- Enable secure sharing of information with members of your Circle of Care where you have chosen to do so.
- Support the delivery of app features that you choose to use, such as contingency planning, document storage and care coordination.
- Monitor the security, availability and performance of the service.
- Investigate technical issues, respond to support requests and improve the reliability, accessibility and usability of the app.
- Meet our legal, regulatory and contractual obligations in delivering the service.
- Produce anonymised statistical reports to understand how the service is being used and to help improve the service. These reports do not identify individual users.
- Share information where required by law or where necessary to protect an individual from serious harm or to support safeguarding responsibilities.
We only process personal information where there is a lawful basis to do so under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Legal Basis for Processing
Under UK GDPR, the lawful bases we rely on include:
Within the Share2Care App
Processing of Carers Personal Data
- Article 6(1)(a) – the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
Processing of Cared for Individuals Personal Data
- Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest (public task) or in the exercise of official authority vested in the controller;
Legal Basis
- The Health and Care Act 2022
- National Health Service Act 2006 (as amended) Section 3A
- NHS Act 2006, Section 14Z42
Processing of Carers Special Category Personal Data
- Article 9(2)(a) – the data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 may not be lifted by the data subject;
Processing of Cared for Individuals Special Category Data
- Article 9(2)(h) – processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to contract with a health professional and subject to the conditions and safeguards referred to in paragraph 3;
- DPA 2018 Schedule 1, Part 1, Para 2 (Provision of health or social care)
Transfer to the Yorkshire and Humber Care Record
Processing of Carers Personal Data (including emergency carers)
- Article 6(1)(a) – the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
Processing of Cared for Individuals Personal Data
- Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest (public task) or in the exercise of official authority vested in the controller;
Legal Basis
- The Health and Care Act 2022
- National Health Service Act 2006 (as amended) Section 3A
- NHS Act 2006, Section 14Z42
Sharing Your Information
The Yorkshire and Humber Care Record is in place across a range of health and care organisations across West Yorkshire including:
- NHS organisations i.e. GP practice, hospitals, Yorkshire Ambulance Service
- Local authorities
- Community health services
- Voluntary and community sector organisations
- Social care providers
Your contingency plan that has been shared with Yorkshire and Humber Care Record will only be accessed by health and care individuals in an emergency situation relating to your care.
We do not pass on or sell your personal information to third parties.
Data Storage and Security
We take appropriate technical and organisational measures to protect your information.
These measures include:
- Secure hosting environment within the UK
- Encryption of data in transit and at rest
- Role-based access controls
- Multifactor authentication
- NHS-aligned security standards
- Monitoring and auditing
- Staff confidentiality and training requirements
The organisation that provides and supports this app acts as a data processor on our behalf. This means they do not access or use your personal data for their own purposes. They can only process your information in line with our instructions and under strict contractual controls. We have safeguards in place to ensure that the supplier cannot view, access or use your personal data unless this is necessary to maintain the service or where required by law.
How Long We Keep Information
We keep your information for up to 12 months. If you do not use the app for 12 months, we will contact you to ask whether you would like to keep your account or have it deleted.
If you sign in to the app again, the 12‑month period will restart from the date of your latest activity.
You can choose to delete your account at any time. When you delete your account or remove your profile, all personal information associated with your account will be permanently removed from the app database.
We will continue to process and store your personal information only while there is a valid contract in place to provide and support the app.
Your Rights
Under UK GDPR, you have a number of rights relating to your personal information, including the right to:
- Access your information
- Request correction of inaccurate information
- Request deletion in certain circumstances
- Restrict or object to processing
- Withdraw consent where consent is relied upon
- Request portability of your data (where applicable)
- Complain to the Information Commissioner’s Office (ICO)
To exercise your rights, please contact us using the details below.
Cookies and Analytics
The Share2Care app use essential cookies and analytics technologies to:
- Improve functionality
- Understand service usage
- Support accessibility and performance improvements
- Maintain security
There are no non-essential cookies used within the app.
Children and Young People
Where services are provided to young carers or individuals under 18, additional safeguards and protections may apply to ensure information is handled appropriately and lawfully.
Changes to This Privacy Notice
We may update this privacy notice from time to time to reflect changes in legislation, NHS requirements, or service delivery.
The latest version will always be available within the Share2Care app and via the Apple App Store and Google Play Store listing for “Share2Care – WYICB”.
Contact Details
NHS West Yorkshire Integrated Care Board
Website: Subject Access Request :: West Yorkshire Health & Care Partnership
Information Commissioner’s Office (ICO)
If you are unhappy with how your information has been handled, you can contact:
Information Commissioner’s Office
Website: ICO Website
Helpline: 0303 123 1113