Your Information and EnrichMyCare

Need urgent help?

EnrichMyCare is not an emergency service. If you or someone else is in immediate danger or needs urgent medical help, call 999 or go to A&E.

What is this?

This is a shorter and simpler version of our full Privacy Notice. It explains what information EnrichMyCare may hold about you, why it is used, who may see it, and what you can ask us to do.

You do not have to understand every legal word to ask questions about your information. If anything here is unclear, you can ask a parent, carer, someone in your care team, or contact us directly.

1. What is EnrichMyCare?

EnrichMyCare is a digital service that can help families, schools and healthcare professionals collect and organise information about a child or young person. It can be used by a family on its own, or as part of a school or NHS care pathway.

2. What information might we hold about you?

The information depends on how EnrichMyCare is being used. It may include:

• —your name, date of birth and other details used to identify you;
• —information about your health, development, appointments or care;
• —answers to questionnaires or diary entries;
• —information from your parent or carer, school or healthcare team;
• —photos, videos, voice notes or documents that are uploaded;
• —technical information needed to keep accounts and the service secure.

You are not expected to provide everything. When your family uses EnrichMyCare independently, your parent or carer chooses what information to add about you.

3. Who decides how your information is used?

This can be different depending on why EnrichMyCare is being used:

4. Who can see your information?

Only people who have a proper reason and the right access should see your information. Depending on how EnrichMyCare is being used, this may include your parent or carer, members of your healthcare team, or education staff supporting you.

A parent or carer can also choose to share a particular record with someone involved in your care or support. EnrichMyCare uses a secure, verified sharing process for this.

Important. A parent or carer cannot give someone access to the clinician dashboard or to clinician-facing AI tools. That access is set up separately for authorised professional users.

5. How does EnrichMyCare use AI?

When EnrichMyCare is being used in an NHS-linked care pathway, authorised healthcare professionals may use AI-assisted tools to help them organise information, prepare summaries and support parts of clinical triage.

EnrichMyCare may also provide personalised information or resources as part of a care pathway. These do not replace assessment or advice from your healthcare team.

AI does not make decisions about your care on its own. An authorised healthcare professional reviews AI-assisted information before it is used in clinical decision-making. These clinician-facing AI tools are not available to families using EnrichMyCare independently or to school staff.

6. What happens if your family account later becomes linked to NHS care?

Your family may start using EnrichMyCare on its own and later choose to share some of that information with an NHS service. Before this happens, your parent or carer is asked to authorise the sharing.

The NHS organisation then becomes responsible for the information it uses for your NHS care. Information your family keeps privately in the family part of the account can stay separate.

7. How long is information kept?

If your family uses EnrichMyCare independently and closes the account, or makes a valid request for deletion, information in the live service will normally be deleted within 30 days unless there is a lawful reason to keep some information for longer.

Deleted information may remain in secure automated backups for up to a further 7 days before those backups expire. Small legal or audit records may be kept for longer, for example to show which Terms were accepted or when information was shared.

If EnrichMyCare is being used as part of NHS or school care, the NHS organisation or school may have its own legal rules about how long records must be kept.

8. How do we help keep your information safe?

EnrichMyCare uses security controls to protect information. Core clinical data is hosted in Microsoft Azure UK South and is encrypted when it is stored and when it is sent. Access is limited according to a person’s role, and clinical and administrative accounts use multi-factor authentication.

9. What can you ask about your information?

Data protection law gives people rights over their personal information. Which rights apply can depend on why the information is being used and who is responsible for it.

Depending on your age, understanding and circumstances, you may be able to ask about or exercise these rights yourself, or you may do this with help from a parent, carer or another trusted adult. You can ask:

• —what information is held about you and why it is being used;
• —for information that is wrong to be corrected;
• —for information to be deleted in some circumstances;
• —for some uses of your information to stop or be limited;
• —for a copy of your information where the law gives you that right.

You can ask questions at any time. If an NHS organisation or school is responsible for the information, they may need to answer your request. EnrichMyCare can help point you to the right organisation.

10. Who can you contact?

You can talk to a parent or carer, someone in your healthcare or education team, or contact EnrichMyCare directly.

If you are unhappy with how your information has been handled, you can also contact the Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113.

This guide is a simpler explanation of the EnrichMyCare Privacy Notice. The full Privacy Notice is the main legal transparency document and is available on the EnrichMyCare website.