Privacy Policy
The Respiratory Network
Last Updated: 28 January 2026
1. Introduction & Contact Details
The Respiratory Network (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, store and protect your personal data when you interact with our website (https://www.therespiratorynetwork.co.uk), attend our events, participate in our round tables or expert panels, or use our members’ community.
We are a UK-based organisation creating a shared space for Life Sciences professionals, healthcare professionals (including NHS leaders) and patients to come together to shape the future of respiratory care in the UK.
This Privacy Policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who is responsible for your data (data controller)
The Respiratory Network is the trading name of Healthcare Insight Solutions Ltd (Company No. 16979303), registered office 1 Grebe Close Bradwell NR31 8JT. Healthcare Insight Solutions Ltd is the data controller for the personal data described in this Privacy Policy.
How to contact us
- Organisation: The Respiratory Network (Healthcare Insight Solutions Ltd, Company No. 16979303)
- Website: https://www.therespiratorynetwork.co.uk
- Email:events@therespiratorynetwork.co.uk
- Postal address: 1 Grebe Close Bradwell NR31 8JT (registered office)
- Data Protection Officer : Kerri de Lange
If you have any questions about this Privacy Policy or want to exercise your data protection rights, please use the contact details above.
2. The types of personal data we collect
We collect and process different types of personal data depending on how you engage with The Respiratory Network (for example: as a healthcare professional, Life Sciences professional, patient participant/advocate, speaker, sponsor contact, event attendee or member).
2.1 Healthcare professional (HCP) and Life Sciences professional information
- Identity and professional details: name, title, job title, professional role, employer/organisation, department, NHS trust/ICB/region (where relevant), professional interests/areas of expertise.
- Contact details: work email address, work phone number, work address (where relevant).
- Participation details: invitations, registrations and attendance for round tables, expert panels and events; speaker/panel participation; responses and feedback; discussion contributions (including notes/minutes where applicable).
- Compliance and transparency details (where relevant): information needed to manage compliant engagement (for example, confirming professional status, recording transfers of value where applicable, and managing conflicts of interest).
2.2 Patient and public involvement (PPI) / patient involvement information
- Identity and contact details: name and contact details you choose to provide.
- Involvement details: participation in discussions, feedback, lived experience insights, and any preferences relevant to making involvement accessible (for example, accessibility requirements).
- Reimbursement/payment information (if applicable): details needed to process reimbursements or honoraria (for example, bank details) and related tax/record-keeping information.
2.3 Membership and community details
- Account/membership data: username/login details (if applicable), membership status, preferences, areas of interest, and community participation (posts/comments/messages where applicable).
- Communications data: enquiries and correspondence, survey responses, and preferences for receiving updates.
2.4 Website, device and cookies data
- Technical data: IP address, browser type and version, device type, operating system and time zone setting.
- Usage data: pages visited, links clicked and how you navigate the website.
- Cookie data: see Section 12 (Cookies).
2.5 Information we receive from others
We may receive personal data from:
- event registration platforms and event partners;
- organisations we collaborate with (for example, NHS organisations or Life Sciences companies) where appropriate and lawful;
- publicly available professional sources (for example, organisational websites or professional directories);
- professional networking platforms, where you have made your information available and/or where you have provided consent (as required).
3. How we get your personal data and why we have it (lawful bases)
3.1 How we collect your personal data
We collect personal data:
- directly from you (for example, when you register for an event, join our community, complete a form, or email us);
- from your organisation or event partners (for example, where a collaborating organisation puts you forward as a participant and it is appropriate and lawful to contact you);
- from public sources (for example, professional webpages or directories);
- automatically through your use of our website and cookies.
3.2 Why we use your personal data and our lawful bases
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on one or more of the following depending on the activity:
Legitimate interests (more detail)
Where we rely on legitimate interests, we consider and balance our interests against your rights and expectations. Our legitimate interests include running The Respiratory Network, facilitating compliant engagement across the UK respiratory landscape, improving our events and community, and maintaining appropriate records.
You can object to processing based on legitimate interests in some cases (see Section 9).
4. Special Category Data (including health-related insights)
Some information we process may be special category data under UK GDPR (for example, information about health) and needs extra protection.
We may process special category data when, for example:
- a patient participant or advocate shares lived experience relating to a respiratory condition (such as asthma or COPD);
- you provide accessibility or dietary requirements that reveal health information;
- we record respiratory health insights discussed during sessions (for example, themes or anonymised quotes), where those insights can be linked to an identifiable person.
How we handle it
- We limit what we collect to what is relevant and necessary.
- We use access controls and confidentiality obligations.
- Where possible, we use anonymised or aggregated insights so individuals are not identified.
- We only share identifiable special category data where it is necessary and lawful.
Our lawful basis for special category data
We will generally rely on explicit consent to process health-related special category data (UK GDPR Article 9(2)(a)). Where different conditions apply for a specific activity, we will explain this to you at the point of collection.
You can withdraw your explicit consent at any time by contacting us. Withdrawal will not affect processing already carried out before you withdrew consent.
6. Sharing Your Personal Data
We may share your personal data with the following categories of recipients:
6.1 Service Providers
Third-party providers who assist us in delivering our services, including:
- Website hosting and IT service providers.
- Event management and registration platforms.
- Email marketing platforms.
- Analytics providers.
All service providers are contractually obligated to process your data only on our instructions and in compliance with UK data protection law.
6.2 Professional Partners
With your consent or where necessary to facilitate your participation, we may share relevant professional information with:
- Life Sciences companies participating in our events.
- NHS trusts and healthcare organisations.
- Other members of The Respiratory Network community.
6.3 Legal and Regulatory Disclosures
We may disclose your personal data where required by law, court order, or regulatory authority, or to protect our legal rights.
6.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the relevant third party, subject to continued compliance with this Privacy Policy.
7. International Transfers
Your personal data is primarily stored and processed within the United Kingdom. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including:
- Transfers to countries with an adequacy decision from the UK Secretary of State.
- Standard Contractual Clauses approved by the Information Commissioner’s Office (ICO).
- Other lawful transfer mechanisms under UK GDPR.
Please contact us if you require further information about the safeguards we use for international transfers.