Privacy Policy

We recognise the trust you place in Global Health Partnerships (GHP, formerly THET — the Tropical Health and Education Trust, Charity Registration No. 1113101) when you share your personal information with us. We're committed to operating with openness, honesty and transparency. This policy explains how we look after the personal data of everyone who uses the GHP Learning Hub — staff, country partners, grantees, health workers, trustees and consultants — and tells you about your privacy rights and how the law protects you.

When you're invited to, or sign up for, the Learning Hub, we collect:

• Your name, email address and organisation
• Your role or user type (e.g. GHP staff, partner, grantee, health worker) and, where relevant, your job title, country office and cadre
• Demographic information you choose to provide, such as gender and country, used to help us understand and report on who our training reaches
• Your course enrolments, progress, quiz results and certificates
• Content you post in community groups, and your participation in discussions

Gender and country fields are optional wherever the platform offers "Prefer not to say" or a blank selection.

We use your data to:

• Give you access to training courses, track your progress and issue certificates
• Assign relevant courses to you based on your role and, for health workers, your cadre
• Run the community groups and resource library
• Maintain our own accounts, records and organisational processes, including reporting to donors and regulators
• Contact you about your account, invitations, or platform updates

The General Data Protection Regulation requires us to consider the legal basis on which we process personal data. We process your data where it's necessary to fulfil our relationship with you (for example, as your employer or as the organisation providing your training), and where it's in our legitimate interest to do so, as part of delivering and reporting on the programmes you've been invited to take part in.

GHP does not share your data with any other charity, public body or commercial organisation, unless we have to do so for legal or compliance reasons, or where it's more effective for a trusted third party to deliver a service on our behalf. We use two such providers to run the Learning Hub:

• Supabase — hosts our database and handles account authentication
• Resend — delivers transactional emails such as invitations and password resets

We will share your personal information with our colleagues within GHP globally, including in countries that don't have the same data protection laws as the UK — we take the same measures to protect your data wherever it's accessed. Aggregate reporting shared outside GHP is anonymised and doesn't identify individual learners.

We keep personal data only for as long as we consider necessary to carry out each processing activity, taking account of our legal, accounting and donor- reporting obligations, balanced against what's reasonable. In practice, that means your account and learning records for as long as you have access to the platform, and for a reasonable period afterwards to meet our audit obligations. You can ask us to delete your account at any time — see "Your rights" below.

We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, and against accidental loss, destruction or damage. Data is transmitted over encrypted connections, and administrative access to learner data is restricted to authorised GHP administrators.

GHP supports the principle of fair and transparent processing of your personal information, and your rights in relation to it under the General Data Protection Regulation, including the right to be informed, of access, to rectification, to erasure, to restrict processing, to data portability, to object, and rights related to automated decision-making. Most of this you can act on yourself from your Profile page; for anything else, contact us at the address below. You can also complain to the UK Information Commissioner's Office (ico.org.uk) if you believe we haven't handled your data properly.

We may update this policy to reflect changes to the platform or our practices. We'll update the date at the top of this page when we do.

If you have questions, comments, or feel the way we handle your information could be improved, contact us at learning@globalhealthpartnerships.org.