Privacy notice

How we use the information in your assessment

We ask for this information to understand your requirements and to carry out due diligence before we take on services for you. Some of it may also be shared with our parent company, City Health Care Partnership (CHCP), to support finance and workforce planning.

What we collect

• Your organisation's details, such as its name, address, size and sites.
• Names and contact details of the people you list, for example your main, technical and billing contacts.
• Information about your IT environment, suppliers, security arrangements and service requirements.
• Any documents you choose to upload, such as network diagrams, asset lists, policies or certificates.

How we use it

• Understanding your requirements: to design the right service, plan a smooth handover from your current arrangements, and set up support that fits how your organisation works.
• Due diligence: to assess risks, security and compliance before we take responsibility for your systems, so we can meet our own contractual, regulatory and insurance obligations as well as yours.
• Contacting you about your assessment and onboarding.

Sharing with our parent company

N3i is part of CHCP. Information you submit may be shared with CHCP to support:

• Finance: for example pricing, contracting, invoicing and financial planning for the services we provide to you.
• Workforce planning: making sure we have the right people and skills in place to deliver and support your services.

CHCP uses it only for these purposes and protects it to the same standard as we do.

Apart from CHCP, we do not use your answers for marketing, we do not sell them, and we only share them outside N3i with your agreement or where the law requires us to.

Our lawful basis

We process this information to take steps you have asked for before entering into a contract with you, and because we have a legitimate interest in carrying out due diligence before providing services. We share information with CHCP because of our legitimate interest in managing finance and workforce planning across our group.

How we protect it

• Your answers, contact details and uploaded documents are encrypted before they are stored.
• Only authorised N3i staff can view submitted assessments, and only relevant information is shared with CHCP.
• We keep an audit record of activity on your assessment, such as when answers are saved or changed, files are uploaded, and the IP address used, to protect your information and show what was submitted and when.
• Your assessment can only be opened with the private link we sent you. Please don't share it outside your organisation.

Please don't include

• Passwords or other credentials. We will arrange a secure handover separately.
• Patient, health or other sensitive personal information about individuals.

How long we keep it

We keep your assessment for as long as it is needed to complete onboarding and, if you become a customer, for the duration of our contract with you. After that it is securely deleted in line with our retention policy.

Your rights

Under UK data protection law, the people whose details are included can ask to see, correct or delete their information, or object to how it is used. To make a request or ask a question about this notice, contact your N3i account manager. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office.

Last updated 1 November 2026.