Privacy Notice
Analytics
Kensa Health Analytics are committed to safeguarding and preserving the privacy of our visitors, staff and clients. We never give your details to third parties to use for marketing or sales activity.
This notice explains Kensa Health Analytics’ privacy policy and what happens to any personal data provided to us, or that we collect from you whilst you visit our site and how we use cookies on this website.
This policy was last updated on 12th January 2026. Kensa Health Analytics update this Policy from time to time so please do review this Policy regularly.
SCOPE
This privacy notice covers the operations of:
Kensa Health Analytics Ltd
And the following wholly owned subsidiaries
Lightfoot Systems Ltd
REGISTRATION
Kensa Health Analytics Ltd is registered with the Information Commissioners Office in England. The registration certificates are below:
Registration Certificate for Kensa Health Analytics Ltd
INTERNAL SHARING OF DATA
Kensa Health Analytics shares data between its subsidiaries named above as required for operational purposes, based on the lawful basis of contractual necessity under Article 6(1)(b) of the GDPR to fulfil obligations and ensure seamless operations.
Kensa Health Analytics Ltd may share employee personal data with its parent company, Kensa Health Holdings Ltd, for the purposes of group-level HR administration, payroll, and related employment functions. This processing is carried out under the lawful basis of contractual necessity (Article 6(1)(b) UK GDPR) and, where appropriate, legitimate interest (Article 6(1)(f)), to ensure the effective and compliant management of staff-related obligations across the group.
DISCLOSING YOUR INFORMATION
Kensa Health Analytics Ltd will not disclose your personal information to any other party other than in accordance with this Privacy Policy and in the circumstances detailed below:
- In the event that we sell any or all of our business to a buyer.
- Where we are required by law to disclose your personal information.
- To further fraud protection and reduce the risk of fraud.
KENSA HEALTH ANALYTICS LTD DATA PROCESSING OPERATIONS
Kensa Health Analytics Ltd acts as a data processor processing data following instructions as specified by Kensa Health Analytics Ltd.’s clients who are the data controller. For concerns regarding data processed by Kensa Health Analytics Ltd on behalf of other organisations please contact the relevant organisation directly. Please note Kensa Health Analytics Ltd cannot deal directly with subject access requests and freedom of information requests related to data they process on behalf of other data controllers.
NHS HEALTH DATA
Kensa Health Analytics Ltd hold a database of personal data in the form of pseudonymised Health Episode Statistics. This is provided by NHS England - Digital who in turn obtain the data from NHS hospital trusts. This is in a form where identifiable data has been removed – and individuals cannot be readily or easily identified. This is retained under a data sharing agreement with NHS England - Digital – and will be destroyed on termination of this agreement.
This data is used to provide NHS bodies and Academic Health Science Networks with analytics to assist with improving health systems and patient outcomes. The Kensa Health Analytics HES Group oversees the governance for approving and on-boarding new clients. This group is accountable for ensuring new client’s requirements comply with the Health and Social Care Act 2012 as amended by the Care Act 2014.
The data is processed on the basis of legitimate interest under Article 6(1)(f) of the GDPR, as patients would reasonably expect information about hospital treatment to be used to improve care provided. The risks of using pseudonymised data are considered to be proportionate to the benefits – ultimately saving lives and reducing harm.
Kensa Health Analytics Ltd hold pseudonymised special category data for the purpose of statistical processing under Article 9 of the GDPR, specifically under subparagraph (2)(j), which permits processing for statistical purposes in the public interest.
As we do not hold data which allows for the identification of the data subject, we are not able to – and have exemption under Article 11 from processing subject access requests.
NHS health data held by Kensa Health Analytics Ltd is not used for automated decision making (a decision made solely by automated means without any human involvement).
Please refer to the following information provided by the Information Commissioners Office for more details on your rights under the GDPR:
INTERNAL USE OF DATA
KENSA HEALTH ANALYTICS WEB SITE
In running and maintaining our website we may collect and process the following data about you:
- Information about your use of our site including details of your visits such as pages viewed and the resources that you access. Such information includes traffic data, location data and other communication data.
- Information provided voluntarily by you. For example, when you register for information.
- Information that you provide when you communicate with us by any means
USE OF COOKIES
Cookies provide information regarding the computer used by a visitor – and are used to remember preferences and settings. Kensa Health Analytics Ltd may also use cookies where appropriate to gather information about your computer in order to assist us in improving our website.
You can adjust the settings on your computer to decline any cookies if you wish. This can be done within the “settings” section of your computer. For more information, please read the advice at AboutCookies.org.
.webp)
