Toggle mobile menu visibility

Flourish Pledge privacy notice

What this document is for

This privacy notice provides details on how we, Norfolk County Council, use your personal information for the purposes of promoting Flourish.

By 'use' we mean the various ways your personal information may be processed including storing and sharing the information.

By 'you' and 'your', if you are a parent or guardian, where applicable we refer to your child(ren), information about them, and their rights.

Further details

We also provide the following details in our general privacy notice on our website:

  • Who we are
  • How long we use your information for
  • Your rights under the UK General Data Protection Regulation (the GDPR); and
  • How to exercise them 

You can also ask us for a copy of this information.

What we use your information for

We may use the information about you to:

  • Share your story on our website, to promote Flourish
  • Create promotional materials for Flourish, in the form of our newsletter, and in other documents used with different professional audiences and settings

We also use this information to assess the quality of our services and evaluate and improve our policies and procedures. We may also use information in other ways compatible with the above.

What personal data we collect and use about you

We will collect and use:

  • Photographs
  • Your story with the Flourish pledge (this includes any details you provide as part of this)

Who provides this information

We receive this information from members of the Flourish pledge, who have made a Flourish pledge, and / or aligned with the Flourishing in Norfolk strategy. This includes the Constabulary and City College. The organisation will discuss this with you and obtain your consent before sharing anything with us.

Who we share your information with

We will publish your story, along with relevant photos, on our website, and in our newsletter and other promotional materials.

Your personal information will also be shared to third parties contracted by the County Council to provide a service to the County Council. These service providers are known as data processors and have a legal obligation under GDPR and to the County Council to look after your personal information and only use it for providing that service. For example, Microsoft, who provides many of our IT solutions.

How the law protects you and the legal basis for processing your information

We process this information with your consent. You can withdraw consent at any time by emailing us at

How long will we keep your personal information for

Photographs will be kept for two years from the date we receive them. We will delete any photos at this point, or if you withdraw consent. This includes removing them from our website.

We will remove your story from our website the earliest of you withdrawing consent or two years after publishing.

If we need to use your information for research or reports, your information will be anonymised and any information taken from notes (handwritten or typed) during any consultation sessions will be securely destroyed. The information will continue to be used in a summarised and anonymised form in any research reports or papers that are published. The anonymised information in the papers may be of historic interest and may be held in public archives indefinitely.

How we keep your information

The information is stored electronically, on the County Council's network including records management systems.

We do not process your information outside of the UK and European Economic Area. However, please note that our website may be accessed from outside of the UK/EEA.

Automated decision making

We do not make automated decisions about you.

Changes to this notice

We may amend this privacy notice at any time so please review it frequently. The date below will be amended each time this notice is updated.  

This notice was created in December 2023.

Share this page

Facebook icon Twitter icon Email icon


Print icon