Unfortunately, our Thrive Tribe e-mail addresses aren’t secure (Like NHS Mail or a .gov e-mail) so we shouldn’t send client identifiable information (Like names) through our work e-mails. Where necessary, for example when communicating with a GP surgery, do use a Thrive Tribe owned NHS Mail account (Your service should have at least one). Or when messaging your internal colleagues about a specific client, use their Client/Player ID, or –where Client ID isn’t viable - service user initials and date of birth.

Don’t worry if you make a mistake, it’s better to be honest. If you realise you’ve sent an unencrypted spreadsheet with client names to an external contact, or that you’ve posted a number of client questionnaires to the wrong address, flag it internally as soon as you can. Follow agreed escalation processes, speak to your line manager and utilise [email protected].