Last updated: 08.09.2026 - Version: 1.1
This notice explains what we do with your personal information when you use Together. We have tried to write it plainly. If anything is unclear, ask us and we will explain it properly.
Together is provided by Thrive Health and Wellness (Collaborative) Limited, trading as thriveologie. We are the data controller for the information described here.
Company number 12650294
Registered office Forest House Office, 3 to 5 Horndean Road, Bracknell, Berkshire, RG12 0XQ
ICO registration CSN1383137
Email hello@thriveologie.co.uk
Responsible for data protection Helen Jaggar, Chief Executive Officer
We handle your information in line with UK data protection law: the UK GDPR and the Data Protection Act 2018.
Together, on the web and through our iOS and Android apps. It covers your account, the community, live sessions, the Together assistant and the wellbeing questions.
When you join
You reach Together through an invitation link from your employer, landlord, building management or another organisation you are connected to.
Your name (required) - To set up your account, and so other members can recognise you
Your email address (required) - To create your account and contact you about Together
Your timezone (required) - So live session times show correctly for you
Your location (optional) - To understand roughly where our members are
Your age band (required) - To confirm you are 18 or over, and to understand who Together is reaching
Your gender (optional) - To understand who Together is reaching. Never shared with your employer or building
Your occupation (optional) - To help us develop content that fits the people using Together. Never shared with your employer or building
Your work context (optional) - As above
Why you have joined (required) - To help us point you towards useful content
Which pillars interest you (required) - To add you to the spaces you have chosen and shape what appears in your feed
About the pillars question. You are choosing which parts of Together you want to see. Picking Mind, Body, Nourish or Foundations adds you to those spaces. Skipping it puts you in all of them. You can change your spaces yourself at any time, and nothing you choose is fixed. It is a way of filtering a library, not a statement about your health.
When you use Together
What you post, comment and share in community spaces
Messages you send to other members, if you have turned messaging on
Conversations with the Together assistant
Live sessions you book and attend
Your answers to the wellbeing questions, if you choose to answer them
Broadly, what content you look at
Automatically
Basic device and browser information
Your IP address
Whether you have opened the app or an email
Push notification identifiers, if you use our apps with notifications on
From your organisation
Your employer or building gives us what we need to set up your access: your name, email address and which site you belong to.
This is the only part of Together where we handle information the law treats as especially sensitive, so it has its own section.
Together asks four questions used by the Office for National Statistics to measure wellbeing across the UK population. We ask them when you join and every few months afterwards.
Answering is entirely optional. You can use all of Together without ever answering them, and you can stop at any point. Nothing closes to you either way.
We need your permission, because your answers say something about how you are, and UK law treats that as health information. You give that permission by ticking the box in your profile. You can untick it whenever you like, and we will stop using your answers. It is the same tick, in the same place, so withdrawing is exactly as easy as giving.
Our lawful basis: your explicit consent, under Article 9(2)(a) of the UK GDPR.
We keep your answers linked to your account so you can come back and see your own picture over time. That is the point of them.
Your answers are kept to ourselves. Your building or your employer only ever sees combined averages for their own site, never individual responses, and never who has answered and who has not. We do not report at all on groups too small for that to stay anonymous. Section 7 sets out exactly where those limits sit.
Setting up and running your account - Name, email, sign up answers. Lawful basis: performance of our contract with you
Adding you to spaces and shaping your feed - Your pillar choices. Lawful basis: performance of our contract with you
Running the community - Posts, comments, messages, profile. Lawful basis: performance of our contract with you
Delivering live sessions - Bookings, attendance. Lawful basis: performance of our contract with you
The Together assistant - Your conversations with it. Lawful basis: performance of our contract with you
The wellbeing questions - Your answers. Lawful basis: your explicit consent
Telling your employer or building how their site is doing - Combined site figures. Lawful basis: our legitimate interest in running a service they can justify paying for
Improving Together and planning content - Occupation, work context, broad usage patterns, what people ask the assistant. Lawful basis: our legitimate interests
Keeping Together safe, and moderation - Posts, comments, reports. Lawful basis: our legitimate interests
Sending you emails about new content and events - Name, email. Lawful basis: your consent
Handling your requests and complaints - Whatever is relevant. Lawful basis: legal obligation
Where we rely on legitimate interests we have considered whether that is fair to you. Ask us and we will share that assessment.
Together is a community, so some of what you do is visible to other people.
Other members can see:
Your name and profile photo
Your profile in the member directory, unless you turn that off
Anything you post or comment in community spaces
Other members cannot see:
Your email address, unless you choose to make it visible
Your age, gender, occupation or work context
Your answers to the wellbeing questions
What content you look at
Your messages with anyone else
Your settings. By default your profile appears in the member directory and direct messages from other members are switched off. You can change both whenever you like.
A thought before you post. Members at your site may be colleagues or neighbours. Use the directory and messaging settings to suit how visible you want to be, and please read section 12 about what happens to your posts if you leave.
Your employer, landlord or building management pays for your access. They do not get to see what you do here.
What they receive:
How many people at their site have joined, and how many are actively using Together
Which broad pillars are most used across their site
How many people attended live sessions
A combined picture of how people at their site answered the wellbeing questions, shown as a range and compared with the national average
What they never receive:
Your name, or anything that identifies you
A list of who has joined
What content you have looked at
Your individual answers to any question
Anything you post, comment or message
Your age, gender, occupation or work context
The limits we apply. All reporting is combined at site level and nothing is ever broken down by age, gender, occupation or team.
We do not report on a group of fewer than 15 people who have taken part
We do not report at site level at all where fewer than 50 people at that site could take part
Where a site falls below either, we combine it with others or report nothing
We do this because below those numbers it starts to become possible to work out who said what, and that is not a risk we are willing to take with something you told us in confidence.
Live sessions are recorded and made available afterwards.
Only the speakers appear on camera and are heard in the recording
Members are not visible
Questions asked by members during the session are edited out, including questions typed in the session chat
We remind you at the start of each session that it is being recorded. If you would rather not take part in a recorded session, watch the recording afterwards instead.
Live sessions are delivered using Zoom Communications Inc., and we keep a record of which sessions you booked and attended.
Together includes an assistant that helps you find content. It is powered by OpenAI, through the Circle platform.
It answers only from content our experts have created for Together. If it cannot find an answer here, it will tell you so rather than guess.
Please read this before you use it:
Your conversations with the assistant can be read by our team. We may step in if it looks like you would rather talk to a person
We use what people ask to work out what content to make next. That means looking at patterns across many conversations, not at you individually
It is not a counsellor, a clinician or a crisis service
We are a small team and the assistant is not monitored around the clock. Our monitoring hours are Monday to Friday, 10am-4pm.
Because our team can read these conversations, please treat them as you would an email to us rather than a private diary.
Model training. Circle states that community data is not used by Circle or by OpenAI to train or improve any AI models, and that no data is stored, retained or logged by OpenAI beyond generating the answer you asked for.
We use other organisations to run Together. They can only use your information to do the job we have given them.
The platform and its suppliers
CircleCo, Inc. (USA) - The platform Together runs on: hosting, community, apps and the assistant
Amazon Web Services (USA) - Cloud computing, storage and infrastructure
Google Cloud (USA) - Additional cloud hosting and infrastructure
Cloudflare, Inc. (USA) - Content delivery, performance and security
OpenAI, LLC (USA) - Powers the Together assistant
Mailgun Technologies, Inc. (USA) - Sending member emails
Twilio SendGrid, Inc. (USA) - Sending account emails such as verifications and notifications
Zoom Communications Inc. (USA) - Live video and audio for events and sessions
Circle keeps the current list of its suppliers at circle.so/dpa. We check it when they notify us of a change.
Our app stores
Apple Inc. (USA) - Distributing our iOS app and delivering push notifications
Google LLC (USA) - Distributing our Android app and delivering push notifications
Apple and Google are our own arrangements as the publisher of the apps, rather than Circle's. They handle only what is needed to distribute the app and deliver notifications. Their own privacy policies explain what they do with it.
Other sharing
We may also share information where the law requires it, or to protect someone's safety.
We never sell your information, and we never share it for anyone else's marketing.
All of the organisations above process information in the United States.
The UK considers the United States to have different data protection rules from ours, so we cannot simply send your information there. Instead, it is protected by a specific legal agreement.
Circle's Data Processing Addendum uses Standard Contractual Clauses together with the UK Addendum issued by the Information Commissioner (the international data transfer addendum to the European Commission's standard contractual clauses, version B.1.0). This applies to Circle and to all of its suppliers listed above.
Apple and Google are covered by the data protection terms in our developer agreements with them.
In practice this means that whoever is holding your information, and wherever they are, they are contractually required to protect it to the standard UK law expects, and you keep your rights over it.
Records we were given but you never activated - 90 days, then deleted
Account and profile information - While you are a member, then 30 days
Your sign up answers - While you are a member, then 30 days
Wellbeing question answers - While you are a member, then 30 days. Deleted sooner if you withdraw your permission
Posts and comments - Kept after you leave, with your name attached, unless you ask us to remove them
Direct messages - While you are a member, then 30 days
Assistant conversations - 12 months
Live session bookings and attendance - 24 months
Emails between us - 24 months
Complaints - 6 years from closure
What happens to your posts when you leave
Please read this before you post something personal.
If you close your account, or your access ends because your organisation's arrangement has ended, anything you posted or commented stays in the community, with your name attached. Your profile becomes inaccessible but your posts do not disappear.
We do this so conversations other members took part in do not fall apart when one person leaves.
If you would rather your content was removed, tell us and we will remove it. Use the Manage your information form at together.thriveologie.co.uk/c/manage-your-information, or email hello@thriveologie.co.uk. You can ask before you leave or at any point afterwards, and you do not need to give a reason.
We send you emails needed to run your account, such as confirming your sign up or telling you about a change to this notice. You cannot opt out of those while you have an account.
Separately, you can choose to receive occasional emails about new content and events. That is optional. Unsubscribe any time using the link in any of those emails, or by telling us.
We do not send you marketing on behalf of anyone else.
Together uses cookies and similar technologies. Our Cookie Notice at together.thriveologie.co.uk/c/cookie-notice explains which ones, what they do and how to change your choices.
We take reasonable steps to protect your information, and so does Circle as the platform we are built on.
No online service can promise perfect security. If something goes wrong that affects you, we will tell you.
Please keep your login details to yourself, and tell us if you think someone else has access to your account.
Together is for people aged 18 and over. It is not designed for children and we do not knowingly collect information about anyone under 18.
If we find that an account belongs to someone under 18, we will close it and delete their information.
You have the right to:
Ask what we hold about you, and get a copy
Correct anything that is wrong
Ask us to delete your information, in certain circumstances
Ask us to limit what we do with it, in certain circumstances
Object to us using it, where we rely on legitimate interests
Get a copy in a portable format, where we rely on consent or on our contract with you
Withdraw your consent at any time, including your permission for the wellbeing questions
Not be subject to certain decisions made only by a computer, without a person involved
The quickest ways to use them:
Your wellbeing permission: untick the box in your profile. It takes one tap
Your spaces and interests: change them yourself in your profile at any time
Marketing emails: the unsubscribe link in any of them
Everything else: the Manage your information form at together.thriveologie.co.uk/c/manage-your-information, or email hello@thriveologie.co.uk
We will respond within one month. If your request is complicated we may need longer, and we will tell you if so. There is no charge.
We may update this notice. The version number and date at the top tell you when we last did.
If we change something that materially affects you, we will tell you in Together and by email before it takes effect.
Please tell us first. You can:
Use our data protection complaints form at together.thriveologie.co.uk/c/data-protection-complaints
Email us at hello@thriveologie.co.uk
We will acknowledge your complaint within 30 days of receiving it. We will look into it, tell you the outcome, and keep you updated on our progress while we do.
If you are not happy with how we handle it, you can raise the matter with the Information Commissioner's Office. Online: ico.org.uk/make-a-complaint/. Telephone: 0303 123 1113.
Thrive Health and Wellness (Collaborative) Limited, Forest House Office, 3 to 5 Horndean Road, Bracknell, Berkshire, RG12 0XQ. hello@thriveologie.co.uk