Who We Are

Nurture Nest Care Ltd (“we”, “our”, or “us”) provides care and support services in accordance with the requirements of the Data Protection Act 2018 and the UK General Data Protection Regulation (UK-GDPR). We are registered as a Data Controller with the Information Commissioner’s Office (ICO) under registration number ZB734810.

2. Purpose of This Notice

This Privacy Notice explains how we collect, use, store, and protect your personal information. It also outlines your rights and how you can exercise them.

3. The Information We Collect

We may collect and process personal data about you, including:

• Service users: name, date of birth, address, contact details, next of kin, health and care information, and any relevant support records.
• Employees and volunteers: contact details, employment history, training records, qualifications, and payroll information.
• Suppliers and contractors: business contact details, payment details, and relevant correspondence.

We only collect information necessary to provide safe, effective, and lawful care and business operations.

4. How We Use Your Information

We use your information to:

• Deliver and manage our care and support services
• Meet our legal and contractual obligations
• Maintain employment and training records
• Communicate with you and your representatives
• Manage quality assurance, complaints, and safeguarding processes
• Fulfil regulatory requirements set by authorities such as the CQC or local authorities

We do not use your information for marketing purposes unless you have explicitly consented.

5. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent – when you have given us permission to process your information
• Contract – when processing is necessary to provide a service or fulfil an agreement
• Legal obligation – when required by law (e.g., health and safety, safeguarding, payroll)
• Vital interests – to protect someone’s life or wellbeing
• Legitimate interests – when processing is necessary for our operational needs, provided it does not override your rights

6. Data Sharing

We only share personal data when necessary and in accordance with data protection law. This may include sharing with:

• Health and social care professionals involved in your support
• Local authorities, regulators, and safeguarding teams
• Payroll and pension providers (for staff)
• Approved contractors or service providers under data-sharing agreements

We will never sell or share your data for marketing or unrelated purposes.

7. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected. When data is no longer required, it is securely deleted or destroyed. Details of retention periods are outlined in our Data Retention Policy, available upon request.

8. Data Security

We implement robust technical and organisational measures to protect personal data from unauthorised access, loss, or misuse. These include password protection, secure storage, staff training, and access controls.

9. Your Rights

Under the UK-GDPR, you have the following rights:

• Right to be informed – to know how your data is used
• Right of access – to request a copy of your personal data
• Right to rectification – to correct inaccurate information
• Right to erasure – to request deletion of your data in certain circumstances
• Right to restrict processing – to limit how your data is used
• Right to data portability – to transfer your data to another provider
• Right to object – to stop processing under certain lawful bases

You can exercise these rights by contacting us directly (see below).

10. Data Breaches

In the unlikely event of a data breach, we will follow our Data Breach Procedure and notify the ICO and affected individuals where required.

11. Data Transfers

We do not routinely transfer personal data outside the UK. If this becomes necessary, we will ensure that adequate safeguards are in place in line with UK-GDPR requirements.

12. Contact Details

If you have questions, wish to exercise your data rights, or make a complaint about how your data is handled, please contact:

Our Data Protection Lead
Sana Iqbal
Email: nurturenestcareltd@hotmail.com
Address: 42 Reet Gardens, Slough

If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk or by calling 0303 123 111