Privacy policy

Last updated: 02 January 2026

Nu Start Ltd (“Nu Start”, “we”, “us”, “our”) is committed to protecting the privacy and personal data of individuals who engage with our services and website. This Privacy Policy explains how we collect, use, store and protect personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Nu Start Ltd provides specialist services for children and young people, including:

  • Children’s residential care
  • Nu Start One Support Service
  • Crisis intervention and short-notice support
  • Training and workforce support

We work primarily with Local Authorities, professionals, partner agencies, families and young people.

Data Controller: Nu Start Ltd
Contact email: info@nustart.org.uk

2. The personal data we collect

We may collect and process personal data including:

  • Contact details (name, email address, phone number)
  • Professional details (job role, organisation, Local Authority)
  • Enquiry information submitted via our website or email
  • Recruitment and training-related information
  • Safeguarding-related or sensitive information where relevant to our services

We only collect information that is necessary and proportionate to our work.

3. Special category and safeguarding data

In the course of delivering children’s services, we may process special category data, including information relating to health, behaviour, safeguarding concerns and social care involvement.

Such information is handled with strict confidentiality and only where there is a lawful and necessary basis to do so.

4. How we use personal data

We use personal data to:

  • Respond to enquiries and referrals
  • Deliver and manage our services
  • Communicate with Local Authorities, professionals and partners
  • Meet safeguarding and legal obligations
  • Improve our website and services
  • Manage recruitment, training and workforce activity

5. Lawful basis for processing

We process personal data under one or more of the following lawful bases:

  • Legal obligation – where required by law or regulation
  • Public task – where processing supports statutory children’s services
  • Legitimate interests – to operate and improve our services
  • Consent – where individuals have given clear permission (e.g. website enquiries or cookies)

6. Data sharing

We may share information with relevant parties where necessary, including:

  • Local Authorities
  • Safeguarding partners
  • Regulatory bodies
  • Professional advisers

We do not sell personal data and only share information where lawful, necessary and proportionate.

7. Data security and retention

We take appropriate technical and organisational measures to protect personal data from loss, misuse or unauthorised access.

Information is retained only for as long as necessary and in line with legal, regulatory and safeguarding requirements.

8. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request erasure (where applicable)
  • Object to or restrict processing
  • Request data portability

Requests can be made by contacting us using the details above.

9. Cookies and website analytics

Our website uses cookies to help improve user experience and understand how the site is used. Details of the cookies we use, and how you can manage your preferences, are provided via our cookie consent tool.

You can change or withdraw your cookie consent at any time.

10. Complaints

If you have concerns about how your data is handled, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO).

ICO website: www.ico.org.uk