1. Introduction

Nurtura Recruitment Ltd is committed to protecting personal data, handling information lawfully and fairly, and maintaining confidentiality in a way that supports safe recruitment, safeguarding and professional accountability.

This Privacy Notice explains how Nurtura collects, uses, stores, shares and protects personal data when individuals apply to work through Nurtura, work on assignment, are introduced to clients for permanent roles, engage with Nurtura as a client or business contact, or use the Nurtura website and related services.

This notice should be read alongside Nurtura’s Data Protection & Confidentiality Policy, Safer Recruitment Policy and Data Retention Schedule.

2. Who We Are

Nurtura Recruitment Ltd is a private recruitment agency and employment business. It acts as the data controller for the personal data it collects and uses for its own recruitment, employment, compliance and business operations.

Nurtura Recruitment Ltd is registered with the Information Commissioner’s Office under registration reference ZC119366.
Registered address: 42 Montrose Way, Plymouth, Devon, PL5 3FP
Email: admin@nurturarecruitment.com
Telephone: 07498 078854
ICO Registration Reference: ZC119366

3. The Information We Collect

Nurtura may collect and process personal data including identity and contact details, date of birth, right to work evidence, CVs and employment history, interview notes, references, qualifications, training records, availability, timesheets, payroll and bank details, assignment history, complaints, conduct information and correspondence.

Where roles and circumstances make it lawful and necessary, Nurtura may also process special category data and criminal offence data, including health information relevant to fitness for work or adjustments, diversity information where volunteered, DBS status information, safeguarding information and suitability risk assessments.

For clients and business contacts, Nurtura may process names, job titles, work contact details, booking information, billing information and service communications.

For website users, Nurtura may process enquiry details, IP address, browser or device information and website usage information where website cookies, analytics or related tools are used.

4. How We Collect Personal Data

Nurtura collects information directly from individuals through registration forms, CVs, website forms, interviews, telephone calls, email correspondence, compliance documentation and timesheets.

Information may also be collected from referees, former employers, clients, professional bodies, right to work sources, DBS processes, publicly available professional profiles, payroll and pension providers, and other third parties where lawful and proportionate.

5. Why We Use Personal Data

Nurtura uses personal data to assess suitability for work, provide recruitment and work-finding services, place or introduce individuals to assignments and permanent roles, manage compliance and safeguarding checks, maintain worker and client records, operate payroll and invoicing, handle complaints or concerns, protect children and vulnerable people, meet legal and regulatory obligations, and improve business operations and service quality.

6. Lawful Bases for Processing

Nurtura relies on one or more lawful bases under the UK GDPR depending on the processing activity. These include contract, taking steps at the request of the data subject before entering into a contract, legal obligation, legitimate interests, consent where appropriate, vital interests and, where applicable, substantial public interest conditions under the Data Protection Act 2018.

Where special category or criminal offence data is processed, Nurtura will only do so where an additional lawful condition applies and where the processing is necessary, proportionate and appropriately safeguarded.

7. Special Category Data and Criminal Offence Data

Nurtura recognises that safer recruitment in children’s services and other regulated settings may involve sensitive information. Special category data and criminal offence data are handled only where lawful, role-relevant and necessary to make defensible recruitment, employment, safeguarding or compliance decisions.

DBS checks, including enhanced and barred list checks, are requested only where the role is legally eligible. Nurtura does not retain DBS certificate information longer than necessary and will normally retain such information for no more than six months after the recruitment decision unless a justified exceptional circumstance applies.

8. Who We Share Personal Data With

Personal data may be shared, where relevant and lawful, with clients and prospective hirers, referees, former employers, professional bodies, payroll and pension providers, insurers, IT and database providers, accountants, legal advisers, right to work and DBS processing providers, regulators, the police, local authorities, the LADO, social care, the courts and other statutory bodies.

Nurtura shares only what is necessary for the relevant purpose and expects third parties to process information securely and lawfully.

9. International Transfers

Nurtura seeks to store and process personal data within the United Kingdom. Where a supplier or system involves international transfers, Nurtura will ensure that appropriate safeguards are in place in line with UK data protection law.

10. Retention of Personal Data

Nurtura retains personal data only for as long as necessary for the purpose for which it was collected, taking account of legal, regulatory, safeguarding, contractual, insurance and operational requirements.

Detailed retention periods are set out in Nurtura’s Retention & Disposal Policy and Schedule. Key examples include keeping right to work evidence for the duration of employment or engagement and for two years afterwards, PAYE records for three years from the end of the relevant tax year, and company accounting records for six years from the end of the relevant financial year.

11. Data Subject Rights

Individuals have rights under data protection law including the right to be informed, the right of access, the right to rectification, the right to erasure where applicable, the right to restrict processing, the right to object, the right to data portability in certain cases and rights relating to automated decision-making.

Nurtura will respond to valid requests within the timescales required by law unless an exemption applies.

12. Data Security

Nurtura applies proportionate technical and organisational measures to protect personal data. These may include access controls, strong passwords, multi-factor authentication, encrypted or secure cloud systems, locked storage, secure sharing methods, staff training, confidentiality obligations and secure destruction processes.

13. Data Breaches

All suspected personal data breaches must be reported internally without delay. Nurtura will investigate incidents, maintain a breach log, and where required notify the Information Commissioner’s Office within seventy-two hours and affected individuals where there is a high risk to their rights and freedoms.

14. Complaints

Individuals who have concerns about how their personal data has been handled should contact Nurtura in the first instance at admin@nurturarecruitment.com or on 07498 078854 so the issue can be reviewed and addressed.

Individuals also have the right to complain to the Information Commissioner’s Office if they remain dissatisfied.

15. Review and Publication

This Privacy Notice should be published on the Nurtura website and provided to candidates, workers, clients and other relevant individuals at the point personal data is collected or as soon as reasonably practicable afterwards.